Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/40251245-16f3-31eb-a464-e3d07c98bd4e.roa
File:                     40251245-16f3-31eb-a464-e3d07c98bd4e.roa (raw, json)
Hash identifier:          mUBwBfRqKb0fya/lSPUnd1QLc5RmB3Ba7qbREy7oC9g=
Subject key identifier:   32:D9:41:3A:F6:59:71:BE:07:14:DC:8A:62:B5:51:D1:19:D7:85:98
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584EA79A0382110DD4C7B5936E80
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/40251245-16f3-31eb-a464-e3d07c98bd4e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     834
IP address blocks:        104.241.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:03:82:11:0d:d4:c7:b5:93:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fa473060-ccf1-4ac6-a4ab-b4796a3c57ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b5:1f:b8:11:70:6c:9f:c7:1c:06:d5:30:ae:
                    cd:d9:b4:1c:81:71:c5:2e:52:bc:1a:6b:9e:81:22:
                    e4:b2:df:11:19:99:e4:d0:6e:f0:9d:a1:4e:dc:04:
                    5a:54:ca:6c:41:03:7f:38:19:51:f4:d8:73:3a:ae:
                    6a:53:17:e6:04:2b:56:1f:99:eb:ea:ad:ac:b3:17:
                    85:fc:17:e2:56:aa:b3:6d:44:a5:9c:13:43:fa:b5:
                    58:a8:a7:f6:96:25:9e:48:75:68:31:10:45:03:79:
                    d1:51:31:29:6e:7e:d1:63:7b:76:3f:20:fc:43:a4:
                    f9:4e:e0:eb:1e:b9:62:23:ff:40:62:85:ec:20:f8:
                    43:ca:55:fc:7e:bd:ad:63:59:05:bd:5a:cf:ff:e5:
                    1d:7d:5a:bc:e2:9d:ab:f6:7b:41:6b:1f:c0:77:91:
                    3d:3e:32:a4:5e:21:6d:a7:b8:7e:94:88:d3:08:ff:
                    71:c7:9f:23:fa:12:13:38:89:17:e6:0f:ca:38:7d:
                    cc:0f:62:53:b7:ad:08:39:a7:5b:96:5a:d1:26:32:
                    76:4b:3f:de:c3:d1:c1:7c:1a:f5:f5:bb:22:3d:60:
                    59:7f:21:11:33:e8:be:51:8e:08:78:a7:10:d3:b5:
                    47:42:08:63:97:48:be:c7:fb:2f:5c:94:02:ee:08:
                    d8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D9:41:3A:F6:59:71:BE:07:14:DC:8A:62:B5:51:D1:19:D7:85:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/40251245-16f3-31eb-a464-e3d07c98bd4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:82:b3:75:d7:eb:ce:68:f6:f2:ae:81:65:4d:59:61:02:48:
         68:64:16:f1:6b:2c:41:f6:1a:16:c0:60:9c:4f:b2:58:80:89:
         6d:c6:1b:eb:ea:08:d5:0f:87:30:06:29:19:ad:e0:55:56:19:
         c2:cc:d2:9f:10:bf:52:c9:46:53:ae:ef:dc:0c:2e:47:c2:e3:
         81:6b:69:c4:1b:06:6a:00:b5:59:98:5a:06:ee:2e:5a:ba:ec:
         fc:c8:dd:ab:a3:6c:b0:8c:ce:de:42:97:17:68:71:88:43:64:
         99:b7:38:19:1f:9d:5a:5d:b7:e0:27:6e:9e:b3:90:55:56:61:
         9b:83:cd:fb:d7:17:35:f6:84:65:26:1a:35:05:a3:55:89:10:
         9c:d7:39:36:10:33:11:56:cb:17:5f:a2:fa:93:ab:f0:a8:a1:
         af:8f:4f:d0:a6:b0:99:cd:a1:67:42:a4:4f:d9:b5:89:5c:ec:
         7c:fb:35:87:a3:2d:9f:b5:1d:7b:3f:a9:22:90:d2:cb:ec:75:
         fe:70:bc:8e:c0:e2:13:6e:18:f3:38:6c:16:31:d9:b3:77:62:
         c6:12:39:b9:3c:07:7a:96:3c:f9:b5:a6:d7:6e:fd:f4:c7:14:
         f1:30:91:e8:fa:3d:a4:85:d6:b0:ce:1a:e7:67:db:fa:61:be:
         55:d1:18:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 21:40:26 2026 by rpki-client