Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4bad7718-c988-34a5-8f24-ea2e7ebf1aa9.roa
File:                     4bad7718-c988-34a5-8f24-ea2e7ebf1aa9.roa (raw, json)
Hash identifier:          0zdSelq6zGfCaHLc4983AgAUjfRPLBh+IxfiQ3xbdtE=
Subject key identifier:   EB:7B:36:F8:F5:83:71:42:55:66:95:DE:1A:57:76:46:BC:08:79:19
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584DF12E7C5253A11DB955E6B540
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4bad7718-c988-34a5-8f24-ea2e7ebf1aa9.roa
Signing time:             Sun 24 May 2026 17:25:03 +0000
ROA not before:           Sun 24 May 2026 17:25:03 +0000
ROA not after:            Sat 22 Aug 2026 17:25:03 +0000
asID:                     214432
IP address blocks:        104.241.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f1:2e:7c:52:53:a1:1d:b9:55:e6:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: May 24 17:25:03 2026 GMT
            Not After : Aug 22 17:25:03 2026 GMT
        Subject: CN=ba4f9c3f-dd1a-432b-a83f-647f1ff8f469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f2:69:a9:0a:38:6f:0f:89:9e:18:16:52:3a:
                    cf:00:c2:c9:b1:7c:6b:28:2b:43:12:85:3b:97:95:
                    80:8b:f8:49:b5:ba:5e:cd:a5:e3:7e:d2:9a:12:11:
                    c0:5d:12:c2:32:5a:9c:08:8c:9c:65:92:f4:f3:80:
                    8d:8e:51:aa:91:a3:d8:08:1a:e9:5b:c9:e3:dc:0f:
                    1c:14:c9:21:43:a7:83:22:9e:8c:45:ac:58:b2:0a:
                    d9:79:10:25:c0:0a:8c:02:17:f9:93:87:8b:44:f7:
                    fe:9f:00:9a:63:0f:9f:40:f6:49:98:d4:40:a3:1a:
                    74:30:82:00:58:7f:32:03:17:b2:d3:e1:ca:68:2b:
                    cb:41:2a:c2:9b:b7:89:6a:1c:8b:34:a8:25:ac:f6:
                    08:04:8a:f5:95:7b:fb:e1:98:78:05:98:2b:ab:45:
                    6a:89:1e:13:43:91:e6:32:e7:5b:6d:99:04:64:af:
                    62:5d:67:84:61:23:5f:03:91:5b:e8:95:1d:49:ee:
                    21:b6:28:a8:89:c6:46:0e:53:b5:6c:32:cc:5b:a6:
                    a2:2e:7e:64:37:16:99:c1:e6:c3:29:46:56:89:7e:
                    fa:a8:ac:9b:ab:2b:ee:f7:b8:27:33:9e:28:78:00:
                    48:e9:a4:59:6d:c3:c7:a3:a3:2b:41:39:eb:0b:89:
                    31:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7B:36:F8:F5:83:71:42:55:66:95:DE:1A:57:76:46:BC:08:79:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4bad7718-c988-34a5-8f24-ea2e7ebf1aa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:54:ae:11:94:e4:1f:45:c0:2d:e3:01:93:fb:14:86:57:c1:
         8f:d6:0d:c5:f3:90:ef:66:4f:1c:8c:52:15:9c:6f:dd:3d:94:
         1d:2d:a9:da:6f:67:84:6a:4c:c3:bb:fb:79:74:83:e8:ab:23:
         df:41:1d:32:31:5f:94:5c:cf:cc:bb:f7:57:cb:79:0f:ee:e2:
         63:07:70:c2:0d:29:d9:cf:1b:fb:92:f9:90:b6:7f:a5:0e:be:
         ac:aa:fe:2c:36:f3:1b:b4:19:9c:7c:fc:1c:08:c2:66:f3:37:
         4f:ed:34:a8:28:a9:24:a7:7a:42:b8:3d:56:ef:75:8c:1f:2b:
         a5:45:fb:39:01:b5:31:ac:4d:5e:38:ca:a5:ae:2b:11:ed:a1:
         d9:ff:21:c8:28:52:4e:92:e5:10:55:fb:18:0f:9d:f3:b5:80:
         1b:b7:18:01:e2:a6:f3:d7:55:a6:f9:dd:d2:4d:22:9c:58:ef:
         bc:00:67:db:a3:a9:fa:58:e3:fd:7d:16:cd:56:ed:76:bb:2e:
         59:6a:96:a1:4d:97:4b:08:a4:55:67:06:9b:ab:0f:47:08:52:
         1f:5f:3a:37:c2:aa:73:2c:42:79:7c:f2:43:03:e0:6f:43:3c:
         6f:6b:ee:0e:87:7b:15:fb:08:65:e6:53:f0:8e:32:f9:bc:75:
         62:5e:22:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:39:29 2026 by rpki-client