Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1c8b4be-2c5a-38a3-b56c-e63ed642f8f5.roa
File:                     d1c8b4be-2c5a-38a3-b56c-e63ed642f8f5.roa (raw, json)
Hash identifier:          vboPeWlBS2LBEbYRjShkPdiAZyLhUVH5/eQhFTa1dno=
Subject key identifier:   E6:51:92:EE:9E:FB:1F:F1:E4:3D:42:99:65:32:FC:F6:74:9C:9B:07
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB6FC1263781814D2ECA80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1c8b4be-2c5a-38a3-b56c-e63ed642f8f5.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:6f:c1:26:37:81:81:4d:2e:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=ffcb7a3c-b4be-4a48-a408-c7a65fb33616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9a:e4:18:b9:ef:f9:17:67:ae:5f:45:6e:33:
                    dc:30:aa:74:9e:6e:02:a0:60:bf:51:b1:18:d9:15:
                    9b:8c:d7:3e:bc:2e:bc:61:f8:92:07:bb:ed:70:b5:
                    00:b2:a9:5e:e6:63:8e:10:90:be:e3:64:6e:98:31:
                    a8:3e:52:68:49:09:a0:4f:ad:4d:52:7a:52:7e:d2:
                    27:b7:37:eb:07:9f:92:ce:80:fb:eb:70:71:38:d4:
                    18:6b:28:a8:4d:d0:f1:68:5e:c9:db:8f:70:57:60:
                    d1:7b:c9:93:cb:d3:f1:56:49:c3:14:18:d5:19:aa:
                    89:e2:91:1a:3d:ce:5f:bf:82:f6:5a:42:7b:03:3c:
                    13:46:44:8f:d9:45:69:6a:2a:f0:eb:31:c7:a1:98:
                    6c:c1:38:97:75:51:57:32:0a:33:5e:ed:fa:5a:09:
                    d9:3b:2a:a0:7d:cb:72:05:eb:2a:24:07:1c:aa:b0:
                    4c:1a:a1:56:98:9a:a3:fd:09:0f:7a:8b:1f:34:5e:
                    45:d9:d1:55:83:95:7a:60:c0:a8:dd:3c:76:ef:ca:
                    05:9c:7b:eb:b3:ff:23:0a:c5:56:00:de:69:c3:87:
                    a8:6a:39:00:71:c6:cb:94:0f:0a:12:4b:66:5b:9f:
                    cd:0c:63:0c:9d:7f:70:cb:17:f7:05:71:fc:bf:ef:
                    7f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:51:92:EE:9E:FB:1F:F1:E4:3D:42:99:65:32:FC:F6:74:9C:9B:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1c8b4be-2c5a-38a3-b56c-e63ed642f8f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:46:0a:6e:6d:ff:ec:8e:73:f0:23:03:7b:70:cc:99:f7:4b:
         ff:c3:99:5f:d2:ca:f9:e5:e7:6c:c8:9b:b5:8e:3f:dd:03:be:
         de:f6:b9:39:17:d3:73:1c:a4:e8:f2:85:a5:47:49:79:47:84:
         c8:3a:4e:e9:e4:60:79:e7:d5:94:d8:9f:a3:ba:70:fe:c3:40:
         8f:61:4a:27:e0:64:bf:b1:c0:e1:f6:53:d5:f2:86:59:63:ef:
         cd:13:a4:3f:dc:64:ae:90:84:22:1c:ea:db:b0:ee:e8:ea:4a:
         e9:89:bd:32:ce:d4:7a:4b:05:5b:dd:5e:6b:f3:e7:3b:96:90:
         0b:b7:b2:a7:fd:3a:27:78:aa:df:dd:ab:be:f5:7c:82:d0:2f:
         a4:05:da:92:47:03:db:13:3f:6d:21:0c:73:54:ac:cb:58:67:
         6e:a9:e7:a2:13:25:c3:03:88:76:2a:48:5a:6a:09:d4:2a:65:
         7f:70:d3:72:36:3b:a9:e8:1a:26:80:cd:81:e1:3a:79:0c:d3:
         f4:6f:bd:57:62:66:3f:2e:ed:e6:6f:e5:88:e5:55:53:86:12:
         33:36:7d:6b:33:58:c8:10:10:9c:5e:a0:e7:94:3c:82:9b:cf:
         80:e2:7c:fa:d8:d7:bf:dc:10:26:0b:1b:57:94:c0:b5:30:db:
         91:82:bd:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3022/BJjeBgU0uyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk
ZmZjYjdhM2MtYjRiZS00YTQ4LWE0MDgtYzdhNjVmYjMzNjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJrkGLnv+Rdnrl9FbjPcMKp0nm4CoGC/UbEY
2RWbjNc+vC68YfiSB7vtcLUAsqle5mOOEJC+42RumDGoPlJoSQmgT61NUnpSftIn
tzfrB5+SzoD763BxONQYayioTdDxaF7J249wV2DRe8mTy9PxVknDFBjVGaqJ4pEa
Pc5fv4L2WkJ7AzwTRkSP2UVpairw6zHHoZhswTiXdVFXMgozXu36WgnZOyqgfcty
BesqJAccqrBMGqFWmJqj/QkPeosfNF5F2dFVg5V6YMCo3Tx278oFnHvrs/8jCsVW
AN5pw4eoajkAccbLlA8KEktmW5/NDGMMnX9wyxf3BXH8v+9/GwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOZRku6e+x/x5D1CmWUy/PZ0nJsHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDFjOGI0YmUtMmM1YS0z
OGEzLWI1NmMtZTYzZWQ2NDJmOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNGCm5t/+yOc/AjA3twzJn3S//DmV/Syvnl52zIm7WOP90Dvt72uTkX
03McpOjyhaVHSXlHhMg6TunkYHnn1ZTYn6O6cP7DQI9hSifgZL+xwOH2U9Xyhllj
780TpD/cZK6QhCIc6tuw7ujqSumJvTLO1HpLBVvdXmvz5zuWkAu3sqf9Oid4qt/d
q771fILQL6QF2pJHA9sTP20hDHNUrMtYZ26p56ITJcMDiHYqSFpqCdQqZX9w03I2
O6noGiaAzYHhOnkM0/RvvVdiZj8u7eZv5YjlVVOGEjM2fWszWMgQEJxeoOeUPIKb
z4DifPrY17/cECYLG1eUwLUw25GCvbc=
-----END CERTIFICATE-----
Generated at Fri Jun 12 09:11:17 2026 by rpki-client