Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f4c8ef7a-d183-31eb-a02c-28f936c6e0f2.roa
File:                     f4c8ef7a-d183-31eb-a02c-28f936c6e0f2.roa (raw, json)
Hash identifier:          fQMMz1eg3BC6+3sktr5q78FpUAi15GEzQMOcxmGWWQg=
Subject key identifier:   E0:97:27:A7:A3:31:98:4F:DF:F6:7E:CE:E2:5F:D3:70:4E:F3:3A:2D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DF210A905C7410719C46C01E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f4c8ef7a-d183-31eb-a02c-28f936c6e0f2.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     41264
IP address blocks:        104.133.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:a9:05:c7:41:07:19:c4:6c:01:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=22a26ac4-42a2-43d1-b824-703548b3dd25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b6:e3:b4:c8:44:88:8c:82:1f:c2:6a:b1:44:
                    6f:22:c4:f4:8a:35:c0:64:32:5d:70:dd:a0:71:f3:
                    ee:4c:c4:bd:41:91:97:a4:0d:a1:5b:83:42:94:5c:
                    9c:97:d5:87:d2:2d:98:c7:f2:6d:aa:87:6e:2b:7c:
                    2f:00:3f:df:14:b3:0d:3b:e6:72:4c:45:b4:00:14:
                    13:08:bc:e4:7d:86:a7:95:2c:12:be:12:1e:dd:83:
                    03:04:b5:30:99:91:36:9d:64:cd:45:d4:3e:00:08:
                    01:eb:3c:48:f2:ce:c2:04:b1:d8:e2:4a:45:d0:1c:
                    cc:88:59:97:fe:e7:8d:7d:b0:23:33:c8:67:b8:bc:
                    ea:92:49:b7:28:61:39:d6:a5:9e:ff:58:39:a8:43:
                    13:fe:5e:0d:78:d5:70:4c:d3:52:4b:78:1e:c6:b8:
                    39:c7:8e:be:0f:14:97:5b:96:9a:dc:25:2b:f7:4a:
                    b8:11:40:3a:61:3e:5f:88:2c:bd:ef:9c:82:bc:6b:
                    54:c3:14:7f:47:b7:da:0a:00:a4:43:ce:d5:b6:bf:
                    a4:66:ce:95:24:5d:db:16:25:78:54:2c:a2:3f:74:
                    26:96:77:d9:7a:d8:4f:3d:6a:87:0e:08:66:70:d5:
                    63:d6:05:7f:50:4c:32:d4:25:c2:8b:ac:a3:af:33:
                    58:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:97:27:A7:A3:31:98:4F:DF:F6:7E:CE:E2:5F:D3:70:4E:F3:3A:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f4c8ef7a-d183-31eb-a02c-28f936c6e0f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:22:83:73:74:7e:3b:75:e5:88:8b:b3:e3:ad:eb:1f:ae:0b:
         ea:04:8c:1b:d3:70:70:7a:21:b0:a6:8a:a5:67:30:da:a4:cf:
         f0:e9:d0:ed:d1:9b:57:a6:7f:9e:82:81:8e:5f:9e:6b:60:f8:
         be:8c:d9:fb:ec:b9:e4:3d:23:2b:66:9e:46:30:29:29:ef:d4:
         d0:54:2a:33:b8:2c:e4:f8:49:95:bb:28:24:32:b9:5a:50:fd:
         38:8d:27:ec:30:61:44:66:98:ee:95:28:b2:e3:e1:49:55:41:
         46:46:38:c3:24:bc:4f:61:83:ca:a2:c9:d1:1a:c2:e8:d3:29:
         79:b1:f7:87:be:a0:4d:cb:f1:47:ec:f9:cb:ba:06:61:d6:85:
         22:99:b5:9b:fd:ba:ef:03:23:4b:d8:b9:c7:64:35:38:31:b0:
         17:13:e7:c5:71:d8:a8:05:f1:53:ba:c9:80:b5:12:c9:69:cd:
         ce:80:25:fe:10:f9:b2:d5:69:f7:9e:8b:76:81:c9:03:52:6e:
         28:0a:29:3a:cd:db:61:a5:9a:11:ed:4e:10:10:5d:eb:56:e6:
         f1:9a:83:e7:7f:69:87:f7:4c:82:03:1a:89:60:36:45:0f:20:
         31:2e:47:c1:30:71:33:be:0d:d0:f3:65:84:90:e9:7f:68:84:
         1a:40:fb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:51 2026 by rpki-client