Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b01b4255-7d87-3a32-b6fb-0ef4a70657ff.roa
File:                     b01b4255-7d87-3a32-b6fb-0ef4a70657ff.roa (raw, json)
Hash identifier:          SwMpRjDlqGzxKBpb3Lck7djawOZsOQuE2qvgxeTnY1E=
Subject key identifier:   2D:A6:E6:D6:19:32:06:C9:0E:64:96:50:57:E5:1A:26:09:6B:1B:93
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB791C2EBAF4253AA6B300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b01b4255-7d87-3a32-b6fb-0ef4a70657ff.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:79:1c:2e:ba:f4:25:3a:a6:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=890740ab-e9c4-4561-8a97-a737599069ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:02:82:de:bd:78:6b:80:07:e3:a9:e9:ca:0e:
                    17:20:92:a6:a7:b7:2c:28:13:f7:90:62:b1:da:e7:
                    0c:5c:17:98:7e:88:67:64:9e:a1:b0:e4:f0:b9:65:
                    96:b6:f7:80:e1:b0:ff:c5:cf:3e:bb:0c:51:37:87:
                    4e:5f:e8:5c:9e:f8:03:08:2f:03:74:77:d1:74:39:
                    c0:4a:bf:37:49:62:06:74:16:5a:55:4e:b9:18:c7:
                    20:05:f1:fa:a1:13:bd:89:8a:5d:cb:5d:cd:6d:8a:
                    22:ac:90:0e:49:6c:da:1a:16:b6:ba:87:27:e2:8d:
                    03:fc:d1:38:0d:a3:b8:14:47:87:80:e3:d1:4d:c4:
                    64:9f:29:54:cb:df:24:fa:0d:5a:9d:cd:b1:34:25:
                    0f:24:53:6f:3e:e1:87:05:7c:3e:b9:6d:ec:10:a5:
                    5b:cf:e7:ad:93:dc:16:25:58:ea:22:2e:88:19:20:
                    84:85:0e:cf:97:46:ca:94:30:3d:90:36:68:0c:47:
                    e1:03:8a:bf:4e:aa:84:56:78:60:00:8b:23:76:a8:
                    c4:89:73:8f:2f:61:43:24:ad:e3:99:7e:a4:3e:62:
                    45:6c:14:7d:cd:2d:88:be:76:48:8b:be:b7:6f:77:
                    99:bf:49:b7:b8:f6:3d:e9:fe:72:3d:24:3f:91:30:
                    6c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A6:E6:D6:19:32:06:C9:0E:64:96:50:57:E5:1A:26:09:6B:1B:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b01b4255-7d87-3a32-b6fb-0ef4a70657ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:9f:eb:54:38:d9:91:c9:d3:14:2e:0a:45:7e:ac:3c:52:c9:
         6c:f4:c0:45:76:e7:d8:70:ed:47:03:82:3e:44:22:39:03:ab:
         1e:90:26:d2:8e:e7:aa:5f:61:eb:c6:8c:4e:ca:d5:95:16:5c:
         b2:cc:cf:f7:a2:26:ed:c0:8a:49:2e:c4:fe:35:b7:9f:74:b5:
         0b:20:c2:32:04:8f:4b:1c:de:a1:76:52:10:ea:e5:cd:36:f8:
         21:44:93:27:9d:95:76:27:b5:6c:68:fa:c9:9b:ce:e6:d0:45:
         e9:d1:71:60:a3:ee:66:3f:98:8f:45:eb:be:ad:a8:42:49:16:
         f3:de:d7:87:44:e0:c7:25:d1:ad:e0:8b:03:5b:d6:de:cb:ca:
         b9:b0:fc:87:dc:c4:cd:a1:99:a9:db:f2:0a:1f:c3:f6:09:2c:
         a8:e1:fb:0c:0f:74:d0:b8:ed:88:5b:4d:b3:57:22:fa:f4:4f:
         56:65:11:70:f7:31:20:b7:1a:06:8e:48:5e:84:7c:01:c3:6a:
         e9:c4:1c:8d:38:e0:8f:1b:8c:42:b9:e5:70:ec:4e:1d:6d:9b:
         14:e3:7a:b2:3a:bb:ec:78:8b:3d:4e:55:1c:91:34:d9:df:14:
         74:14:e5:35:81:8a:81:8b:a7:ac:62:b4:c7:a6:67:3b:1e:c2:
         27:2a:be:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:11:44 2026 by rpki-client