Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ae9d480d-7684-3cc9-bf20-47c43abb0dd1.roa
File:                     ae9d480d-7684-3cc9-bf20-47c43abb0dd1.roa (raw, json)
Hash identifier:          KzavJIJnIkpW1QPop3Yct8L6WwYVE0SNWD7ByUt77Yc=
Subject key identifier:   D1:60:E7:BA:45:B4:F0:33:B7:E7:E4:98:13:2D:9C:53:6F:80:6D:9C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB6C0BF0324230C22E4200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ae9d480d-7684-3cc9-bf20-47c43abb0dd1.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:6c:0b:f0:32:42:30:c2:2e:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=684ebb39-143b-412e-b50a-68690f3a5598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:02:f4:63:88:ec:b5:91:3a:b0:62:3d:e8:63:
                    e3:32:cc:20:8f:8d:3c:97:dd:10:9f:26:db:7a:63:
                    8a:ad:d0:36:cc:b2:10:f8:14:d9:97:54:a3:3b:a4:
                    b7:26:89:da:ec:91:cd:12:1e:3b:1d:7e:e9:cf:8c:
                    57:22:59:1b:f3:5f:dd:64:9d:cd:8a:95:af:81:79:
                    3f:cb:6b:0f:bc:5d:90:2a:0a:52:d9:92:2d:02:d0:
                    87:0d:8f:75:67:b5:e4:d4:d7:48:e5:10:aa:fa:85:
                    85:d6:32:fb:d7:23:0f:34:67:58:c1:09:ab:2f:8b:
                    6d:4a:a1:18:9d:d8:4e:d7:7e:90:c3:0c:ca:e1:81:
                    9d:52:48:78:2a:85:4b:6b:40:25:6f:06:95:9c:66:
                    39:8b:24:b7:25:c6:9b:01:61:74:81:44:2f:4a:71:
                    35:1e:59:6e:c3:45:d8:57:58:e6:4c:18:42:10:cc:
                    21:0f:a5:6d:04:fb:51:b1:68:de:29:57:61:3b:04:
                    c0:7a:bb:7d:6d:e7:19:b9:6f:c3:99:aa:2b:7e:00:
                    1e:8a:4c:fd:f0:60:c4:a0:ee:01:73:5f:2f:7d:ce:
                    1c:f9:4d:55:b4:89:4b:4a:65:a9:56:e0:d3:5c:26:
                    67:03:83:a1:10:1a:f3:f2:28:68:01:d4:1b:08:41:
                    19:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:60:E7:BA:45:B4:F0:33:B7:E7:E4:98:13:2D:9C:53:6F:80:6D:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ae9d480d-7684-3cc9-bf20-47c43abb0dd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:80:66:85:69:2a:61:34:93:bd:8a:17:b0:7a:83:d8:ea:fe:
         b9:9f:0b:4c:62:3f:94:bf:af:ea:e7:5d:9f:eb:4a:cb:b3:1e:
         e0:1d:38:b9:ea:ad:47:ab:2c:d3:a3:60:68:8a:35:5a:83:30:
         b1:d6:c4:5a:3b:89:c5:06:68:27:8d:16:b2:6b:12:7f:8a:06:
         4a:af:ba:b2:ad:16:7e:d1:13:2e:b0:95:46:25:40:6c:91:d9:
         fe:0a:d1:7a:67:c3:1e:e6:3c:66:9f:ef:92:94:12:af:94:15:
         72:c9:88:50:bf:86:95:b8:47:75:16:d5:fd:47:4f:27:b3:84:
         3a:0c:17:3d:5c:65:24:42:8c:dd:b0:b4:28:9f:9e:20:2c:ca:
         2d:fe:3b:50:e7:93:87:a6:a0:93:6d:b5:73:fa:02:ab:6f:26:
         50:c1:c2:90:04:e8:55:4c:bf:64:1d:d2:24:79:71:d1:3b:90:
         10:c0:a7:5d:7a:cc:bc:50:9f:82:3d:90:6b:f0:35:31:49:02:
         54:d6:86:63:65:f3:50:5a:69:1b:61:e7:b7:a9:bf:ac:d1:02:
         44:0c:8a:28:93:08:11:9c:8b:c9:93:6f:b7:e2:de:84:e9:4d:
         82:3c:bb:4f:8a:48:5b:87:aa:e2:bf:fd:37:d5:f0:2c:73:b8:
         7b:82:f6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:31:35 2026 by rpki-client