Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/757474c0-a2a7-39e1-8790-73455f880c57.roa
File:                     757474c0-a2a7-39e1-8790-73455f880c57.roa (raw, json)
Hash identifier:          yFCl37JOj+CyUqw/GdjsTOsd+270MnYwVZ0cpfxCwVo=
Subject key identifier:   CB:C3:D8:34:C3:3B:C2:B4:79:DA:2D:6F:A0:EF:F8:B3:27:AC:E1:F3
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA7968160BE3F1245FFA79D00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/757474c0-a2a7-39e1-8790-73455f880c57.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     41264
IP address blocks:        104.133.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:81:60:be:3f:12:45:ff:a7:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ae001f3e-b43d-42ba-96f4-0da393721629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b7:b6:c1:0c:5d:4d:a5:20:84:42:7f:94:b3:
                    c1:a4:af:c1:03:82:5c:41:86:89:1f:7a:97:ab:4c:
                    aa:52:5d:ac:30:d7:b0:d4:7e:69:22:98:ec:46:0b:
                    7a:4d:14:29:1e:7c:f3:09:35:32:17:dd:36:01:f6:
                    ec:aa:d6:d0:3d:66:3c:09:9c:e6:5e:93:98:5f:99:
                    f9:9b:8d:03:54:cc:64:ed:b1:ac:3f:ca:09:a2:c0:
                    6b:54:81:6d:cf:d2:5e:fa:b1:15:19:04:59:f5:97:
                    5d:8d:8f:bc:a5:16:40:66:16:14:06:9e:3d:03:41:
                    3a:d2:8b:6d:b1:38:e2:a8:e3:1e:b1:16:8c:d5:40:
                    a1:40:09:f5:a0:04:38:dd:15:fb:2f:08:0d:5e:0c:
                    30:b4:c7:0e:f8:e8:94:1c:52:e6:f2:9c:32:f9:a7:
                    e2:07:a0:93:f4:db:a4:a9:9b:d3:8c:68:25:1a:fa:
                    8d:7d:68:47:e7:04:e4:b4:bf:9b:5d:7c:c6:ac:9f:
                    3a:16:e1:c6:8a:53:45:e9:b1:50:fc:5f:9b:ff:91:
                    ad:0f:77:77:ba:cc:a5:d2:d7:0e:5e:01:11:26:46:
                    12:c7:52:12:cf:8e:1b:bc:d1:1a:ab:6b:eb:6b:40:
                    b9:de:9c:d5:b4:73:7f:39:b7:57:1a:69:40:3a:da:
                    c5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C3:D8:34:C3:3B:C2:B4:79:DA:2D:6F:A0:EF:F8:B3:27:AC:E1:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/757474c0-a2a7-39e1-8790-73455f880c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:be:a4:33:a8:f9:66:83:de:4c:1c:a2:37:02:6a:9a:eb:46:
         50:d0:23:90:39:9f:f9:e2:02:e5:61:81:88:b4:3a:72:4f:98:
         73:66:c3:a9:5d:90:c5:fb:5c:17:8d:42:b8:06:e3:56:03:f6:
         7b:29:36:1d:4c:fe:99:53:1c:3f:fe:3c:3d:04:a2:b0:85:da:
         e0:b9:70:37:bd:3e:f3:18:60:26:95:5d:56:c9:9a:99:55:35:
         5e:43:6c:c1:5b:ea:28:99:7e:d2:60:47:03:b3:02:73:8a:ea:
         fb:15:e9:c8:6f:8c:bd:20:36:2e:0d:04:8c:d5:6c:e5:58:c1:
         c6:c0:59:94:ce:8f:bc:b8:be:d1:71:ad:8e:9c:1d:6f:53:ff:
         d4:ee:fc:3e:a2:ca:47:64:03:70:51:df:58:07:70:b8:4a:62:
         24:48:98:89:b9:3e:47:71:11:51:7f:9a:3f:09:b9:8f:49:26:
         1a:27:c2:d3:b5:e5:2f:bc:78:27:84:76:6f:45:ce:9e:02:e7:
         5d:5b:61:76:92:68:e8:01:8d:57:e8:f7:b0:c9:a7:5e:29:22:
         74:9e:52:a2:43:17:f3:af:c9:51:ad:3d:2f:9b:c9:6b:c2:ce:
         a2:c0:c4:bb:0b:c4:50:73:d2:c6:cc:76:93:41:ac:b7:11:87:
         a1:5c:55:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:59:08 2026 by rpki-client