Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9a741094-99c9-3a73-98d8-bf24ee7737cf.roa
File:                     9a741094-99c9-3a73-98d8-bf24ee7737cf.roa (raw, json)
Hash identifier:          5ZD7ryN9NFsNZKbUnHiurTVXoiHtmH2TrGKKREIZKbw=
Subject key identifier:   B6:32:7E:97:A7:35:25:EF:3E:8A:A7:08:73:DA:40:7A:FE:C8:71:07
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF2109E188CCEBA023E0D4840
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9a741094-99c9-3a73-98d8-bf24ee7737cf.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:9e:18:8c:ce:ba:02:3e:0d:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=f9d7fa9f-6af9-4eeb-a8df-6fe9efd6abcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ce:82:b9:a6:f8:80:6d:74:bb:52:73:21:e0:
                    32:02:1a:83:85:2d:54:eb:4a:5f:ae:84:9b:e9:65:
                    f5:0a:3c:53:f0:27:04:96:4b:c0:da:a3:ed:6b:ba:
                    4d:fd:a7:24:4a:05:62:22:7e:4e:ce:c9:15:1c:9b:
                    e3:fe:5f:1c:95:a8:c1:89:dc:d8:b9:b2:7b:1b:9c:
                    10:0a:b5:07:a2:c1:3f:fc:1a:8f:8b:65:6b:84:d5:
                    5b:b0:96:2e:10:13:3d:72:b1:0d:40:16:cf:29:f8:
                    f9:1f:f4:09:4a:55:03:f4:ac:8e:d8:95:cd:3a:29:
                    60:e8:83:92:04:5e:5b:09:d5:31:ad:5c:75:70:9b:
                    10:47:0f:b2:12:4c:96:8c:ba:a3:3b:7f:2b:7f:7d:
                    21:af:1f:98:14:91:2c:2c:e9:07:05:8c:c8:ff:16:
                    49:74:0b:a2:34:9a:f3:9b:f3:65:27:c7:c0:86:1a:
                    68:ec:30:0a:09:c3:e8:b6:c7:7c:33:cd:bf:66:1a:
                    68:9d:3c:9d:9e:05:0a:21:57:27:4d:5e:ba:ae:b6:
                    fe:d3:8f:83:e8:28:b3:9c:be:3d:7e:32:3b:a8:d2:
                    56:ca:ef:f8:76:a9:03:34:43:aa:db:47:74:52:d8:
                    9b:d3:08:2e:8c:75:d8:e5:2f:e4:38:3d:1c:5e:59:
                    f7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:32:7E:97:A7:35:25:EF:3E:8A:A7:08:73:DA:40:7A:FE:C8:71:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9a741094-99c9-3a73-98d8-bf24ee7737cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:a6:28:84:15:3a:8f:7a:04:50:ac:b8:c7:36:d8:cd:a8:ea:
         11:43:18:64:06:89:eb:b0:76:0d:5c:27:5d:58:72:36:b6:84:
         06:5a:ec:d6:60:b7:0e:0e:36:60:df:7d:89:2f:aa:53:f2:d2:
         2d:31:01:0a:35:9d:dc:8b:e2:32:6d:89:ba:31:8b:e4:04:93:
         ca:e3:a2:55:c4:d3:bc:7c:f7:59:20:c1:d5:bc:f4:69:1e:bc:
         9f:9b:28:3d:01:0d:55:2c:00:3d:09:fb:39:4a:d7:93:1e:99:
         1a:0d:6b:59:c8:da:87:15:83:0a:09:bc:c3:b4:64:89:65:7e:
         b6:42:9b:c0:58:8e:09:07:67:d2:67:40:18:cc:16:04:2a:da:
         3e:ed:c6:9b:ce:be:a1:56:e0:bd:d5:a6:3c:e4:7d:42:89:a5:
         40:42:2d:6b:71:2b:c7:48:87:8f:d8:41:75:1c:38:6d:35:2b:
         59:79:82:f3:ea:a1:b5:be:9b:d4:99:a0:f9:cd:6b:5a:3f:8b:
         15:2d:34:7c:c3:ef:f9:d5:4a:af:fc:d7:21:dd:97:29:cc:23:
         21:bd:a7:03:82:6e:26:ad:db:41:6e:9a:cd:78:c4:d2:94:3c:
         2e:df:b6:f2:70:61:48:89:e7:3f:6a:09:ca:77:95:ae:f3:e7:
         d8:3a:b3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:32:57 2026 by rpki-client