Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178/425771da-379e-3bd1-b203-04aa5c0c7a5f.roa
File:                     425771da-379e-3bd1-b203-04aa5c0c7a5f.roa (raw, json)
Hash identifier:          5ITMcSTXWFOFGiyv6aVUtNh6HmQLOCcO97HL2IQ6nPM=
Subject key identifier:   0D:62:6D:EC:E2:03:4A:D0:1A:F9:E1:FE:ED:84:C8:23:E7:96:36:45
Certificate issuer:       /CN=1851cb45-f2c7-47f9-9317-3b3cb02a6178
Certificate serial:       010D0C9F4328584EC2AF778EEEAB1E4B0EBC6154
Authority key identifier: 16:96:63:7F:0B:FB:AB:75:3E:40:58:C4:0E:E9:83:4A:FC:B6:26:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178/425771da-379e-3bd1-b203-04aa5c0c7a5f.roa
Signing time:             Fri 07 Aug 2026 18:28:53 +0000
ROA not before:           Fri 07 Aug 2026 18:28:53 +0000
ROA not after:            Thu 05 Nov 2026 19:28:53 +0000
asID:                     33607
IP address blocks:        104.232.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178/1851cb45-f2c7-47f9-9317-3b3cb02a6178.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178/1851cb45-f2c7-47f9-9317-3b3cb02a6178.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:af:77:8e:ee:ab:1e:4b:0e:bc:61:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1851cb45-f2c7-47f9-9317-3b3cb02a6178
        Validity
            Not Before: Aug  7 18:28:53 2026 GMT
            Not After : Nov  5 19:28:53 2026 GMT
        Subject: CN=4016a9e6-68b5-4c22-8c1d-234dda3d69db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:31:5b:b4:e3:4f:18:18:62:2d:d7:a8:71:9d:
                    c4:de:a1:60:39:df:99:46:cc:9c:81:d6:30:6d:a3:
                    f7:c1:5d:69:50:41:2a:3d:99:05:48:61:6f:a6:0a:
                    6c:e0:9e:62:1a:1c:b7:9c:ea:a5:66:fb:e5:6c:26:
                    a6:b9:27:ab:b3:4b:c9:89:8c:1f:cd:28:7f:b8:5f:
                    8e:fa:75:46:88:33:64:7e:b3:9c:55:a6:fb:bb:58:
                    dd:c1:3a:dd:9c:f6:8a:4f:5b:a2:a6:21:7e:e7:77:
                    c4:ae:5d:fe:37:12:c0:55:d5:8d:2b:d7:9d:e9:a5:
                    c3:4e:f4:1e:21:c4:0d:5a:fb:96:4e:30:3a:4f:23:
                    c4:da:d6:fb:9f:9a:b1:33:55:d2:ec:ff:8b:1d:00:
                    d3:d9:84:f3:f0:7f:94:5f:3e:a2:32:9e:fc:57:27:
                    6c:98:b4:29:35:3b:b6:e7:0b:63:e4:1a:36:b2:a8:
                    ae:cd:b4:d0:ab:7b:45:72:cb:b4:17:21:30:80:c1:
                    ba:0a:57:b0:a0:21:54:93:94:4d:c0:91:71:80:d4:
                    2c:c6:bc:76:b3:68:b0:8b:17:d7:ad:cf:e9:e8:84:
                    6b:84:73:78:73:e0:eb:1d:13:ca:d9:3f:f9:1b:5f:
                    f6:a0:af:0e:aa:50:02:11:48:21:8a:ac:86:c3:64:
                    41:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:62:6D:EC:E2:03:4A:D0:1A:F9:E1:FE:ED:84:C8:23:E7:96:36:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178/425771da-379e-3bd1-b203-04aa5c0c7a5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178/1851cb45-f2c7-47f9-9317-3b3cb02a6178.crl

            X509v3 Authority Key Identifier:
                keyid:16:96:63:7F:0B:FB:AB:75:3E:40:58:C4:0E:E9:83:4A:FC:B6:26:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1851cb45-f2c7-47f9-9317-3b3cb02a6178.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:fa:3d:e3:44:14:13:a8:75:da:e2:ba:45:fe:08:7d:a6:f7:
         07:c1:12:f7:41:ed:f1:d1:42:1c:23:a2:79:87:b5:1f:13:3e:
         09:f6:37:ed:2f:7b:a5:76:7e:bd:2d:5b:c4:1a:a5:78:ce:ba:
         c1:f1:36:f4:77:d6:a5:a7:e5:9d:95:b5:9b:83:16:38:7a:bb:
         3a:f1:a0:3d:4a:48:30:68:f8:87:03:ca:ec:b5:72:62:b2:7d:
         56:f2:5e:09:30:7c:c5:0d:1b:66:17:bc:ea:71:64:c6:ad:f9:
         35:a5:a3:7d:f8:8d:06:5d:30:80:f7:89:de:12:9c:14:3b:e1:
         f8:d7:6c:03:6a:54:9a:f6:1d:0b:2f:8e:1d:1a:8c:4a:e3:7c:
         84:4c:e0:b1:45:ec:10:22:83:2c:07:a4:64:45:4f:a5:46:1c:
         e8:13:9c:af:d2:4d:7f:82:c8:40:92:04:81:86:bb:3c:11:fa:
         3e:de:b0:6a:ff:a5:09:e7:00:aa:98:67:5c:dd:c9:14:97:08:
         fd:53:dd:41:a0:6b:db:0d:b3:90:ac:63:a6:db:57:a1:28:92:
         d6:01:3d:27:c2:c6:24:49:74:7f:4c:9b:8e:f2:ec:64:6f:a3:
         c2:79:9e:80:a2:d8:43:04:4a:4a:56:11:c4:0e:a4:60:4b:d8:
         08:bd:d2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:34:57 2026 by rpki-client