Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6f911cb0-5b83-3eaf-92b0-03eb52fea838.roa
File:                     6f911cb0-5b83-3eaf-92b0-03eb52fea838.roa (raw, json)
Hash identifier:          wcvyhpTflmzyx2nb+Gvw3Ezs/pRxKVIGINNjJo9RzyA=
Subject key identifier:   D8:3C:37:65:0F:A9:D2:7C:6F:B3:A0:0F:79:E6:E1:33:47:E0:26:68
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB6FA9D380DDF87DCC4398
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6f911cb0-5b83-3eaf-92b0-03eb52fea838.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:6f:a9:d3:80:dd:f8:7d:cc:43:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=351311d6-4679-4afd-aef2-1fc1357c1444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:b3:2d:68:a0:24:21:d8:ba:3e:1c:4d:dd:
                    13:7f:ed:ae:4b:bd:2d:44:1c:90:5a:d8:df:34:b1:
                    08:d1:ae:fb:b7:8e:c9:f1:28:b0:13:1c:6e:f5:06:
                    91:ee:ad:8a:be:a8:1e:92:f3:b2:16:d2:36:ac:15:
                    e0:65:04:bc:b0:42:e3:06:9a:44:f4:a0:f5:86:d7:
                    5a:c2:3e:95:69:3a:dc:68:f3:1f:26:f9:b5:b2:e5:
                    e2:ce:34:2a:ce:c6:68:40:88:88:7a:37:d6:16:56:
                    49:64:17:04:35:f7:bd:c3:8c:50:cc:cd:a7:ed:6e:
                    b0:34:67:f1:67:9d:43:56:77:43:01:d2:0f:5d:7d:
                    49:1a:3a:8b:cc:50:0d:bb:de:93:4e:44:92:01:2e:
                    56:25:7a:22:5c:b3:33:42:e5:80:37:b6:c1:4f:fe:
                    62:d1:72:59:92:3f:16:62:3b:d0:19:1b:28:a4:a5:
                    8c:cd:6a:e2:41:d8:70:1e:b2:80:b9:8c:df:29:bd:
                    19:06:7e:64:8a:7d:a7:05:27:98:d0:3a:d7:67:7a:
                    aa:54:c3:07:31:69:65:f9:b9:70:17:16:a7:fb:a9:
                    8c:d7:60:e7:d5:0e:ac:28:fd:3c:b0:53:28:35:92:
                    43:25:b4:a4:9d:f9:3f:e2:a5:1b:79:56:8c:29:74:
                    6d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3C:37:65:0F:A9:D2:7C:6F:B3:A0:0F:79:E6:E1:33:47:E0:26:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6f911cb0-5b83-3eaf-92b0-03eb52fea838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:c9:16:cf:56:85:51:c5:ee:58:43:55:9d:d2:51:39:30:f0:
         1d:35:a4:a8:97:ee:e5:89:81:02:2b:10:e8:11:b4:89:6e:a7:
         95:ce:b9:4d:85:be:ba:7e:cc:bf:d7:ec:c1:73:2c:fe:5a:db:
         1e:1d:89:ea:5a:16:ce:f8:b1:69:a2:c2:71:51:d9:c8:8a:48:
         34:61:06:d3:43:a2:ec:b4:62:0b:05:8b:2d:62:46:81:b3:b9:
         9b:f6:e1:5b:5c:82:31:3a:34:44:f2:d4:d1:cc:3a:55:ce:c5:
         52:e6:35:5c:0b:d7:c5:2a:08:55:9a:e3:95:a4:c8:a1:11:46:
         19:66:c0:d8:d3:79:6f:ac:e3:89:ba:4b:78:99:85:c8:09:9c:
         8c:f0:07:bc:09:a1:05:37:44:a1:50:a5:ab:ab:0a:4e:4c:b6:
         ea:51:0f:f1:fb:a6:79:79:85:18:be:09:ff:d0:ea:56:4b:9d:
         9a:89:4a:24:52:53:64:2d:44:20:9e:c9:f2:9e:46:03:82:b1:
         69:fc:5e:49:83:4f:e4:19:10:88:51:8a:f9:40:e4:49:a1:ca:
         6a:a6:44:7a:08:9e:70:6b:c2:7a:a5:37:b8:f6:e1:66:b5:17:
         3b:b0:03:ce:5d:c9:7d:5c:dc:d6:00:5a:8e:60:d7:ad:05:96:
         f6:a8:ea:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:33:02 2026 by rpki-client