Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/afe775d7-d659-36d5-9a6f-867a00aff400.roa
File:                     afe775d7-d659-36d5-9a6f-867a00aff400.roa (raw, json)
Hash identifier:          zPke0Hojp1qb3MEgO2U+4BX57AWEv8LOw+lnXj9bymY=
Subject key identifier:   B5:27:05:AE:25:FF:A0:BB:86:3A:4D:E2:9B:4D:F8:95:E5:ED:08:A5
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584F498A3E54AAB194FDBED76800
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/afe775d7-d659-36d5-9a6f-867a00aff400.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     214432
IP address blocks:        104.241.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:3e:54:aa:b1:94:fd:be:d7:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1922b0a6-e03a-462f-8344-ec025c565227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e2:98:86:13:10:95:08:2e:21:3f:83:4b:f7:
                    5f:ea:d7:05:1e:ec:7b:11:f8:75:d0:97:46:d6:3f:
                    08:22:7d:bd:07:f1:4a:66:87:b1:81:8e:18:07:e7:
                    e0:9f:0f:05:62:6b:23:b7:e9:e5:21:a4:ba:7b:3c:
                    1c:87:8c:f8:01:4a:eb:e4:dc:ae:7d:7a:62:88:08:
                    c3:ef:9c:01:05:38:6d:59:15:1d:76:cb:47:d1:87:
                    75:47:b4:49:cd:3a:85:f8:3e:54:a2:aa:7d:ff:43:
                    32:cb:d8:19:5d:b7:51:a0:43:de:f5:ec:7d:55:d0:
                    e4:50:31:e5:70:8f:a1:44:4c:00:2b:a3:91:da:2f:
                    65:96:04:03:2e:9e:cf:a2:44:e4:ae:d0:0c:2d:b9:
                    1e:44:8e:68:e0:81:9d:fa:ed:88:db:f5:47:6d:04:
                    a3:ad:5f:62:fb:2e:a5:ca:a0:29:70:e3:ac:ce:4f:
                    6e:6a:11:d5:ce:06:16:69:75:ef:2d:59:ac:29:ca:
                    fb:a3:36:63:1b:d7:30:b0:71:5c:37:50:2a:39:8f:
                    69:84:03:e0:47:e3:24:52:ed:ad:39:3c:63:3c:be:
                    03:dc:9d:6f:8d:2c:64:07:0e:90:04:0b:3f:1e:56:
                    bf:f8:6f:3b:04:47:c8:55:a9:ae:c8:31:29:27:ff:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:27:05:AE:25:FF:A0:BB:86:3A:4D:E2:9B:4D:F8:95:E5:ED:08:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/afe775d7-d659-36d5-9a6f-867a00aff400.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:9a:cf:75:84:78:85:ed:2f:38:f8:2e:b4:a2:8f:c9:a1:95:
         5f:fb:47:cf:ab:3c:62:3c:0e:df:93:e8:d6:69:6a:2c:8b:ea:
         ab:c0:32:26:da:d3:77:9f:29:ff:cb:b5:39:86:08:99:aa:a5:
         85:58:d6:3c:87:e0:ff:81:5b:5d:d0:30:13:ef:95:ee:82:6b:
         3e:5e:08:9c:9a:da:e8:87:61:4a:0e:61:89:b8:7a:a0:7a:8f:
         75:1d:bc:28:43:0a:e7:49:af:e0:8b:18:67:50:4f:e2:89:78:
         5d:66:c4:2c:ed:51:19:cf:95:69:7b:7b:61:9d:aa:d7:8a:a1:
         64:68:c3:5f:68:82:d4:b7:b5:c9:f0:18:56:a3:cb:d7:de:d8:
         f1:bd:7f:bb:e8:59:ce:04:c9:ce:a6:f6:5f:b6:15:28:bd:ce:
         8e:e6:b5:1e:ce:c3:15:11:30:ed:7b:50:97:f2:4b:79:d4:6d:
         69:a0:4e:57:0a:49:ca:e0:bb:89:78:0e:87:c8:5f:09:c8:9e:
         0e:8a:c3:cb:0f:6f:a8:f3:b8:af:be:fb:b6:62:94:25:30:a2:
         e3:96:be:0f:da:44:1b:37:5f:09:79:01:d8:3c:63:53:0a:01:
         df:69:f0:e7:07:37:4c:c0:d9:51:0b:c5:f8:fe:5c:a0:4e:13:
         ba:f2:14:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:33:01 2026 by rpki-client