Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/90e30d69-d192-3d3b-af69-a1564717f280.roa
File:                     90e30d69-d192-3d3b-af69-a1564717f280.roa (raw, json)
Hash identifier:          nFoPDl2aezP8gSAt9eHTo1veLrvscd0jYhg9Riwaa7w=
Subject key identifier:   B2:4D:D4:8B:00:04:4D:58:26:C9:97:75:4D:CA:15:9C:15:2F:73:4B
Certificate issuer:       /CN=3681ef63-b03c-48af-8191-e13ce8cb78c3
Certificate serial:       010D0C9F4328584DFA70A5AABAD1C2D171D8D280
Authority key identifier: 7B:B8:74:AC:94:43:89:50:D9:20:1E:3B:BD:36:E6:81:97:D1:3E:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/90e30d69-d192-3d3b-af69-a1564717f280.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     30580
IP address blocks:        104.249.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/3681ef63-b03c-48af-8191-e13ce8cb78c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/3681ef63-b03c-48af-8191-e13ce8cb78c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:a5:aa:ba:d1:c2:d1:71:d8:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3681ef63-b03c-48af-8191-e13ce8cb78c3
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=7f8a6a52-c8ef-4f9f-afc3-cd7fc0254ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:79:99:31:38:c0:69:a7:71:33:9d:20:55:a2:
                    35:d6:c7:7f:c9:57:23:51:5f:c8:12:f5:38:bc:11:
                    7e:25:59:10:39:d2:59:e0:91:0c:c7:71:3f:48:82:
                    c5:f6:5c:8b:66:b0:b0:8e:6b:22:3d:70:05:35:6a:
                    ae:02:51:fd:65:2c:b2:3c:70:9c:a6:44:06:13:83:
                    a6:62:32:77:ed:75:d7:9d:d2:67:b4:96:39:7d:13:
                    99:6c:d9:6f:7f:a7:ac:88:75:1e:b0:fd:b8:06:33:
                    f1:7d:40:9e:14:b5:e5:c6:ee:f0:1e:e5:6d:d5:ae:
                    f0:72:54:1d:da:36:91:13:c5:28:36:5c:39:4f:c4:
                    9a:95:6b:da:8e:30:ad:42:60:44:a3:53:a4:ba:49:
                    58:c8:db:f2:c2:f5:4d:94:c0:28:54:ca:8e:6b:98:
                    a1:c5:05:1a:71:e9:46:93:17:ff:15:93:f4:42:d7:
                    31:f1:fc:57:f0:c4:b5:d7:82:b5:22:91:ca:19:13:
                    be:59:7d:66:41:15:c5:7c:9e:37:12:30:51:52:d6:
                    c9:73:0a:73:2f:f7:b7:4d:6b:4d:1e:0d:77:cb:5d:
                    d5:ba:c8:c6:a4:e0:a7:6f:ad:a4:16:b6:ca:ee:a3:
                    66:17:ee:64:d0:9d:f3:df:51:a9:91:fe:ee:65:8d:
                    94:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4D:D4:8B:00:04:4D:58:26:C9:97:75:4D:CA:15:9C:15:2F:73:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/90e30d69-d192-3d3b-af69-a1564717f280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/3681ef63-b03c-48af-8191-e13ce8cb78c3.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B8:74:AC:94:43:89:50:D9:20:1E:3B:BD:36:E6:81:97:D1:3E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.249.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:58:55:1b:eb:db:b6:1b:7b:23:58:ba:ea:56:a0:dd:a1:4d:
         77:44:46:b5:ed:e6:b0:aa:81:52:54:0c:63:1a:30:d6:50:ec:
         8c:62:f2:c6:aa:cd:c9:b7:bb:bc:e1:2c:58:00:0d:d5:af:dc:
         c6:69:eb:02:ff:c7:fd:3f:5a:56:49:a9:97:2e:e0:06:cf:d8:
         74:bc:a2:a5:54:2e:13:c0:1c:6e:69:ca:7b:c6:3e:d5:7c:ea:
         d5:06:f7:04:22:6a:c0:af:42:fe:d6:de:97:9c:38:ba:ce:45:
         0c:cd:eb:cd:3d:63:21:35:a6:ac:3f:6e:34:23:84:3c:f1:df:
         5b:30:af:3b:39:e6:f0:cf:62:2f:1e:09:ef:da:a6:95:7b:0f:
         20:45:3d:e3:78:28:80:e2:d0:06:f3:1f:15:7b:66:f5:7e:a1:
         1d:20:c8:6f:97:82:70:a0:54:f3:66:53:15:ed:25:e3:14:7e:
         c6:4c:9f:4c:ad:5f:79:15:93:7c:b8:a8:5f:09:85:c9:31:99:
         29:ee:31:65:5e:0d:64:6d:21:ce:6c:4b:59:1f:f2:dd:2e:29:
         ec:65:eb:3e:a9:7f:2f:57:f8:68:08:84:c8:8f:f6:41:cc:49:
         25:2d:a7:94:94:3f:63:03:1b:45:0e:5f:be:9f:5d:23:7d:9c:
         98:41:bd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 23:12:37 2026 by rpki-client