Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/d41f1336-242b-3e77-b9c2-948fb3acace5.roa
File:                     d41f1336-242b-3e77-b9c2-948fb3acace5.roa (raw, json)
Hash identifier:          NvZRg2V6iwBOXgyUo/sY+nwS5d7WGs3BkK7LJ4LmfmI=
Subject key identifier:   39:C6:54:66:E0:91:01:14:20:6E:46:B3:3B:93:99:48:5F:D8:CD:1A
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584F49734D1F7334DD7821FEFE00
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/d41f1336-242b-3e77-b9c2-948fb3acace5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401783
IP address blocks:        104.241.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:4d:1f:73:34:dd:78:21:fe:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d89047f0-daab-45dc-95cd-49e2bae0c495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1d:b9:0b:89:ae:4a:be:5e:35:c0:1e:b0:e8:
                    3e:6a:e0:ee:3d:20:c7:06:15:62:6a:b6:b1:66:9e:
                    24:52:dd:c3:56:94:eb:f0:7a:2c:8a:c5:a9:50:f4:
                    07:46:39:2f:e3:6d:49:1e:a8:a7:eb:21:de:46:e4:
                    c0:30:1b:7e:c9:cb:5a:ba:9b:01:0f:af:e1:ee:7d:
                    09:eb:52:f5:0b:37:02:5a:be:58:74:dc:26:b7:5c:
                    3b:7f:e5:d8:bb:39:5f:32:93:db:ce:a8:60:0a:2a:
                    a2:4b:c3:c0:22:a2:08:7d:79:4f:22:39:d1:c5:1d:
                    b4:ee:d6:2c:d9:25:8e:68:3f:e0:fa:99:0b:87:3d:
                    8c:be:1b:c0:86:08:3d:f3:50:15:0f:9d:1e:52:c6:
                    3b:1f:3a:0e:58:e4:d5:b8:c8:51:90:d7:52:75:78:
                    0f:0e:d5:80:6f:e5:33:a3:f0:46:43:6d:7d:93:ca:
                    c9:67:b4:be:ee:e3:c8:65:77:fd:df:75:c3:e8:e8:
                    27:fc:5a:cc:63:ef:36:32:0e:75:2e:88:d0:a6:f4:
                    35:b6:4b:e1:7b:d4:b2:a6:38:68:6e:2c:5c:f6:ab:
                    64:c7:db:24:38:b9:7d:ea:06:25:8b:42:41:0e:58:
                    3f:53:bb:7d:81:06:ca:bc:4c:02:4c:34:66:45:9b:
                    7e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C6:54:66:E0:91:01:14:20:6E:46:B3:3B:93:99:48:5F:D8:CD:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/d41f1336-242b-3e77-b9c2-948fb3acace5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:91:f8:e3:49:65:6a:1c:61:94:8a:6f:25:3d:c6:69:61:ec:
         98:7b:18:2c:4e:4e:bb:47:20:13:c7:89:51:43:4d:5a:01:11:
         c2:0f:a7:03:2a:4a:76:37:75:f7:ab:85:33:f1:2c:7b:f1:af:
         de:1f:c1:4d:14:0e:5f:e1:68:ba:5b:65:c2:be:19:e7:dc:32:
         1e:30:df:f9:a5:fc:f7:dd:68:5d:c5:e3:62:69:f2:c1:de:bb:
         34:13:01:a6:70:c0:38:0a:f0:3f:e1:9b:7a:e6:8a:3b:76:e1:
         1b:01:88:88:e7:65:18:8c:39:ba:4d:8f:1c:a8:d9:b1:ab:fa:
         7e:60:2d:56:04:a2:ba:a2:38:37:e3:88:65:74:7e:fb:78:5d:
         91:f5:d9:94:d5:24:e6:74:15:f8:79:a5:02:28:2a:ad:70:40:
         2e:6b:cf:f6:1f:40:6b:27:3b:f6:c4:fe:15:61:82:b5:8c:65:
         4e:24:70:37:53:95:2f:1a:d4:2a:3a:44:ed:8d:f1:37:69:6c:
         d4:51:5b:62:ee:b2:bd:68:a8:24:0b:90:95:f5:54:57:14:48:
         d9:e7:83:f8:cf:b5:45:ed:51:30:2a:54:e5:e3:c2:71:e5:02:
         78:18:db:d5:4e:d9:b3:a3:83:d2:61:5c:46:91:e4:c0:d1:52:
         e7:9a:c1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:28:10 2026 by rpki-client