Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c6137b89-e816-3639-9a97-aeac3079f4bc.roa
File:                     c6137b89-e816-3639-9a97-aeac3079f4bc.roa (raw, json)
Hash identifier:          0F0boiPJZkEw/dVB63YSJdMVYaJDnKFK6ycl6DttaOI=
Subject key identifier:   6C:CF:E2:DF:6C:74:C4:36:54:B5:AF:D8:C5:A3:C2:9B:A8:05:68:40
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DEF45EE6484453563FA860F84
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c6137b89-e816-3639-9a97-aeac3079f4bc.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     41264
IP address blocks:        104.132.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:ee:64:84:45:35:63:fa:86:0f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=1148151e-77d6-4a1f-9d26-d80cae09cc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9a:32:ad:99:e9:09:49:f2:1e:22:55:21:52:
                    a4:64:53:ee:12:ae:a9:0e:fd:74:54:47:53:b5:a6:
                    3a:e4:c2:7e:d5:3f:47:cd:02:15:66:34:5b:87:a5:
                    c1:8f:29:8b:86:e3:ab:da:2c:0c:d6:ee:b8:31:4e:
                    65:f8:7a:f3:ea:7a:d2:d9:42:e2:2d:d7:97:d0:a0:
                    84:a9:09:e1:83:ce:d2:6d:1b:9b:83:d8:92:6e:6e:
                    59:af:cc:16:a5:ba:3a:db:b6:dc:98:a8:22:55:66:
                    fb:1b:df:04:cc:e3:4e:95:6a:31:9a:19:56:c7:4b:
                    83:32:b6:58:de:ec:a7:56:14:4e:27:e5:1d:58:bc:
                    ce:b0:c9:39:96:74:b6:0f:df:1b:35:23:ad:7c:b6:
                    33:3a:ef:0a:f2:d5:a4:0c:b8:94:a6:1e:f9:60:ba:
                    82:cb:5f:8a:fb:4c:aa:e1:31:a3:83:72:48:a7:90:
                    0f:fa:c5:54:d7:7e:28:b9:fa:73:9f:a0:9f:95:97:
                    20:88:0f:7c:08:93:f7:61:9c:96:8b:92:4e:91:cd:
                    07:ad:81:04:f5:80:39:a4:b3:87:02:d8:8e:1b:74:
                    aa:86:d5:fb:dd:34:de:08:35:67:d4:35:b1:1c:12:
                    a0:a2:64:35:22:97:09:1a:f0:a5:b8:2e:53:86:5e:
                    02:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CF:E2:DF:6C:74:C4:36:54:B5:AF:D8:C5:A3:C2:9B:A8:05:68:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c6137b89-e816-3639-9a97-aeac3079f4bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:10:5c:d3:51:fc:93:30:7e:7b:40:68:aa:5a:4b:a3:8e:98:
         fe:f7:b0:1b:36:e1:31:3d:76:e8:30:16:17:84:e8:e2:f5:1f:
         ea:9b:ac:c5:95:57:82:69:d8:fd:6d:3b:c2:db:a9:20:3f:ff:
         22:0c:31:a8:79:a2:7f:8c:e4:66:3d:24:66:18:da:90:25:3e:
         cf:a3:a0:af:9e:3f:91:31:01:ed:e5:70:78:ac:cd:f3:d3:ff:
         3f:e0:c5:80:d5:2a:57:a8:18:cd:5c:38:ad:30:a8:54:42:2c:
         44:9c:39:c5:ee:0d:a2:4e:89:9f:bc:1f:39:ea:8c:33:6a:3c:
         3e:90:a4:8d:32:c8:04:f0:c8:83:7d:01:fe:db:51:08:76:e1:
         2b:07:de:0b:0e:d4:a7:06:b9:0f:c9:e5:02:ad:8c:39:e0:1d:
         98:dd:ca:95:bb:5b:95:0b:91:e9:f4:e9:3a:4b:15:19:0a:75:
         cf:e7:98:8e:df:4d:11:2c:ff:50:e2:ff:9e:36:6b:1f:17:10:
         6e:0b:d6:72:70:08:63:1a:bd:17:fc:8b:f3:57:0c:26:81:cb:
         45:23:97:bc:75:6b:3a:62:31:12:1b:5c:33:5c:46:e8:e6:01:
         4a:3d:0e:a6:73:06:50:9e:f6:30:d2:b7:fc:bf:60:1a:82:cf:
         f4:63:2e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:31:13 2026 by rpki-client