Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/415667a9-f3a1-36c9-b361-1ad5a6f7ca12.roa
File:                     415667a9-f3a1-36c9-b361-1ad5a6f7ca12.roa (raw, json)
Hash identifier:          DginS0HMFigN18FFwhrQjDJ5qwaw78yJXyXwwrOhmsM=
Subject key identifier:   04:8E:B3:D7:4C:8A:F7:6E:B7:59:C3:95:6A:D2:9E:1A:92:31:4D:21
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC922093CA9CFA6AFDB32940
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/415667a9-f3a1-36c9-b361-1ad5a6f7ca12.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     54502
IP address blocks:        184.104.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:20:93:ca:9c:fa:6a:fd:b3:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=15d8ed9d-467c-4f79-b042-156840361395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:02:cb:50:13:f9:b9:1e:24:9d:0f:09:2d:a2:
                    7a:13:13:7c:01:1e:5d:ec:cc:94:5e:a3:05:80:a1:
                    27:e7:e1:c8:f9:ed:61:20:d6:8e:0a:de:c0:b8:53:
                    3d:34:9f:f0:30:4f:74:86:35:e9:23:6a:84:24:27:
                    d9:4a:14:ee:17:56:db:6d:71:a8:fb:2b:29:be:31:
                    f9:18:3c:f6:93:57:5c:85:37:9a:5b:62:cd:7a:15:
                    a6:84:0e:18:1e:01:fb:7e:cd:f9:f0:63:59:bc:33:
                    48:da:e9:96:8a:d8:b3:00:16:93:d6:b5:a0:b1:7b:
                    24:15:15:b3:56:6c:80:6c:32:9a:5e:12:e2:d6:93:
                    63:b1:fe:39:9d:07:f9:7a:88:fe:40:d5:05:56:1d:
                    b6:66:77:ee:f3:16:23:1c:61:83:65:00:d6:53:28:
                    8d:96:c4:4a:0b:7d:ba:a5:fb:71:51:1a:72:af:f0:
                    6a:a8:e7:aa:aa:b9:32:76:ee:13:d0:82:5e:f9:a8:
                    2b:0b:62:69:32:ac:ff:9d:09:31:eb:df:40:d9:d9:
                    66:f4:51:04:9f:c0:01:b3:e6:7d:0d:18:b4:cf:f6:
                    7f:d4:8a:79:6e:68:a3:d3:ec:2e:3b:e8:fc:c5:67:
                    c7:f9:15:18:64:50:f0:a6:b1:d2:f4:9d:88:b7:95:
                    59:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8E:B3:D7:4C:8A:F7:6E:B7:59:C3:95:6A:D2:9E:1A:92:31:4D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/415667a9-f3a1-36c9-b361-1ad5a6f7ca12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.104.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:41:7f:8e:6b:3a:9b:77:9b:45:e0:8d:81:1b:c5:47:a2:30:
         ac:2b:90:76:c1:7d:84:af:3d:36:25:fa:d0:76:b8:d7:e0:b6:
         48:bf:04:87:a1:2c:23:a3:48:a7:94:e7:d6:40:df:25:35:de:
         98:b8:31:16:c6:d1:b3:ee:0a:67:5e:1e:76:57:b5:4e:36:17:
         27:60:77:f5:30:44:fe:90:4a:7c:d9:3d:85:89:27:58:d7:59:
         11:1f:31:64:87:36:6f:79:2e:9b:d3:7c:c0:f1:60:d9:8c:0a:
         99:61:31:36:92:90:d8:9c:c7:6c:ba:bd:86:ae:1b:cc:da:12:
         aa:60:cb:df:fa:d8:30:85:27:84:f2:06:26:f2:2f:52:c8:ba:
         89:18:b4:63:b9:27:77:ca:6b:20:47:b4:9d:f9:1f:0a:ff:0b:
         05:53:97:38:82:fd:05:1f:9c:93:67:99:58:9d:90:9e:04:91:
         ca:4c:17:b9:f0:27:36:73:df:51:f5:ca:34:0f:18:66:0c:09:
         76:71:62:44:8a:0f:90:8b:eb:86:cd:cc:db:95:8c:cf:9f:77:
         c4:06:2a:5b:84:4d:9d:a3:6d:86:df:1f:f5:3b:9f:68:81:c6:
         96:e5:9b:ae:11:fe:b1:53:fd:32:a9:96:3f:ec:1b:cd:0a:cd:
         37:a4:4b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:29:16 2026 by rpki-client