Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9158427a-1d04-354e-adfe-4f9895288e0a.roa
File:                     9158427a-1d04-354e-adfe-4f9895288e0a.roa (raw, json)
Hash identifier:          XbuIf+vfgihieBtkyU+032KihSXDuJVDM3taBbrhVyc=
Subject key identifier:   1C:B0:10:2E:AA:FA:DE:35:9C:C2:AE:80:A0:35:DE:5A:E2:8D:7E:77
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB7E94EF248F708BA5F140
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9158427a-1d04-354e-adfe-4f9895288e0a.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:7e:94:ef:24:8f:70:8b:a5:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=05c80c56-8a56-4801-b4b6-c7b0305e011b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f8:a3:4a:e6:f4:0e:c1:3b:c8:cb:eb:ae:86:
                    6a:f9:a0:80:4c:7a:eb:5a:9a:f5:64:d1:da:b1:5e:
                    4f:8e:c1:03:28:ee:5f:aa:94:fc:b9:5d:22:37:c7:
                    30:4c:73:2a:34:af:72:1c:ae:0d:c2:66:c5:01:66:
                    68:6a:23:63:b6:d7:62:db:8d:d2:b0:b2:53:95:43:
                    bf:b6:ee:b4:0d:2a:f6:fd:1d:7e:fa:35:b8:b9:76:
                    47:63:a8:ce:70:40:f1:3d:74:6a:4c:45:42:b2:b8:
                    2c:00:3b:aa:31:7a:4f:23:19:ed:7f:9b:87:19:d0:
                    af:c2:48:21:77:c0:fb:e6:6a:aa:b2:ca:b1:c4:bd:
                    48:28:fb:8c:6c:8f:5e:3a:7a:ad:aa:72:5d:33:fa:
                    05:3f:29:c3:16:be:a6:9d:06:f3:7b:9f:38:8d:f1:
                    d2:7d:de:c1:5b:ae:07:f2:7e:09:95:a9:b2:b7:73:
                    f6:b5:86:7f:29:97:8d:39:05:fc:7c:96:18:78:d6:
                    ca:01:e7:ef:7c:bf:eb:61:77:32:b8:7d:d9:8e:fb:
                    90:8e:55:93:ab:67:66:92:07:50:8a:19:d3:44:06:
                    37:bb:e3:2d:be:95:21:1e:4b:c3:3d:01:87:03:eb:
                    c7:9f:89:fc:09:3b:c2:35:11:df:a8:3c:d6:c7:43:
                    7f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B0:10:2E:AA:FA:DE:35:9C:C2:AE:80:A0:35:DE:5A:E2:8D:7E:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9158427a-1d04-354e-adfe-4f9895288e0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:e1:85:ca:55:d2:4e:f3:e3:0c:1d:a5:b7:9e:fc:25:6c:37:
         63:b7:b3:9f:57:ac:fd:07:c8:58:92:01:f4:6f:8d:1e:b5:a6:
         e9:d8:50:d1:b9:a5:a6:34:5c:03:64:ed:1c:20:5f:32:3c:ac:
         13:58:44:75:bc:10:8d:25:98:fd:ef:f0:d9:1a:c4:aa:67:ac:
         74:4a:80:2c:b1:bd:0f:d7:66:69:f9:a3:c5:64:4b:39:9d:78:
         bb:64:98:aa:be:ba:a0:f4:45:6a:97:a7:6b:ec:e0:3c:5e:89:
         05:6e:ba:8a:70:04:35:80:8c:4c:64:1f:52:6d:20:76:f9:66:
         3d:b1:02:34:35:fe:54:56:ef:d7:65:8b:80:7e:f2:62:32:25:
         c8:56:30:6b:ec:35:53:e6:6c:18:cf:5f:93:6e:24:69:0a:b0:
         98:f4:46:94:92:e3:25:c6:2f:96:45:73:a9:3f:7e:4f:94:56:
         48:20:c5:fc:ea:4c:98:04:4f:90:7f:6b:b1:81:7c:c9:b3:44:
         97:7f:d8:89:f0:86:42:d6:1c:ea:36:c9:cc:de:8a:93:22:33:
         57:c4:62:15:1d:fb:71:69:50:d6:4e:0a:5b:db:30:be:b7:ae:
         e5:17:f5:13:10:3d:a4:4b:21:d2:87:ba:c4:88:22:57:e1:4b:
         b7:7a:ad:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:35:20 2026 by rpki-client