Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d4858ae4-1026-3c66-9a83-6012bc39fc44.roa
File:                     d4858ae4-1026-3c66-9a83-6012bc39fc44.roa (raw, json)
Hash identifier:          TUBG4D4FVlDGwuXo8uGIWCfqriqsqRMpyVjadsiqYEo=
Subject key identifier:   EA:DC:AD:0E:14:B4:79:88:A2:D9:1A:6C:18:8F:32:80:3C:BD:4D:B3
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF4DB6DD23E858B1EDA3FBB00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d4858ae4-1026-3c66-9a83-6012bc39fc44.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:6d:d2:3e:85:8b:1e:da:3f:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=af1cc5ea-a012-4d54-9916-1ea4383d25cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:46:87:b5:f9:cd:de:f8:e5:23:76:50:60:ed:
                    17:90:f9:ed:63:49:b4:56:c4:6f:11:8b:b1:24:15:
                    eb:95:0c:ed:61:0d:44:85:3c:02:76:4e:aa:81:01:
                    de:8c:e6:82:70:d6:c2:c2:a7:ed:8e:c4:78:21:5d:
                    73:8f:e7:4a:c7:15:60:a9:41:82:5f:60:a3:0a:10:
                    e4:f8:15:9b:ab:1b:d4:0d:75:49:23:09:54:e1:32:
                    7f:c4:2c:73:cb:cc:b3:ba:8f:0d:74:ad:81:df:20:
                    30:e4:33:bf:06:f7:a1:ce:d4:b2:e5:48:4d:2b:ec:
                    23:f9:63:e1:a3:2d:05:86:35:5d:24:cf:b7:77:74:
                    df:9f:52:7a:34:68:20:ce:63:ed:7e:54:4b:b2:4b:
                    1c:e2:7a:45:4d:ff:a1:29:c2:2a:3a:d5:6d:1b:54:
                    46:98:58:00:ce:5e:f1:bf:8c:39:18:82:57:d1:1f:
                    fe:dd:50:02:55:d6:bc:75:fc:65:82:27:9b:69:18:
                    0b:00:bc:c4:c4:68:6a:3e:50:e2:82:d3:ba:76:e1:
                    96:a9:39:a7:6a:ef:10:1f:f9:20:fc:60:68:41:d1:
                    12:33:24:79:8d:eb:d0:c4:34:7e:e2:86:88:72:ae:
                    39:e0:f7:af:f0:59:69:81:7a:13:e2:ba:e6:1e:dd:
                    44:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DC:AD:0E:14:B4:79:88:A2:D9:1A:6C:18:8F:32:80:3C:BD:4D:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d4858ae4-1026-3c66-9a83-6012bc39fc44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:f5:20:9a:9e:99:74:2c:9e:fb:53:d4:44:df:65:ec:a2:c3:
         73:65:53:98:6a:3a:72:80:c1:d8:eb:43:34:89:42:7f:02:5f:
         97:ea:10:3a:e3:15:8a:2e:dd:ca:87:bd:db:44:89:6a:9b:71:
         e4:35:07:01:e9:7b:fd:0f:fe:39:9f:23:b6:bb:cb:2c:4c:a9:
         e8:e7:30:1a:56:5b:0c:98:e0:a6:0f:3d:1c:fa:13:6c:d7:6a:
         3f:25:18:1f:eb:9c:62:91:e4:1e:75:12:b8:01:cf:ef:12:6a:
         21:cd:af:2d:b2:0e:38:0c:d7:e7:29:6f:5f:c4:de:28:b1:f7:
         04:8c:fa:5a:4a:3b:6c:c8:ff:fe:bb:75:e1:a3:d6:63:1d:26:
         b3:85:95:90:5c:4c:8c:31:c7:99:88:5e:31:17:94:c1:73:86:
         25:6a:3f:ed:b8:89:b1:2e:aa:36:51:e6:8b:2e:b3:38:6c:b2:
         ae:ae:40:5e:81:b5:21:e1:9c:7d:01:d6:56:b3:a2:d4:27:2e:
         59:39:f6:45:4a:ff:8c:31:7e:4b:37:5f:35:02:d9:fa:f6:e3:
         71:9e:d3:de:35:c2:20:49:bf:e4:60:d8:c9:0b:69:d9:8e:93:
         a9:80:1f:92:c3:2a:02:6c:80:72:10:7e:b6:f2:ba:b5:f6:54:
         70:37:de:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:33:54 2026 by rpki-client