Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cdab4e53-1d37-39c4-96e8-5848eaf46b46.roa
File:                     cdab4e53-1d37-39c4-96e8-5848eaf46b46.roa (raw, json)
Hash identifier:          SSwrV2sw84TSt8Z3erzP53pEzfK58d3a1rbsm2dupw0=
Subject key identifier:   C9:7A:F8:A7:00:38:76:27:AD:4A:96:D8:0F:4A:6E:D0:2F:0A:41:7C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF210A73BBD87AF5557A19180
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cdab4e53-1d37-39c4-96e8-5848eaf46b46.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:a7:3b:bd:87:af:55:57:a1:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=7062efc8-b633-4772-858d-a0720c64d568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:a5:80:87:cf:c9:ab:71:29:8a:07:d5:2d:
                    9f:41:e7:6a:54:af:e9:89:c7:4e:75:94:3c:6b:ec:
                    f2:91:17:6c:8b:0e:12:38:e5:38:22:9e:d5:84:7f:
                    80:b0:7d:d7:83:7e:8f:f1:cf:44:9d:ff:5a:c0:9a:
                    3b:66:61:74:11:a4:ab:71:7b:bc:c5:22:8b:09:f4:
                    e9:74:7c:7d:a0:bb:93:0f:a2:1e:3e:ae:e8:bf:70:
                    31:3d:ed:58:fe:81:ba:d0:56:5e:91:bd:26:f8:75:
                    be:59:1e:db:58:43:23:70:cc:22:a2:36:a7:7e:0d:
                    da:d1:63:25:a6:92:ba:e7:56:1f:c5:d1:7c:d5:32:
                    34:cd:e4:81:d6:88:e8:93:bd:4e:e7:36:9a:bc:d4:
                    b8:1d:8c:e1:27:61:96:7d:e4:a4:0e:be:27:5e:c9:
                    e8:45:b6:93:91:fd:6e:33:1e:05:65:64:16:55:9b:
                    3a:3c:af:e8:ef:1e:05:3a:93:8d:4f:b1:82:b5:a0:
                    1f:46:f0:ac:f6:a0:55:a8:3b:a8:f6:5b:0d:dd:8e:
                    6f:c7:75:f9:9c:ed:e9:4f:9d:a9:5d:bd:9f:b2:12:
                    14:9e:4c:91:37:04:64:fd:82:25:01:38:1e:f7:16:
                    41:f7:fe:b8:15:09:25:05:76:dd:47:91:4b:36:77:
                    41:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7A:F8:A7:00:38:76:27:AD:4A:96:D8:0F:4A:6E:D0:2F:0A:41:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cdab4e53-1d37-39c4-96e8-5848eaf46b46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:e3:87:45:1f:fd:10:52:3b:94:87:2a:a8:36:0d:db:7f:25:
         da:a2:39:9e:fb:14:83:ee:38:0f:a7:bc:fb:91:f8:ce:c7:30:
         1e:2d:31:44:09:2a:aa:a9:74:8b:27:74:62:e5:bd:df:c9:be:
         87:0c:53:7e:98:9b:e0:7b:f1:5f:f4:f7:e0:3e:70:e7:07:0e:
         c9:32:2d:1a:bc:f9:ed:d8:e7:cd:7f:83:37:35:ab:74:b5:2f:
         25:ff:e3:25:23:1c:10:3d:38:90:81:e0:d2:72:2f:b4:0f:2c:
         a0:09:5e:3d:18:0e:68:d4:c7:2f:7e:53:dd:69:08:90:5e:58:
         b5:23:e7:84:3c:e2:10:b0:50:78:85:bb:82:65:3b:83:35:11:
         85:44:75:0d:fe:bc:71:05:ea:8b:05:f0:1a:57:e1:48:e7:69:
         8c:ee:8b:de:d4:b4:18:b7:cb:d4:89:9a:71:64:5d:46:f3:d5:
         b9:9a:d4:a8:11:67:ee:3d:78:81:24:90:33:16:ff:e7:97:5f:
         6a:53:03:4e:ba:bb:1f:87:55:9c:66:2d:48:1b:7f:f1:9e:57:
         0f:09:4e:3f:51:89:9f:b2:06:5f:a9:ce:9d:69:54:e3:91:2e:
         f4:23:28:54:a1:47:52:62:a6:e7:f7:65:8f:18:6d:9e:31:55:
         eb:a1:d8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:30:32 2026 by rpki-client