Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/67d346e9-d3c5-364e-8e18-63b3e414b7e6.roa
File:                     67d346e9-d3c5-364e-8e18-63b3e414b7e6.roa (raw, json)
Hash identifier:          WVEbY3RnksnsIW/M54qDZC6ix4eAl8pQSygZleIgYE0=
Subject key identifier:   C3:F2:1F:B2:6A:52:82:8D:E8:2F:63:87:44:7A:27:43:35:12:5B:E9
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584EA693E956747D71850EECA598
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/67d346e9-d3c5-364e-8e18-63b3e414b7e6.roa
Signing time:             Tue 28 Jul 2026 16:50:43 +0000
ROA not before:           Tue 28 Jul 2026 16:50:43 +0000
ROA not after:            Mon 26 Oct 2026 16:50:43 +0000
asID:                     29802
IP address blocks:        104.241.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a6:93:e9:56:74:7d:71:85:0e:ec:a5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jul 28 16:50:43 2026 GMT
            Not After : Oct 26 16:50:43 2026 GMT
        Subject: CN=08f0dc98-61b3-4bb9-9668-27bcdf8c4d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:44:2f:94:58:a9:53:25:22:d4:96:2e:2c:ad:
                    b1:b5:03:c4:ae:b6:6c:3a:8f:d1:39:78:04:4d:5f:
                    b3:28:e3:5e:76:e5:41:69:93:a3:fa:31:89:94:81:
                    ed:c0:d2:cf:d6:3c:df:f3:e4:90:f2:89:3d:61:a3:
                    fd:ce:8c:ea:e0:b8:ac:c0:31:ac:37:c9:e7:dd:ee:
                    12:fc:e3:48:b9:d1:b6:c4:54:ad:74:b6:82:dc:10:
                    4a:ce:ff:89:df:ed:a5:77:b4:d3:6a:25:63:f0:69:
                    ce:39:5a:70:ba:9f:2d:eb:6c:bb:1c:e4:6b:a0:a0:
                    5d:68:d4:45:90:82:ec:70:57:d0:8d:4e:4c:04:d8:
                    33:76:23:24:6a:ee:4a:60:59:99:bb:fc:94:4d:69:
                    81:0a:b4:28:11:b1:86:5f:bb:1f:92:7d:31:f1:1e:
                    41:7a:9a:d2:d4:ad:bb:fe:02:7d:e5:23:59:03:9c:
                    ad:d7:b7:f3:96:3e:45:f5:5a:2b:84:0b:ef:a0:a3:
                    be:cc:8c:24:54:89:c7:bc:a0:31:6f:dd:bb:1d:bf:
                    89:3b:3f:72:70:99:b1:3d:fa:1e:71:79:c2:9c:b2:
                    3e:d6:c2:a4:cc:a6:d0:24:da:f3:e9:7e:64:f1:c6:
                    0c:e6:d1:7a:6e:77:fa:b9:03:8e:c9:5f:37:fd:85:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F2:1F:B2:6A:52:82:8D:E8:2F:63:87:44:7A:27:43:35:12:5B:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/67d346e9-d3c5-364e-8e18-63b3e414b7e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:a2:67:60:a8:52:e9:3e:62:96:4c:f2:c3:c9:9c:52:8c:ef:
         58:5b:11:41:5c:00:5b:8e:50:22:f7:8d:b6:39:0d:f0:11:d3:
         69:eb:6d:3c:b3:bc:51:2b:dc:ac:74:14:86:c7:0a:d4:f8:ea:
         37:09:1e:5a:c3:78:f6:90:ff:4e:2f:cb:a5:7a:11:26:61:6f:
         93:19:84:32:69:3d:97:2e:4f:01:ea:36:d7:93:39:9d:7c:b6:
         b2:17:cc:2f:23:4d:11:bf:2d:59:b5:40:6f:5f:56:21:b4:c4:
         cf:b5:13:c2:b4:d1:dd:3c:a9:5b:ca:bf:86:12:c7:19:64:57:
         fd:eb:9d:96:f8:a5:54:0b:bc:9a:21:d8:c6:1f:2f:2f:89:4d:
         7a:98:1e:ee:cb:e2:fb:ca:4b:31:5d:a9:89:86:37:07:be:a2:
         45:09:9c:e7:08:65:6e:ff:ec:91:d0:97:36:68:3b:21:cb:e4:
         aa:88:c5:4b:b8:bd:a7:d6:d9:c8:a3:43:2f:28:1b:9c:4c:a8:
         cb:99:89:3e:05:ba:24:b6:c9:55:7c:52:ca:38:86:12:13:4e:
         7a:60:0f:eb:c4:fc:2f:fe:d2:20:f3:ed:36:5d:d3:e1:e7:2c:
         59:ab:ec:ca:e0:d5:fc:6c:cb:64:84:12:c4:b5:94:82:f2:38:
         6c:f1:45:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:59:58 2026 by rpki-client