Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8c24147-75ec-35e3-a350-2da570a3661b.roa
File:                     c8c24147-75ec-35e3-a350-2da570a3661b.roa (raw, json)
Hash identifier:          byjCT4vDEch+dJdaKPrjb6otBCdWLXEEq10vrP+XTXQ=
Subject key identifier:   BB:C2:02:90:7B:B7:26:23:96:BA:75:E3:7E:95:C5:AB:C3:BC:FF:58
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB7D89292B430C030A7D00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8c24147-75ec-35e3-a350-2da570a3661b.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:7d:89:29:2b:43:0c:03:0a:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=121ed1ac-65f0-4633-b354-0f3f6e7a326b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7e:7f:17:3b:41:bd:55:bb:70:28:8b:7e:0d:
                    6e:b2:7d:8b:89:fe:ad:7f:88:ca:b0:65:ba:2b:18:
                    0b:60:76:d0:bc:69:d5:d2:4d:df:06:77:b5:6c:6f:
                    d6:df:0a:28:14:36:bb:38:a2:c5:02:85:b0:2b:70:
                    10:38:1a:1d:e1:27:92:16:6f:7f:33:17:11:d1:01:
                    a2:b4:3c:90:b8:15:1d:fc:44:dd:eb:12:91:b8:eb:
                    2e:20:27:1b:86:03:f6:92:08:43:59:e3:d3:e1:3b:
                    3f:be:2b:8b:7a:f7:95:cf:dd:55:c4:64:d5:f9:88:
                    aa:80:17:29:7e:03:f3:63:df:90:a6:87:0e:4a:ee:
                    67:23:fe:01:cb:93:92:ed:9e:ab:b9:b3:eb:14:37:
                    85:38:43:8e:dc:23:dc:98:38:90:92:67:38:4d:18:
                    20:05:2f:ec:92:58:1a:2a:fe:34:7a:a6:3e:3e:0b:
                    e1:02:79:b8:12:e6:7f:aa:2a:f1:f6:c9:1f:6f:36:
                    48:e4:eb:a5:f8:18:82:02:9a:88:0a:4b:d2:82:05:
                    be:df:c6:c1:aa:d8:18:86:e2:6d:be:13:28:2c:ea:
                    28:41:30:e8:c3:36:1d:cd:de:6b:f0:a4:d0:fc:e1:
                    1c:e1:7c:ec:b7:97:dc:80:8f:50:48:b0:74:94:9c:
                    73:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C2:02:90:7B:B7:26:23:96:BA:75:E3:7E:95:C5:AB:C3:BC:FF:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8c24147-75ec-35e3-a350-2da570a3661b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:1d:13:65:73:20:4e:8b:e3:f3:b3:40:17:61:72:df:bf:4d:
         c8:05:65:ed:99:60:77:2b:50:71:b7:ac:92:7c:df:f3:f8:f8:
         94:d9:5f:10:de:cc:b3:c9:3b:61:1e:f8:36:84:d3:f9:f4:77:
         18:fa:e0:b3:0b:69:d5:2d:7e:75:ab:ce:a0:c6:fc:76:c9:69:
         c9:2b:ce:ce:a8:b7:4e:ed:08:98:51:61:61:cc:02:6c:30:ea:
         79:28:e6:7b:86:12:e4:9f:15:58:12:5e:f0:eb:8c:19:e5:ca:
         38:76:27:a2:fd:fa:45:70:fa:15:ad:ff:4c:bf:a4:9d:10:02:
         f7:d4:18:f3:2f:76:62:98:23:6f:53:b4:0d:0e:6b:3f:70:1c:
         68:6d:89:7e:d7:6f:92:5a:32:9b:b3:fd:cd:9b:6b:11:1f:80:
         7e:11:b3:3d:5a:cb:df:01:cb:eb:03:8e:3c:64:6f:27:f9:c1:
         07:ec:ca:53:a6:69:19:eb:76:64:04:eb:5f:57:d2:46:5b:d5:
         07:be:c9:0a:74:8e:2f:2c:60:1c:42:58:5c:89:d8:58:69:f0:
         b9:1f:56:bd:18:2c:8e:7c:4f:e6:69:55:fd:c4:ec:15:e2:df:
         0b:db:19:4a:9b:70:67:2c:40:dc:31:69:1e:87:da:33:6c:8f:
         d9:1e:18:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:13:59 2026 by rpki-client