Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/ca26579d-946f-3e44-8304-e7727add2166.roa
File:                     ca26579d-946f-3e44-8304-e7727add2166.roa (raw, json)
Hash identifier:          OmigsFtCSmlvQ5FsXt6nBcut4dmHekv4JV+tDDfWR/k=
Subject key identifier:   23:2F:BA:83:C3:AE:F2:24:FD:60:B1:A6:01:0B:B2:BE:15:8B:CC:FA
Certificate issuer:       /CN=bb49c202-f644-4fa6-8a36-084312761f72
Certificate serial:       010D0C9F4328584F06E31884E99BE6D01F517D80
Authority key identifier: CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/ca26579d-946f-3e44-8304-e7727add2166.roa
Signing time:             Tue 01 Sep 2026 04:47:52 +0000
ROA not before:           Tue 01 Sep 2026 04:47:52 +0000
ROA not after:            Mon 30 Nov 2026 05:47:52 +0000
asID:                     219394
IP address blocks:        104.245.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:e3:18:84:e9:9b:e6:d0:1f:51:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb49c202-f644-4fa6-8a36-084312761f72
        Validity
            Not Before: Sep  1 04:47:52 2026 GMT
            Not After : Nov 30 05:47:52 2026 GMT
        Subject: CN=a61c1d65-f190-4409-b17c-4d9aaace78ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:ea:67:cb:c4:0b:d5:92:2f:b2:64:92:3a:
                    33:f8:1c:2a:73:c4:71:0a:81:d4:12:8c:e1:9b:0d:
                    db:8d:d7:88:84:48:26:44:24:ad:3e:b9:d5:0c:c2:
                    1b:fd:22:84:eb:de:8c:63:87:4c:62:4d:89:b3:04:
                    93:22:d2:56:f8:e4:d9:b6:c4:f2:50:72:72:67:b1:
                    ac:14:b4:01:5a:4c:4b:75:a7:5f:0e:23:8c:87:8a:
                    11:7f:24:aa:18:27:e0:4d:85:1f:34:82:4e:37:f5:
                    dd:66:e3:55:a7:de:f3:d9:f4:74:ae:e9:93:fa:60:
                    e0:cc:15:e9:07:ac:62:49:dd:24:c6:f7:c7:2c:96:
                    2c:2d:bd:c0:51:03:d6:3d:95:14:32:bc:66:a2:aa:
                    1c:bf:cd:21:d1:0c:f6:d7:f1:e5:b5:dc:99:e2:e7:
                    17:9f:03:49:03:63:fc:78:26:ae:91:19:42:e3:66:
                    0a:d4:7d:d3:ef:2a:ba:3b:a4:ea:ee:aa:67:0c:8b:
                    90:4e:53:ba:ab:b8:ff:db:68:dd:56:ac:db:ba:02:
                    08:f8:9f:12:90:b4:a0:48:4d:f0:a5:30:fe:d0:4c:
                    5b:2b:08:e0:ce:e1:f0:8e:62:a4:33:59:44:df:81:
                    65:62:95:0d:a1:36:c1:25:3c:fc:d6:c4:af:81:63:
                    3d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2F:BA:83:C3:AE:F2:24:FD:60:B1:A6:01:0B:B2:BE:15:8B:CC:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/ca26579d-946f-3e44-8304-e7727add2166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:5a:ff:eb:b2:26:ec:97:89:bb:20:17:2e:ce:6b:03:7c:6d:
         02:88:27:49:79:72:83:2d:ab:84:d9:77:d3:80:5d:06:d8:08:
         bd:39:ca:2f:27:7b:5f:b6:f6:99:c1:c3:da:9d:33:be:99:c9:
         7c:26:8b:64:f0:e8:ee:24:29:cb:2a:70:1a:53:dd:c6:9f:bd:
         c5:96:30:6b:f9:1f:6c:57:4f:92:af:4e:41:25:9f:cb:56:5c:
         80:1c:f8:6b:24:73:f1:65:f9:8b:c5:af:69:b6:0a:f2:96:1e:
         34:d2:5e:e1:11:f8:ac:2e:20:72:43:56:68:eb:da:a9:21:56:
         5e:7a:53:36:59:c4:2c:f6:1a:93:08:61:5b:a3:69:ed:1e:08:
         e0:7e:af:b7:86:5c:3a:4e:23:be:ef:f5:8c:ff:52:b8:a6:e7:
         cf:00:9c:93:3b:14:61:82:f6:c5:b7:c1:fa:57:42:86:c3:5f:
         3d:7e:19:72:54:18:cd:46:5b:99:76:a2:31:b6:d5:2d:73:61:
         29:2f:1b:41:68:79:3c:6f:4f:b6:65:77:51:d3:d3:82:76:1a:
         95:87:96:72:7e:83:3f:be:54:f7:bb:45:4a:fb:bf:dd:53:81:
         3a:0a:59:c8:5f:24:99:dd:3e:73:a4:9d:2a:11:e0:89:d6:23:
         f5:f1:07:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:10:20 2026 by rpki-client