Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fb44ef4a-e864-367f-82eb-6e041374e8b7.roa
File:                     fb44ef4a-e864-367f-82eb-6e041374e8b7.roa (raw, json)
Hash identifier:          UEPUr380ogYOqZMgLBT3KzYLPH2fPO1M8PmHd74c5Z8=
Subject key identifier:   DB:40:AB:DC:74:95:B6:88:0D:AD:A6:A2:BF:C7:0E:57:D0:8D:BA:0B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584DEF4600DDDB851471B619CC00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fb44ef4a-e864-367f-82eb-6e041374e8b7.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     41264
IP address blocks:        104.132.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:46:00:dd:db:85:14:71:b6:19:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=6c6b2404-96e9-4552-9b10-3ae66f7e9287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:28:bb:b9:c0:9f:11:8b:88:c3:0c:88:0c:87:
                    61:5b:4f:f7:89:4f:95:95:d4:2a:7b:eb:02:4b:76:
                    7c:17:f8:ec:da:5a:08:d4:08:cc:6a:e9:14:7f:ca:
                    af:25:dc:90:2c:90:2c:32:4d:bc:6c:f2:5e:39:44:
                    7c:68:92:8e:58:e9:7f:77:3a:ee:c9:f8:e3:4d:9c:
                    97:b1:ea:27:27:2a:85:07:7e:20:34:4a:66:d1:96:
                    5b:a8:d9:00:b7:04:b1:e8:ee:23:3d:3a:5e:02:a1:
                    30:9f:b7:23:3b:e9:57:81:ba:79:05:1e:95:01:82:
                    c7:04:7b:39:7a:45:d0:c5:e4:d1:eb:ca:df:a0:58:
                    dc:3b:16:f0:73:1e:1d:c2:d7:40:64:61:07:b7:fc:
                    56:1a:17:3b:6a:9c:20:f6:92:18:73:64:99:54:3f:
                    ad:97:85:18:b2:df:a4:f8:a9:37:dc:86:46:a3:01:
                    bc:dc:dc:94:a2:b6:6c:c1:80:dd:ce:d0:cb:9a:3b:
                    59:2f:e4:7f:82:92:b5:c1:30:be:aa:fb:7d:ad:48:
                    c3:c2:8d:ce:5c:5a:42:87:67:15:f9:7e:31:b9:55:
                    04:10:c8:72:8a:c6:3e:1c:0f:e7:72:5e:81:05:30:
                    51:01:72:1a:17:90:b1:43:19:8a:24:5c:44:10:0c:
                    29:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:40:AB:DC:74:95:B6:88:0D:AD:A6:A2:BF:C7:0E:57:D0:8D:BA:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fb44ef4a-e864-367f-82eb-6e041374e8b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:f9:c2:18:d1:ae:b6:ea:77:5a:9c:44:a6:c6:fd:46:f9:a4:
         d3:41:19:cb:5c:2b:df:af:d8:dd:66:d6:c3:1f:c7:48:0f:27:
         86:72:5a:05:47:31:95:00:44:8b:83:b5:2c:1f:99:a0:03:f1:
         24:df:c7:a8:4d:22:ea:62:ee:c4:6c:05:6e:f7:49:24:d7:fb:
         a2:27:d0:c7:a0:71:17:a5:b7:f4:81:a1:02:37:14:3b:d0:89:
         96:0b:49:fc:98:61:c5:d8:ad:c9:ad:ae:ff:f6:db:13:2a:5d:
         48:0b:8f:1c:ce:3b:bc:72:87:43:e8:ca:38:61:a7:89:13:9a:
         49:81:9e:a1:32:c3:c5:01:10:78:8c:26:df:18:f1:30:7d:b7:
         1a:3f:88:1d:eb:55:59:ac:97:e7:d8:61:1f:78:f3:f2:e4:57:
         9a:70:f1:ed:4f:af:02:3a:bf:7a:98:18:b6:e9:15:77:d4:8a:
         7a:49:1b:1b:81:62:07:c1:a7:26:3d:5b:ac:32:1c:45:f5:bf:
         17:ca:1d:5d:e2:6b:45:6a:53:0f:b4:86:93:06:65:23:7a:a2:
         e6:e0:78:86:8d:f1:dd:29:0f:05:c7:61:68:38:cf:0a:a4:ee:
         27:49:28:bd:1b:c4:af:dd:52:1d:13:4d:bf:b3:0f:27:73:5b:
         7f:25:89:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:30:32 2026 by rpki-client