Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d360fe72-7286-3951-9289-33794ad8559d.roa
File:                     d360fe72-7286-3951-9289-33794ad8559d.roa (raw, json)
Hash identifier:          kmYAm4yEAlT/Ye9Fn4erhYSSMLV9Sm+fZQFyrgtYR0k=
Subject key identifier:   C9:CC:3C:84:D4:47:ED:C1:A8:8C:E2:C2:8C:AC:79:27:92:98:8F:37
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB7DE3A8DBF5E94FD6ED58
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d360fe72-7286-3951-9289-33794ad8559d.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:7d:e3:a8:db:f5:e9:4f:d6:ed:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=7ec23637-e253-4ce9-ad1d-22a078a4298e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1d:55:b1:27:cd:ff:cf:e5:98:b7:a9:75:b4:
                    91:f6:13:51:96:7a:98:b6:a5:89:f2:62:b9:77:a7:
                    cc:1e:03:a6:bd:73:c9:ba:b2:f7:3c:7e:e1:fc:72:
                    34:c5:50:54:c3:af:f9:2b:17:b3:38:96:2f:6b:43:
                    21:c5:bc:f6:72:43:a2:dd:05:fa:b8:99:dc:89:5b:
                    36:2c:2c:76:d8:79:57:ae:f6:1e:b3:bf:a2:55:56:
                    ac:27:53:71:c0:16:69:e0:71:80:33:ea:3d:33:e8:
                    28:5a:6a:3a:ff:04:18:ce:ac:6e:9f:1e:68:90:6e:
                    ed:1d:b0:a3:95:9b:59:59:6d:3d:8a:62:1a:db:ba:
                    e4:5a:de:96:c9:85:32:9e:92:0b:c1:71:c0:8c:17:
                    d9:3e:ae:dd:94:17:62:8e:c5:3d:66:eb:20:f5:41:
                    fb:ee:9b:4f:71:e8:f9:58:67:62:3e:49:1c:c3:f6:
                    f6:03:78:e2:f3:cb:df:7e:e8:9f:88:21:75:72:4b:
                    fb:1a:1a:64:f6:91:13:11:e8:ed:23:6c:cf:7b:c7:
                    83:93:c8:84:05:06:11:7f:7d:f5:25:1d:77:0c:9c:
                    c8:7b:55:83:53:85:6e:98:f5:44:4e:e9:56:97:a9:
                    81:24:9d:25:ee:16:7d:74:67:cb:a3:65:78:60:6c:
                    16:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CC:3C:84:D4:47:ED:C1:A8:8C:E2:C2:8C:AC:79:27:92:98:8F:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d360fe72-7286-3951-9289-33794ad8559d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:33:96:5b:56:84:25:2d:94:49:c3:0d:59:0b:0f:0b:0c:95:
         4e:06:14:35:c6:9f:92:60:45:6d:47:ae:63:9b:b1:a4:fd:1c:
         a2:87:90:68:ba:bd:b3:1c:5d:ff:75:ca:41:0e:27:3f:a0:ef:
         8c:13:90:31:c0:b5:18:97:9f:e3:99:31:97:ca:80:03:6b:13:
         61:60:89:60:ab:63:6d:99:d8:81:43:d9:d7:6b:ed:a3:28:46:
         ba:95:1d:63:0d:1b:38:68:db:29:7b:85:f5:d4:21:7e:70:f4:
         84:9a:91:c9:78:58:c0:f1:ad:a9:72:30:8c:b1:54:3f:81:e4:
         99:77:5e:cc:1d:42:06:6e:2f:e9:40:2e:d1:ea:87:a6:72:01:
         7f:33:08:99:6a:1c:44:91:be:80:17:14:4a:9f:4e:85:64:16:
         f9:80:31:a9:af:fd:87:0a:98:45:8c:e8:ba:f6:4f:e5:61:eb:
         e9:31:b3:05:fd:c2:2b:f3:77:95:23:34:57:5e:24:34:eb:3f:
         02:c2:1c:32:5c:78:cc:74:6e:44:85:ed:30:76:38:0b:56:f0:
         2a:b5:90:96:bd:0a:a0:40:27:7c:f2:41:e5:aa:8a:71:89:0e:
         35:10:0a:8c:eb:60:92:3d:09:bf:f1:62:cb:04:4a:46:2e:19:
         4b:be:2a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:35:23 2026 by rpki-client