Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/725b0cf4-09e9-35e8-8dc9-c44e82e05896.roa
File:                     725b0cf4-09e9-35e8-8dc9-c44e82e05896.roa (raw, json)
Hash identifier:          0g3DINPjcM/K/nPC7ku4BUC+0yqPF4kNo1vgaY5GwVI=
Subject key identifier:   34:A2:7A:F7:3A:C5:4A:75:96:B4:70:C2:D3:61:F0:96:F4:E2:88:22
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB7EA0E60D23C721901780
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/725b0cf4-09e9-35e8-8dc9-c44e82e05896.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:7e:a0:e6:0d:23:c7:21:90:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=b48408d6-c448-4797-9b3d-eff79be9a1e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:9b:8d:c7:1e:6d:8c:a0:02:15:8f:22:84:57:
                    0f:4e:25:5f:bd:a7:48:10:ac:95:37:58:c3:80:84:
                    f5:29:ae:e8:0b:b2:10:f5:2f:1c:35:47:00:13:55:
                    c9:87:02:51:8d:bf:fa:bb:1f:dc:30:e7:8d:3c:81:
                    93:cd:0c:a0:43:cf:18:a4:dc:45:8a:ad:4a:1d:50:
                    59:44:1e:3e:16:38:c2:d4:e3:7c:57:3f:bc:8c:91:
                    cc:d3:bc:f1:ff:b2:ad:54:45:05:94:52:4d:e9:75:
                    a0:b7:69:a9:78:dd:1a:0f:cd:25:a4:69:49:6a:f2:
                    88:e5:d0:3b:11:66:68:24:a7:17:5a:49:97:d0:24:
                    83:89:d0:0a:b3:dd:f8:7e:89:47:60:8c:a8:e6:87:
                    3e:fa:cd:23:7b:ee:83:9f:52:3c:71:b1:7c:4b:c6:
                    be:93:f8:61:d9:a9:02:fc:1a:d1:29:64:28:34:70:
                    6a:60:ec:05:2f:ea:74:00:66:a2:48:69:64:88:26:
                    21:65:ae:58:ed:3f:2c:31:69:24:c9:53:64:9b:20:
                    ef:70:19:5e:ef:cc:5e:c9:a0:17:80:59:e9:5a:43:
                    6a:84:13:a2:e8:fd:5b:08:a1:c0:09:ae:66:e2:47:
                    ad:ae:59:b1:cd:a6:66:ab:16:c0:6b:d9:cb:b8:fd:
                    4d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A2:7A:F7:3A:C5:4A:75:96:B4:70:C2:D3:61:F0:96:F4:E2:88:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/725b0cf4-09e9-35e8-8dc9-c44e82e05896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:6e:88:46:55:b7:a5:9f:5f:ae:80:0b:f1:ad:13:9c:41:b0:
         14:df:3e:3b:68:ad:b3:27:3a:eb:bb:e5:17:05:14:11:56:69:
         a2:b7:62:79:f1:de:13:69:e4:61:09:96:7a:51:e6:50:33:1f:
         d9:af:21:4b:5b:f4:a7:d9:7a:99:ff:e8:20:d2:87:66:8c:31:
         a7:9f:23:9f:5d:7f:2f:eb:0e:66:5e:5d:31:87:c7:b4:94:e8:
         b0:35:9c:a1:ce:72:60:3f:b1:bd:71:99:f6:e7:14:2b:1d:3d:
         3f:e7:bf:dc:b5:2d:a6:f7:00:2a:91:5b:1b:db:56:89:c5:4f:
         38:36:8f:6a:20:96:f3:7c:f9:3a:95:bd:05:d7:37:7e:6c:72:
         5e:02:6b:f9:28:82:aa:65:f8:92:ee:f9:ba:62:69:d9:f6:ba:
         83:16:e7:5c:05:75:1e:f9:c1:e2:45:c7:da:57:43:7c:69:6c:
         d3:eb:58:ff:dd:aa:d8:28:ba:81:ef:db:0f:e5:9e:de:b8:a1:
         1e:53:fa:3e:7b:4f:cc:b0:b8:cc:0d:25:92:bd:59:10:cc:ac:
         2b:3a:0a:d3:cc:3d:3a:c1:df:d8:8b:30:6b:14:9c:00:87:3e:
         3a:cb:19:5a:85:39:8d:b6:be:37:12:32:9f:33:e6:aa:71:eb:
         de:fd:1b:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE30236g5g0jxyGQF4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk
YjQ4NDA4ZDYtYzQ0OC00Nzk3LTliM2QtZWZmNzliZTlhMWU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JuNxx5tjKACFY8ihFcPTiVfvadIEKyVN1jD
gIT1Ka7oC7IQ9S8cNUcAE1XJhwJRjb/6ux/cMOeNPIGTzQygQ88YpNxFiq1KHVBZ
RB4+FjjC1ON8Vz+8jJHM07zx/7KtVEUFlFJN6XWgt2mpeN0aD80lpGlJavKI5dA7
EWZoJKcXWkmX0CSDidAKs934folHYIyo5oc++s0je+6Dn1I8cbF8S8a+k/hh2akC
/BrRKWQoNHBqYOwFL+p0AGaiSGlkiCYhZa5Y7T8sMWkkyVNkmyDvcBle78xeyaAX
gFnpWkNqhBOi6P1bCKHACa5m4ketrlmxzaZmqxbAa9nLuP1NWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDSievc6xUp1lrRwwtNh8Jb04ogiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzI1YjBjZjQtMDllOS0z
NWU4LThkYzktYzQ0ZTgyZTA1ODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIX7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZuiEZVt6WfX66AC/GtE5xBsBTfPjtorbMnOuu75RcFFBFWaaK3Ynnx
3hNp5GEJlnpR5lAzH9mvIUtb9KfZepn/6CDSh2aMMaefI59dfy/rDmZeXTGHx7SU
6LA1nKHOcmA/sb1xmfbnFCsdPT/nv9y1Lab3ACqRWxvbVonFTzg2j2oglvN8+TqV
vQXXN35scl4Ca/kogqpl+JLu+bpiadn2uoMW51wFdR75weJFx9pXQ3xpbNPrWP/d
qtgouoHv2w/lnt64oR5T+j57T8ywuMwNJZK9WRDMrCs6CtPMPTrB39iLMGsUnACH
PjrLGVqFOY22vjcSMp8z5qpx6979Gw4=
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:32:21 2026 by rpki-client