Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a061b283-c1eb-3447-ad0e-512f96de88b3.roa
File:                     a061b283-c1eb-3447-ad0e-512f96de88b3.roa (raw, json)
Hash identifier:          t3N/0jeKZSmyrqEelsC/vmWNirqyZCd7auLau06SfNA=
Subject key identifier:   34:F0:3A:7A:2A:C0:8C:50:F7:24:5E:65:08:27:AF:17:F9:5E:7C:6A
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584DA353D6BBE9B8324631BE5540
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a061b283-c1eb-3447-ad0e-512f96de88b3.roa
Signing time:             Sun 26 Apr 2026 20:07:16 +0000
ROA not before:           Sun 26 Apr 2026 20:07:16 +0000
ROA not after:            Sat 25 Jul 2026 20:07:16 +0000
asID:                     9318
IP address blocks:        104.241.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:53:d6:bb:e9:b8:32:46:31:be:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Apr 26 20:07:16 2026 GMT
            Not After : Jul 25 20:07:16 2026 GMT
        Subject: CN=f5e81525-3695-4b31-9fcf-965a9e765cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:06:0c:ef:d8:e7:4a:e0:b9:b6:fb:24:70:a3:
                    bb:1e:9f:33:a5:84:a4:41:4e:e2:7a:d0:70:9b:65:
                    bc:79:8d:21:4a:cb:a3:b7:a6:40:04:e0:92:36:cf:
                    6b:7a:4b:ee:17:ef:fe:88:ba:d1:e8:aa:8c:08:5a:
                    91:18:0f:83:76:eb:24:53:a7:7f:41:ff:f2:38:41:
                    52:c0:b0:64:42:f0:e0:16:a2:4f:38:b4:1d:ee:0d:
                    3a:47:4e:04:a2:40:81:b6:83:2f:7c:d1:40:98:7c:
                    7c:03:fa:e6:44:f0:b0:c2:0d:9c:aa:e3:82:90:11:
                    8f:41:fc:a4:9b:11:c1:9e:5a:db:a7:b3:43:11:63:
                    e3:af:fb:79:6c:be:f9:8d:51:72:f1:9d:f6:dc:ac:
                    4a:a9:11:40:87:5d:dd:03:88:92:e0:c8:3e:a8:7f:
                    0b:55:f8:ca:90:c0:e2:9f:04:35:0d:c0:73:a3:b3:
                    f1:fe:d8:31:9e:18:a2:85:98:62:5b:03:10:1e:fc:
                    6c:33:ae:93:03:b1:ed:df:48:c2:9a:69:c2:23:9d:
                    c5:12:2e:7e:e1:d9:2c:0b:9f:cc:4a:ed:69:7d:0c:
                    7d:a7:e5:9c:96:3c:75:db:a4:0d:e4:c4:d0:f0:48:
                    c2:8e:03:22:fe:29:e2:8d:42:ac:d5:ee:18:f8:5e:
                    20:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F0:3A:7A:2A:C0:8C:50:F7:24:5E:65:08:27:AF:17:F9:5E:7C:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a061b283-c1eb-3447-ad0e-512f96de88b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ae:d4:58:77:17:f3:2a:af:60:db:d7:85:1d:26:94:8f:12:
         da:8a:b7:1a:54:68:2a:df:27:fa:90:60:4a:1a:d2:b9:23:f1:
         44:6f:b4:6a:4f:4e:db:6b:8b:97:78:39:c3:22:2d:1d:b6:2e:
         2d:84:a8:5d:66:97:42:6d:a6:8c:59:0b:7a:71:60:b2:13:7a:
         ae:bf:42:bf:c6:75:fb:a8:57:f1:52:b8:05:67:e1:af:e1:63:
         c3:16:c4:87:a0:3b:bc:95:0c:c0:a6:fc:1f:6c:50:6e:51:89:
         6c:7b:ab:6d:78:21:0c:0e:27:25:28:f2:94:e1:a7:27:fe:d4:
         f0:b6:e6:4d:99:65:0b:83:ad:ed:a3:c6:0b:9b:87:7e:d9:01:
         e5:53:85:50:b5:b0:02:eb:00:e7:0c:58:72:2c:85:18:e4:7f:
         6b:a8:8b:1b:40:e2:b9:55:dd:a1:20:f2:e3:d1:7c:33:53:62:
         83:97:9b:28:c3:96:5e:53:5d:48:9d:19:df:3a:27:bf:d3:da:
         e6:a8:df:e4:93:a3:12:ac:94:69:64:93:4d:57:ec:63:51:22:
         14:e8:05:90:3a:bb:d6:a2:6a:2b:98:77:0a:70:68:5f:f6:98:
         a4:bf:a1:94:59:92:e5:9b:e1:ce:59:c4:64:66:8c:fd:e1:68:
         4c:a7:31:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 19:06:23 2026 by rpki-client