Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6d3afbf-f6e2-312e-b299-feebdb230800.roa
File:                     d6d3afbf-f6e2-312e-b299-feebdb230800.roa (raw, json)
Hash identifier:          REQMvR6DegiHmtdhj/klOD/24RvGvvSHjeNIT2uOgLM=
Subject key identifier:   03:24:75:1B:9B:6E:CF:D0:02:E4:FF:0E:AF:18:16:2C:50:67:E1:F8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584EA7967A36C505016230FD8620
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6d3afbf-f6e2-312e-b299-feebdb230800.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     41264
IP address blocks:        104.133.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:7a:36:c5:05:01:62:30:fd:86:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=aa45c82d-ba9c-4552-a6d3-f3f23df450d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ed:94:8a:e6:dd:81:70:c0:e4:3c:11:42:86:
                    03:ff:d1:d1:75:1b:cf:29:f8:59:9a:84:54:76:49:
                    67:88:74:65:8a:41:13:3b:5f:14:cb:33:6a:9f:27:
                    c2:37:85:02:47:fb:e4:6c:4b:53:3a:4a:8c:64:7d:
                    87:15:98:c5:16:57:bc:22:cd:d3:24:79:18:4b:2f:
                    56:33:be:bc:98:fd:22:94:a1:15:6d:f7:c5:9f:47:
                    23:c6:b0:7c:f6:7f:4e:39:31:36:d0:6d:9c:0b:a3:
                    d1:46:3b:28:ac:cd:f1:25:25:b3:99:88:7f:ed:f4:
                    df:ea:49:9b:9a:fa:28:0c:06:fa:72:e2:29:e7:c7:
                    11:44:a7:2a:fb:aa:a1:49:cb:8d:97:60:c9:52:84:
                    99:a3:ef:84:4f:3d:a3:7a:c6:40:b1:43:e3:92:6a:
                    dc:97:32:1a:ce:50:e6:af:29:29:c1:f9:74:9e:9a:
                    ff:14:8e:74:47:ce:a8:c0:f3:61:3e:81:c4:35:b5:
                    8c:95:bf:7c:11:e0:9a:c3:7f:2d:2a:c0:cf:1d:15:
                    dd:42:d1:ab:c2:2f:7a:64:48:8c:7a:6a:85:e5:9d:
                    26:58:d1:9a:4c:7c:33:8a:1c:c6:3c:76:65:b4:26:
                    b2:d6:86:34:a5:ea:2d:a1:d7:02:1b:d7:62:e4:0c:
                    f8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:24:75:1B:9B:6E:CF:D0:02:E4:FF:0E:AF:18:16:2C:50:67:E1:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6d3afbf-f6e2-312e-b299-feebdb230800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:9f:4b:79:ac:2d:a2:5a:4c:ea:2c:03:ea:90:74:fd:1e:dd:
         d3:e5:82:2a:35:b7:90:3f:94:fd:d3:28:72:a1:84:58:aa:f3:
         47:1c:36:00:31:a5:a5:49:c8:8a:b0:55:8a:2c:c6:e7:5b:78:
         75:9e:e4:9a:fc:7e:73:f7:2b:8d:21:5e:2d:31:b8:45:d0:8b:
         1b:e4:04:df:10:77:19:d4:8b:e2:e9:09:cf:55:a0:27:76:ad:
         e8:68:36:6c:bf:c5:d9:93:f7:6f:1f:cb:97:61:b9:d9:cd:11:
         60:72:d6:ca:91:27:25:74:12:3a:4a:ae:18:6b:21:dd:7d:0c:
         05:04:6f:a3:a4:df:f5:0f:fa:f6:ce:80:15:a9:28:e4:43:f2:
         6b:d0:2b:62:72:e3:f0:92:73:21:ba:fd:db:36:3e:f3:10:02:
         40:94:b9:21:a9:17:80:a6:30:4d:be:10:42:4b:a4:a6:52:54:
         12:2a:6e:8c:6a:da:d6:9f:73:5f:ed:ee:eb:98:a7:22:d1:91:
         89:37:54:6d:57:ea:e3:cf:22:dd:3b:dd:c9:fe:70:c7:9b:38:
         80:7e:fe:eb:fe:cd:99:83:6d:30:1b:4c:04:6a:81:7c:39:bf:
         50:f5:0e:01:02:92:90:56:df:b9:3a:d5:45:13:84:2f:ce:a5:
         50:10:47:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:14:25 2026 by rpki-client