Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0440698-04bf-35f0-99b8-a957ee70ef6d.roa
File:                     f0440698-04bf-35f0-99b8-a957ee70ef6d.roa (raw, json)
Hash identifier:          59fcISPIkZcvL6mPXAZfNQlifcTTCWqnsxkn7f6/UXM=
Subject key identifier:   22:27:3B:2C:EF:21:33:B6:34:80:CF:3C:96:C2:35:65:25:F2:02:FA
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF2109CD68DD5046D44779280
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0440698-04bf-35f0-99b8-a957ee70ef6d.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:9c:d6:8d:d5:04:6d:44:77:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=5697f3cb-e7a6-46ed-8460-dc6d5d45936b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b7:40:b1:78:c3:8b:96:e5:6e:9c:98:16:dd:
                    47:8c:2b:35:47:57:95:e8:99:4d:c5:3f:50:af:c0:
                    fc:25:11:b4:f8:15:fc:49:00:b6:ed:df:e2:71:fc:
                    4b:f5:12:1b:31:32:0e:4c:87:55:ce:e5:6d:8b:0a:
                    f5:ac:a3:49:5a:93:b9:3c:2f:35:76:6f:82:6f:3b:
                    80:5a:2b:bf:08:4f:58:1e:9b:50:91:66:cc:ad:69:
                    2f:3b:8d:78:e7:99:06:a8:a1:a6:8e:35:40:f0:39:
                    b7:af:6c:da:9e:50:ef:71:12:84:db:8b:77:b7:a9:
                    8d:99:b3:36:35:9b:37:6f:65:40:d2:7d:7e:71:d9:
                    90:5b:06:17:d9:7c:5d:96:67:9c:cc:e8:13:78:d3:
                    ef:91:49:f8:95:12:e7:02:eb:1f:a2:48:b5:20:92:
                    4e:1b:69:1d:6a:7a:c1:fe:f0:41:18:ab:42:0d:76:
                    5a:be:c3:4d:0f:88:cd:17:0f:aa:54:2c:b1:ce:73:
                    7a:94:b2:78:69:31:05:03:1e:e8:1b:e0:9e:4e:52:
                    b1:6a:15:a9:54:f6:76:02:78:88:7d:96:1b:16:bb:
                    fa:51:aa:8c:c0:fc:c1:b6:ec:3c:54:75:64:5d:6b:
                    af:30:c3:3f:15:7e:10:6c:86:ab:07:33:b9:aa:d6:
                    39:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:27:3B:2C:EF:21:33:B6:34:80:CF:3C:96:C2:35:65:25:F2:02:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0440698-04bf-35f0-99b8-a957ee70ef6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d4:16:af:53:0a:bd:b9:15:d5:38:a0:05:e3:72:64:d8:3c:
         3a:01:ba:50:84:17:be:47:fb:6d:a7:8b:15:15:15:97:ca:2b:
         84:aa:80:bb:35:39:34:ab:fa:a0:67:c7:d0:5c:c3:64:b6:7f:
         1a:b4:fa:09:8a:e5:1b:50:52:60:c2:41:96:d9:44:cd:42:54:
         81:22:b7:8c:c2:a9:1b:e9:4a:10:20:2f:b4:b5:b3:1e:ac:5c:
         5a:47:5c:f7:6b:09:60:83:db:a3:c5:e0:43:87:c4:69:b8:d4:
         e9:10:db:11:d2:49:5d:e2:e8:32:d4:fc:bd:03:49:50:b0:57:
         ae:c6:36:34:ca:a0:dc:ed:47:5e:a0:99:02:01:30:c4:b5:a3:
         17:f8:f3:45:ca:cd:ae:17:6f:9e:7c:2f:87:5c:37:38:85:17:
         52:b4:13:3b:e3:0e:12:c7:30:0b:37:30:f3:3d:d9:1b:e9:24:
         78:8c:73:31:5c:8d:5a:5a:11:a6:51:c8:91:6d:c9:99:e6:37:
         fa:85:e3:d8:f4:af:ec:8f:5d:9b:02:30:1a:31:8e:9c:14:11:
         0e:e6:54:73:93:dd:af:73:8c:93:6a:b3:58:9a:2b:c7:40:88:
         b8:d1:6a:2b:59:a0:96:ca:7b:21:96:00:3e:33:27:9a:e9:3a:
         38:0d:e8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:32:28 2026 by rpki-client