Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/aaf0afb9-21cc-3093-9672-d4bd78801824.roa
File:                     aaf0afb9-21cc-3093-9672-d4bd78801824.roa (raw, json)
Hash identifier:          KAE4xKEZeJ3LBlVA+x02LtugKXheFdjJJuQaqh+U1yU=
Subject key identifier:   6D:A2:EE:A6:0E:3F:DD:87:20:B5:04:AD:B9:EA:54:1A:CF:11:89:2D
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584EA793E13077B5C3361E206200
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/aaf0afb9-21cc-3093-9672-d4bd78801824.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401783
IP address blocks:        104.241.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:e1:30:77:b5:c3:36:1e:20:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=442888d5-36f4-4d4c-ada4-d2a14f234b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:33:b2:6f:4f:46:77:e3:05:5a:ee:67:09:46:
                    38:64:0d:d9:3d:c8:4e:2f:f4:ad:86:27:18:1a:70:
                    07:7f:a9:6b:1e:1e:d4:ae:e3:30:fd:f7:19:29:be:
                    b2:4c:81:37:18:ad:30:c9:c2:98:8d:01:c3:89:b4:
                    b9:7e:5e:8a:20:4b:52:7f:c7:08:cd:06:31:21:f5:
                    1e:80:e9:fa:20:35:1a:a1:f0:7f:25:29:55:8c:59:
                    ab:1e:f7:d9:1e:6a:9e:a0:ec:15:c5:23:4c:6b:1c:
                    5e:e5:90:74:43:78:57:5e:2b:98:2c:25:2d:58:1e:
                    26:72:9d:c8:96:65:35:97:45:e3:08:b2:1c:7d:34:
                    bb:ac:fa:3d:de:77:04:1b:4e:60:a1:83:1e:94:43:
                    87:4a:5d:25:d1:c8:7b:a4:e5:39:cb:43:7a:b0:00:
                    84:10:0c:f5:45:45:b5:04:f7:83:76:e3:16:23:db:
                    b2:14:90:6a:8f:fd:1c:f8:17:3d:08:46:05:c9:97:
                    81:16:18:08:c3:72:dc:4c:01:84:e4:ae:8a:71:f6:
                    ca:c9:9f:38:cc:d2:48:3b:41:a5:23:ae:94:24:7b:
                    bf:2a:61:bf:0b:5d:20:4b:26:25:f0:43:32:30:22:
                    b0:af:f9:d1:4c:5d:b8:4c:ca:36:55:a1:08:9c:34:
                    a9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A2:EE:A6:0E:3F:DD:87:20:B5:04:AD:B9:EA:54:1A:CF:11:89:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/aaf0afb9-21cc-3093-9672-d4bd78801824.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:38:bf:11:d6:00:bf:91:78:eb:75:b4:09:c6:88:a1:bc:f6:
         76:8f:c5:24:47:b8:fa:1a:46:ba:89:c8:ee:fa:2f:fb:b5:d0:
         84:d1:42:43:d0:39:de:11:2d:9f:70:1b:e7:a5:67:ed:36:b0:
         dd:09:0e:4f:8c:10:83:31:39:9c:93:0a:7b:c0:a1:7e:95:dc:
         00:ec:8e:96:84:6a:e8:4d:d4:e2:1b:11:32:4e:ea:00:ad:b6:
         45:25:f8:a6:1c:cc:6d:61:a8:f4:df:9b:4d:b8:e3:e7:ee:b3:
         7e:e0:af:39:89:ff:37:fd:9e:2e:10:30:84:d6:0b:18:75:b9:
         79:58:9f:0c:b8:d9:07:dd:d9:d4:68:a0:a4:70:73:fe:80:a8:
         6f:46:57:11:32:f4:7f:04:f4:79:4f:4f:89:c2:c3:5c:ec:ce:
         33:77:38:38:3d:4c:b4:52:d7:bc:b7:9c:ad:0f:9f:9e:3e:1c:
         8a:24:7a:bd:a5:36:60:96:0a:95:6f:e2:a9:d2:97:a4:2e:2a:
         c0:08:5e:e4:bb:85:e8:b9:80:bc:a5:48:eb:69:f5:f6:e0:39:
         21:a6:e3:19:53:23:1c:fd:c1:bf:8a:59:40:76:50:9b:5b:78:
         4c:6e:8e:22:89:45:50:30:13:c7:78:d6:b5:76:21:dd:d0:3c:
         6a:fd:33:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:45:05 2026 by rpki-client