Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/490a4bd1-a054-3fca-adc1-dd7da6e09aff.roa
File:                     490a4bd1-a054-3fca-adc1-dd7da6e09aff.roa (raw, json)
Hash identifier:          /OVMxbQD+bvXInQJdoTcYY7/5C+m5eGTFSReCWAh4SI=
Subject key identifier:   43:EF:1F:72:A0:E1:29:01:8A:53:CC:B8:5D:E4:B0:A5:5D:77:AE:4B
Certificate issuer:       /CN=1fcf03e6-ce00-46fb-a94d-ae02bfc41232
Certificate serial:       010D0C9F4328584DA11AB770D31A9E938FB4FE00
Authority key identifier: AA:3C:33:55:FE:F6:2B:B1:51:3F:B9:E9:F9:A2:CC:9C:97:D0:C2:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/490a4bd1-a054-3fca-adc1-dd7da6e09aff.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     14618
IP address blocks:        104.232.45.0/24 maxlen: 24
                          204.27.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:b7:70:d3:1a:9e:93:8f:b4:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fcf03e6-ce00-46fb-a94d-ae02bfc41232
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=11d8ec5d-af7d-40bd-bc58-a5f368cfdcd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:66:60:8d:77:be:7a:15:5b:1b:5f:9b:5d:
                    71:c4:d6:e9:1d:20:40:1d:7f:17:d1:d0:b7:1d:30:
                    50:bb:31:b6:1b:bd:0b:c3:38:0b:4f:ea:59:d1:77:
                    74:82:1b:0c:0e:57:c7:80:c5:7b:91:15:59:05:98:
                    ab:be:a6:d4:6b:28:b6:3d:2d:c5:6b:f9:b1:2b:84:
                    03:a9:42:72:01:81:95:b3:c4:8e:8e:88:c0:bc:d2:
                    f5:5a:42:e8:dc:04:9b:b8:5d:36:ee:14:ca:2f:11:
                    d1:ed:c9:72:76:f2:8a:df:94:f7:c9:04:94:20:47:
                    a1:d1:58:f4:b6:c4:5b:73:b7:d7:5e:20:a3:61:b9:
                    30:ee:7a:c5:af:f5:32:94:16:3e:74:39:e4:06:b0:
                    6d:99:b3:d9:0f:0e:a8:6d:ff:7f:27:3d:77:ff:3e:
                    52:b1:98:4d:3c:1e:f1:fe:3f:2b:78:32:c4:96:51:
                    aa:16:6b:df:01:44:64:84:c0:08:d2:c9:14:e9:c4:
                    7b:96:9e:b4:ac:cd:5c:84:b3:54:04:f2:1d:ec:13:
                    42:fa:2f:f0:11:71:69:73:96:b4:a4:24:f9:28:ee:
                    6d:7b:8b:d3:4b:d0:c5:e9:37:6c:10:bb:22:a3:7f:
                    58:85:86:01:a8:f6:16:31:90:71:d6:d1:17:d9:03:
                    63:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EF:1F:72:A0:E1:29:01:8A:53:CC:B8:5D:E4:B0:A5:5D:77:AE:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/490a4bd1-a054-3fca-adc1-dd7da6e09aff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.crl

            X509v3 Authority Key Identifier:
                keyid:AA:3C:33:55:FE:F6:2B:B1:51:3F:B9:E9:F9:A2:CC:9C:97:D0:C2:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.45.0/24
                  204.27.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d7:5b:7f:01:5c:01:b9:f3:85:54:06:35:86:34:ae:b8:ae:
         b0:38:57:cd:35:f8:e4:88:d3:c9:72:12:7e:ae:1c:a3:3b:e8:
         c1:d5:87:24:a7:b0:3d:c0:5f:1c:62:a2:1f:ac:36:a0:2c:9f:
         e3:97:c4:d0:60:91:af:ac:4a:b0:e5:0f:2b:0c:2e:0a:e7:fc:
         00:bf:f8:28:ea:c1:88:0d:ca:a6:eb:1a:db:0a:48:71:ed:08:
         84:f7:e9:ad:36:5b:86:a2:30:77:42:df:31:cb:d7:44:8f:18:
         c2:22:05:4b:2a:46:df:27:0e:1c:51:fe:11:c5:e2:0e:dc:31:
         28:5c:58:1a:74:6a:60:35:9a:fd:a7:02:37:bf:65:c8:98:1a:
         59:dd:a4:86:f5:ac:a1:85:95:79:a1:9a:93:c7:68:7c:a9:a4:
         49:b5:0f:8a:90:73:3b:4d:db:46:e0:ea:be:81:5d:52:ae:d7:
         17:18:77:3d:e6:64:ba:51:47:21:a4:dd:f7:31:45:31:dc:ba:
         c2:1e:22:4c:41:05:67:98:27:dc:24:0f:57:21:b8:cf:7e:62:
         4a:ea:43:77:eb:22:d3:60:9a:eb:8e:ef:f6:64:b3:7b:eb:97:
         ef:e6:e2:57:9f:e4:4e:a1:09:06:4a:df:b7:97:ce:64:0e:79:
         02:16:f8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:51:47 2026 by rpki-client