Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c143d50e-aae1-3757-b1d0-ba97149e9d8a.roa
File:                     c143d50e-aae1-3757-b1d0-ba97149e9d8a.roa (raw, json)
Hash identifier:          Szx2LWxEgT3pff+8G6LDJoLElzGi7S1WGHuMk5AvUY4=
Subject key identifier:   9F:5E:9F:C3:B3:57:B9:C1:15:05:36:77:3D:80:FB:ED:D1:B5:CC:D6
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E447C71CB30E6612407E100
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c143d50e-aae1-3757-b1d0-ba97149e9d8a.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        104.137.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:7c:71:cb:30:e6:61:24:07:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=8133c1b9-678c-4b70-b61e-a59c3e906370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6b:7f:e9:7b:ea:a8:cd:eb:70:f7:01:f5:c7:
                    3d:38:47:58:71:d0:6b:2d:9d:76:65:bb:58:90:e0:
                    02:0e:4e:b5:3d:4e:d2:4c:57:9b:f8:a3:7a:c1:25:
                    1e:05:49:7f:bf:91:f4:cf:b1:09:e6:4a:00:43:59:
                    e8:17:46:6b:29:49:4e:8a:71:a4:0b:02:bb:05:54:
                    12:44:3c:d4:34:9e:b3:b2:8b:13:ac:ab:0d:1a:d9:
                    f8:d2:45:d0:43:38:65:82:7c:61:65:7b:fb:24:e1:
                    22:0a:87:0e:55:fa:f9:3d:ae:04:c2:e9:67:fc:3b:
                    f2:05:98:81:30:a6:e9:7b:c4:01:c1:76:79:e2:13:
                    da:0b:4b:e6:01:92:c1:6c:64:13:24:f3:25:17:0b:
                    64:e0:d0:b4:b8:1e:aa:e3:5f:89:18:9c:de:a4:40:
                    25:8f:63:30:d2:26:01:0e:67:64:55:36:ac:4d:8a:
                    9d:24:70:4e:ea:49:75:bf:26:40:c6:94:56:31:05:
                    31:ac:9e:b5:a0:e6:c3:62:d6:3d:5f:36:6a:37:40:
                    37:86:59:c7:5d:be:62:52:37:4c:2e:13:03:6c:ef:
                    11:60:9e:0b:31:9f:3d:38:46:36:86:8c:7d:aa:0f:
                    00:0c:b8:6d:a8:2e:88:9c:a0:73:21:f1:0a:4d:53:
                    e2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5E:9F:C3:B3:57:B9:C1:15:05:36:77:3D:80:FB:ED:D1:B5:CC:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c143d50e-aae1-3757-b1d0-ba97149e9d8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.137.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:57:5b:28:af:99:ec:f5:dd:08:f5:95:30:a2:9d:18:a2:e1:
         64:c6:b4:cb:5a:dd:62:07:45:3c:5b:5e:69:8b:c8:6e:ae:73:
         c9:a7:b4:ad:d5:27:1a:49:46:35:08:84:7f:a8:2c:6b:30:fd:
         7b:e6:ae:29:d6:20:38:c2:76:4a:ca:ab:fd:73:8c:cb:15:a0:
         08:70:f7:0a:ce:d6:c3:0b:b4:7f:e4:3b:30:d2:69:51:c2:e2:
         f0:e9:25:4e:78:63:ad:fb:29:ac:98:28:1d:ea:cf:49:b1:8d:
         78:c9:50:e5:53:9b:6e:3a:d5:8e:64:44:00:97:66:34:03:1e:
         7c:ed:29:10:2f:b0:d8:ea:b7:d5:04:50:75:ef:a2:c4:5a:34:
         a0:2f:6a:a0:14:08:a0:8a:28:d4:0d:02:63:b9:3b:a8:a6:8f:
         3b:31:2d:90:92:cd:40:ea:e7:9f:7e:bd:e0:c9:9d:6e:88:94:
         56:71:ac:c8:ce:1f:39:e2:2a:ca:c2:19:74:4e:56:84:76:a3:
         96:0d:bd:e3:8e:88:9d:74:0b:e8:4a:da:04:10:53:b1:42:84:
         60:5f:02:3a:04:0d:f3:ba:f9:74:16:61:72:42:52:bc:3b:9c:
         04:e6:cd:0c:cd:8c:6c:2a:4b:81:6d:07:e2:ba:ec:32:dd:d4:
         a6:df:bb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:45:20 2026 by rpki-client