Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9ebf3b5c-d8f4-3fae-96d9-b020ba0ad9c2.roa
File:                     9ebf3b5c-d8f4-3fae-96d9-b020ba0ad9c2.roa (raw, json)
Hash identifier:          BapVmN5KKaWwXw9ngACpiXoDAgA38i6WOR5XRJASkFI=
Subject key identifier:   73:BF:63:A7:ED:8F:26:F1:84:92:4D:FD:51:A2:FE:47:95:E2:32:D6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DEC7B2F4FCD42DAF322FC1A80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9ebf3b5c-d8f4-3fae-96d9-b020ba0ad9c2.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     36411
IP address blocks:        104.133.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:2f:4f:cd:42:da:f3:22:fc:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=55f9cd4e-df73-430e-90d8-5eda91c5f41c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bd:38:04:be:c6:7c:11:40:ac:66:c9:3c:72:
                    2a:f4:84:8e:39:94:e0:5d:cb:f0:e4:ae:82:e0:c0:
                    bb:5a:a9:f8:47:52:01:37:84:cb:b2:f7:dc:fe:bd:
                    a9:b7:4b:5f:f8:03:20:26:c1:8e:05:b1:3a:a9:e4:
                    23:0e:c4:e2:c2:de:b1:cb:99:65:3e:b7:e3:81:08:
                    22:3b:1b:76:9a:31:3c:e9:d0:3b:b3:fd:21:61:49:
                    fa:5e:8b:34:67:e0:06:87:1a:f8:cd:a7:64:7e:ac:
                    99:e2:63:a9:cb:7d:31:2f:53:3f:fc:69:b1:01:74:
                    c7:39:20:73:3c:45:47:2b:bf:45:3e:08:03:44:5a:
                    9f:a6:ba:46:c7:1e:69:b5:16:eb:f3:9a:2d:ae:44:
                    3a:22:d0:4c:85:b9:c5:41:d0:8a:73:50:ae:8d:97:
                    ec:df:c9:4b:8b:dd:21:97:31:86:a2:66:4d:00:a8:
                    f2:68:6c:94:2f:19:3f:9d:23:2e:3f:89:ff:2e:c9:
                    a8:31:e8:68:8e:b6:30:32:5f:a1:c6:05:ac:9e:b6:
                    c5:10:7c:da:9f:9e:64:fe:09:63:c2:f4:7f:c0:4f:
                    06:04:9f:42:c8:0f:7c:0b:16:82:c6:e9:15:31:10:
                    f2:e2:47:a6:14:0e:8f:f3:02:65:98:4c:ae:36:a2:
                    11:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BF:63:A7:ED:8F:26:F1:84:92:4D:FD:51:A2:FE:47:95:E2:32:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9ebf3b5c-d8f4-3fae-96d9-b020ba0ad9c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:99:82:02:24:4c:50:9a:19:4a:45:40:85:03:a8:46:75:50:
         e5:99:2f:01:c7:e2:20:91:71:f2:0f:84:4a:b2:4d:95:bb:1d:
         3d:3b:22:5c:2c:65:56:fc:ce:e1:a9:87:6b:1a:66:87:a4:0f:
         ae:d4:9d:cd:a4:0e:dd:81:7c:05:8c:2e:99:0a:61:94:f2:cb:
         65:26:81:4c:13:54:0b:97:e9:5d:43:59:3d:e0:f5:df:3f:a9:
         cd:c7:a7:e8:14:c9:e4:3d:f5:6f:bb:64:ed:3f:10:c8:85:f3:
         e2:54:73:3d:fd:c9:1d:66:78:fe:22:c8:62:88:95:96:b7:42:
         29:1f:c5:71:d5:af:00:d1:8d:be:ac:cf:0e:db:85:a7:3a:4f:
         f9:8b:76:40:b2:41:cb:38:f0:6d:de:06:2c:9b:28:50:59:10:
         4f:6d:ba:56:ba:16:34:34:b4:20:a8:ef:d5:f5:68:51:9b:a9:
         52:97:ba:c0:1f:96:6d:42:8b:bd:89:6a:52:a7:62:92:77:46:
         09:0d:dc:ff:91:4a:e8:bd:70:ab:e2:e3:db:22:31:53:30:c3:
         69:93:10:59:5a:b9:c3:84:08:53:d4:d0:8e:6c:d2:f6:5e:48:
         b2:a1:49:9e:0f:a1:b4:b4:67:c3:37:0e:bc:04:70:02:89:b4:
         a4:02:62:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:30:31 2026 by rpki-client