Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa
File:                     918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa (raw, json)
Hash identifier:          7rrFO8vE8KkmmTpmbRWUi7kMKUVBmf3Z9/qh52Au1vM=
Subject key identifier:   8E:4C:39:E8:A6:FD:18:79:82:F3:91:46:DF:3B:5C:BC:CB:43:D9:E7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB70E895872ED1040519A0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:70:e8:95:87:2e:d1:04:05:19:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=e7bb4110-2179-4df7-8d23-8691eef0e440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:23:57:2f:3a:71:60:3f:10:73:10:10:c0:
                    eb:04:82:2a:0a:37:3f:3d:18:67:5e:34:be:25:e9:
                    c0:19:08:d2:e3:9d:47:ad:c0:38:b2:c7:8b:91:82:
                    b6:96:9d:36:fa:10:3d:32:48:b7:1b:c8:d9:1c:39:
                    96:01:43:a1:cf:d6:6e:d4:4a:f7:6f:14:b4:59:15:
                    c4:b8:d8:c6:5e:73:2a:ae:ec:44:1c:86:d0:df:a9:
                    9d:f5:c0:73:7e:5f:27:9b:de:06:47:d8:7e:de:39:
                    d7:23:18:01:49:ed:16:58:14:e5:09:72:d9:98:40:
                    88:8d:71:8e:67:41:05:af:3e:df:ce:1c:23:36:b5:
                    c1:58:e3:af:ab:2a:a9:ff:89:80:d1:d3:c2:67:b6:
                    8c:b2:da:df:17:55:34:fe:b5:68:0e:aa:34:2d:62:
                    31:1f:0e:67:d1:0b:8c:28:44:50:14:d4:bb:bd:77:
                    46:04:80:a6:af:6f:3b:4f:59:00:47:25:86:4a:be:
                    05:a7:21:f6:45:4f:0c:85:78:32:23:14:b1:7a:01:
                    ee:d8:06:ba:33:9e:6c:a3:3f:3b:b8:cf:be:29:07:
                    31:8a:04:b3:97:e3:99:34:95:e7:66:97:1c:75:91:
                    85:b4:fa:bf:a4:02:f3:3a:45:fe:cd:7f:db:9a:21:
                    37:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4C:39:E8:A6:FD:18:79:82:F3:91:46:DF:3B:5C:BC:CB:43:D9:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:86:99:e1:ed:2d:3f:89:3d:29:6e:1e:6e:fb:63:2c:be:3b:
         35:d8:f9:47:8a:ec:87:91:df:48:80:0c:9c:d7:41:71:87:a3:
         5d:ae:dd:f9:eb:1e:42:15:87:bb:40:7a:34:6b:a0:82:a4:a7:
         03:26:1e:74:27:ea:dd:56:60:82:ba:93:83:02:c3:b5:ea:7d:
         35:f7:bc:50:fd:73:15:ff:6a:7a:1b:bf:b1:76:47:59:b3:9f:
         f3:c6:bc:ff:e2:0a:ef:bc:ce:14:6b:a8:6a:0d:db:a0:1e:3a:
         5b:08:ed:17:59:dc:75:db:ea:ab:ba:cf:fb:54:c8:98:e7:48:
         17:1e:5d:6e:2b:eb:46:56:99:4e:a9:0d:94:12:0b:7c:ed:45:
         b8:63:b4:9e:6b:56:7d:a7:dc:07:5d:d7:35:28:97:0c:ea:b8:
         86:59:df:e5:c4:d3:e7:1e:e5:11:9c:33:8d:3e:cb:05:9f:fc:
         08:ac:d5:2b:1b:24:c7:02:32:33:65:ed:5d:08:40:61:0d:fe:
         dd:10:81:26:42:6b:8b:93:c6:80:a5:13:3c:40:b9:fd:5c:15:
         3a:fe:2f:1c:c8:2b:e0:dd:d2:e0:7e:d6:5f:ea:b7:6d:81:3c:
         fb:21:a9:a8:12:63:d9:c8:19:7c:9c:af:b2:c3:66:9b:25:ea:
         22:be:1f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:30:33 2026 by rpki-client