Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7f3f6499-c4ca-38ba-b440-7c710b900f10.roa
File:                     7f3f6499-c4ca-38ba-b440-7c710b900f10.roa (raw, json)
Hash identifier:          sp5BQu7pRjxsJvlYq/ctEC7Et9pwN+JuDqErnBNPyjU=
Subject key identifier:   41:2D:B2:EA:83:FF:BF:65:5A:EA:B3:98:F1:81:74:30:32:39:02:80
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DEF45FF5D7B03C01BEA0CC100
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7f3f6499-c4ca-38ba-b440-7c710b900f10.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     41264
IP address blocks:        104.132.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:ff:5d:7b:03:c0:1b:ea:0c:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=8f36955f-2e2e-42bb-947e-ef739dee0f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:5b:da:8d:15:51:fb:84:a6:9f:66:01:09:
                    2d:94:4f:ef:c4:fe:c9:a4:2d:f1:48:44:87:d6:58:
                    2f:c7:42:ab:28:30:04:5f:5f:4f:6b:26:f8:af:2e:
                    6a:bd:9e:10:0f:6d:1a:a6:f1:5d:49:75:76:1a:c7:
                    66:44:8a:3f:51:7a:48:a6:19:1a:e7:90:3e:f5:45:
                    93:7b:86:d6:ed:82:3c:31:00:97:88:4d:f9:a6:ad:
                    f7:66:57:2b:b7:6e:a8:3f:26:ba:d5:3e:cb:e5:38:
                    0f:ba:6c:eb:73:d8:07:be:56:9a:92:27:86:76:72:
                    9a:fd:bc:28:56:7f:69:e3:64:f8:1a:81:f2:f3:80:
                    b0:62:b7:03:b3:05:cb:22:7e:c3:e4:ee:b0:a8:bb:
                    e8:1c:1d:22:4b:90:7a:61:04:c5:09:94:a9:91:10:
                    cf:3b:97:77:6a:8e:1c:f4:65:c0:12:eb:b5:29:68:
                    1d:ca:d2:fd:14:4b:47:8f:97:f5:1a:ee:4b:c1:02:
                    9c:cf:56:85:8b:b9:b8:b8:0b:55:b3:8a:41:9e:78:
                    2f:d2:d9:fd:f8:f3:22:dc:ef:b2:f1:61:5e:97:55:
                    08:61:6f:f0:ee:8a:b2:a3:49:c1:74:75:1f:bd:33:
                    92:d8:f8:c4:dd:1d:e0:11:15:87:ac:db:b8:db:5e:
                    09:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2D:B2:EA:83:FF:BF:65:5A:EA:B3:98:F1:81:74:30:32:39:02:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7f3f6499-c4ca-38ba-b440-7c710b900f10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:1f:2e:24:25:a5:41:d7:f7:44:c8:cc:2b:64:25:51:dc:0d:
         32:dd:21:fe:f5:8e:0a:29:73:3c:0c:cf:79:08:b0:44:a4:2e:
         f8:6c:94:9c:ce:cf:21:bf:99:3d:17:2d:8a:ee:f3:32:53:22:
         cc:42:5a:f7:e7:76:91:d4:cf:ff:1e:05:c4:0a:8a:f7:1e:9b:
         4c:2b:0c:c3:47:f7:87:f1:d1:c4:87:4c:f1:82:5e:7f:9d:de:
         e2:ca:23:e3:35:87:f8:04:67:04:5c:b0:73:8d:49:2e:3e:03:
         53:37:57:e4:03:3c:d2:3b:c6:4a:67:c6:54:74:dc:cf:ff:79:
         b5:b1:c2:78:62:0c:59:c6:b6:db:2d:99:38:b3:e4:0f:31:cf:
         3f:c6:51:d9:cd:0a:95:9d:43:b3:a0:74:3e:19:5c:6f:b6:89:
         60:60:5a:77:b3:88:06:11:2d:6b:1b:b5:bf:b5:60:22:70:bc:
         9e:77:58:df:1e:87:e0:b2:15:28:ec:45:2c:e5:11:4a:c3:02:
         c1:00:a8:2c:71:45:38:36:5e:0e:6b:1c:1e:da:d2:69:ea:33:
         22:ad:6d:ea:f0:70:40:19:32:c3:9a:09:5e:c1:90:33:5b:a1:
         a9:7f:27:60:a2:80:83:57:b2:9a:4a:d0:66:5d:44:25:01:5f:
         d1:9e:82:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:33:56 2026 by rpki-client