Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a0b3e32c-e284-32e7-b3de-255155fd2f08.roa
File:                     a0b3e32c-e284-32e7-b3de-255155fd2f08.roa (raw, json)
Hash identifier:          gGAJqbl41bpbKgpSe5+LN6NmGX0qZlVhQ4WIYsXmUm4=
Subject key identifier:   33:A7:2D:7B:B2:77:A2:37:4A:F1:16:FE:49:7C:8D:8D:6D:F1:F9:FA
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF210A783D53A4C85760BFC00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a0b3e32c-e284-32e7-b3de-255155fd2f08.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:a7:83:d5:3a:4c:85:76:0b:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=8acebd66-8016-41ba-ba56-8522b0ae963d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:13:ec:ca:ba:4f:f1:f6:32:1d:ae:0a:7d:
                    18:7c:1c:75:5d:94:3b:4d:5b:17:2f:5d:e6:cb:47:
                    b7:4e:d0:96:39:b7:1d:e9:34:88:b2:d3:2c:c5:4a:
                    51:ca:c2:29:f8:4c:fd:cd:27:39:3e:c4:f5:ac:91:
                    41:fc:98:1f:07:e1:a7:cf:9d:2a:57:28:ad:86:a5:
                    91:3e:e5:85:28:f0:f1:17:9c:d2:3c:d3:a4:f8:19:
                    47:78:15:fb:1e:46:ad:11:af:54:ad:8c:c1:f1:c5:
                    6a:1c:e7:a3:28:8c:14:5d:59:5c:ca:fd:e2:8c:dc:
                    ec:e8:a7:43:b3:ae:89:39:25:62:96:3f:d3:b8:10:
                    75:ae:8d:6b:4d:89:b4:55:c5:84:c6:18:b8:2a:97:
                    ea:ee:26:5a:f4:6d:e0:b6:d1:b9:bd:72:a0:8a:91:
                    70:3f:42:1d:c3:63:5e:55:74:0b:cf:9f:55:62:fe:
                    65:bf:3d:63:8e:47:3a:19:ec:32:80:e4:cc:3b:61:
                    30:25:93:0e:a6:9e:ea:1d:ce:90:e9:0e:f3:7d:ee:
                    77:b0:88:3f:b4:67:76:f5:be:64:d5:80:9c:f4:9f:
                    e6:ed:87:5a:e0:b1:30:69:5a:b5:69:9d:4a:85:13:
                    0d:4e:8a:a9:75:f1:93:51:7d:27:7f:2b:40:9c:b8:
                    dc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A7:2D:7B:B2:77:A2:37:4A:F1:16:FE:49:7C:8D:8D:6D:F1:F9:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a0b3e32c-e284-32e7-b3de-255155fd2f08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:23:81:dd:64:8e:ab:b0:08:7a:3c:d9:9b:6e:a7:b3:6d:26:
         58:09:5a:ce:af:c9:1e:58:d5:62:40:0b:25:18:46:68:96:ee:
         02:ac:e6:48:0c:f2:5e:b2:5e:c3:38:24:fe:5f:e5:70:4d:17:
         80:af:c4:9b:c1:8e:82:69:ce:eb:22:7f:54:f5:88:e9:95:27:
         97:b3:67:18:aa:3d:44:3a:f5:8b:eb:26:c9:51:3e:77:38:7f:
         8b:b0:62:9b:cf:a7:7c:d9:eb:ab:c3:e5:34:93:03:ab:4c:5d:
         c9:a7:fb:c0:60:8a:3c:4c:93:57:76:1f:06:fe:75:60:5b:47:
         83:c6:5f:b2:14:56:47:3a:29:4a:a7:7d:40:89:5c:69:1c:ec:
         99:ce:22:60:69:58:bd:80:2d:53:b2:66:5f:ab:3f:b3:44:0f:
         b7:6b:e7:41:d6:48:c2:be:69:c6:d5:c9:ed:d9:72:d8:84:18:
         cb:61:a8:c7:47:0e:bd:bd:0e:a9:50:2e:0d:be:41:8c:93:53:
         29:7b:51:20:4e:46:1b:01:ac:7f:39:d5:84:a1:70:21:ca:12:
         fa:29:a2:9d:cf:4e:6b:ae:34:5f:19:d4:bd:46:ee:ac:72:fd:
         6c:bb:40:bc:43:48:8e:1e:3d:6d:8b:12:55:7e:f4:f3:d6:1b:
         1a:47:7c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:10:51 2026 by rpki-client