Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1fb06752-ee59-3efb-894c-01b3e3a45c2e.roa
File:                     1fb06752-ee59-3efb-894c-01b3e3a45c2e.roa (raw, json)
Hash identifier:          IhOl7AyMtUxzKXLuizjg3ysbKhmkOocDQTM3Uo2vcsk=
Subject key identifier:   88:05:64:90:E1:BF:CE:53:05:A0:12:AA:1E:9F:6F:26:A6:2E:9C:76
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584DB4A5867985F08A80A3436E80
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1fb06752-ee59-3efb-894c-01b3e3a45c2e.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     11290
IP address blocks:        104.245.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:86:79:85:f0:8a:80:a3:43:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=b19f9bb7-d6f0-478e-ad68-9e31280b84df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:50:9d:e0:60:01:1d:32:1c:d1:2e:dd:0f:ec:
                    09:ec:33:3f:e3:e2:2d:87:24:4d:b5:05:42:d8:cb:
                    da:ec:0d:23:cc:d4:d5:4e:3a:21:78:d6:ef:0b:7f:
                    e1:6c:ef:b3:62:6a:3a:c9:aa:d5:81:88:93:63:a3:
                    b9:3a:c6:db:83:cf:6b:7d:6a:fa:d5:53:2f:c4:ea:
                    d1:e9:c1:d8:01:d6:ee:10:cb:02:f1:f0:08:1b:93:
                    d4:78:82:d0:37:ba:9e:34:cc:6d:c5:e2:fb:1c:f7:
                    fd:cc:6d:0a:e1:1b:e9:41:bb:c5:53:a1:2e:09:ee:
                    80:3e:68:a8:67:4a:5b:0e:f6:ed:57:a4:68:f9:f4:
                    31:04:4d:80:78:72:49:fb:7a:37:8a:5c:8d:43:f7:
                    13:5e:15:c9:a0:2a:05:51:92:d0:23:79:c8:22:82:
                    9f:77:c0:10:1d:41:00:27:57:d4:54:95:d4:03:1b:
                    6a:7f:0f:5a:35:51:39:a1:02:78:d9:b6:68:63:6c:
                    c3:59:ac:ba:87:56:06:66:63:a8:e8:39:1e:d0:59:
                    81:8d:af:ee:9f:8e:cc:f9:ce:a4:2e:35:81:1f:c9:
                    b2:39:b4:19:b0:ff:b0:c7:23:93:c8:8e:d2:e8:f5:
                    f3:68:4f:b6:95:a9:fc:19:e8:66:bf:de:00:06:95:
                    9f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:05:64:90:E1:BF:CE:53:05:A0:12:AA:1E:9F:6F:26:A6:2E:9C:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1fb06752-ee59-3efb-894c-01b3e3a45c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:08:46:3b:a6:36:e0:e7:54:c0:b4:1f:08:fc:fd:9d:20:ea:
         3d:3d:d1:b3:08:19:8d:bc:d1:16:4a:8d:41:63:af:18:b3:bc:
         84:32:f8:fb:ad:a2:ae:e2:02:1d:f4:97:61:2b:e1:4e:38:5d:
         65:2c:5a:90:f7:24:c9:0a:58:2e:fe:b7:be:e1:e7:2e:12:cf:
         fb:cb:46:ee:ef:bf:ce:79:d4:37:c3:13:d7:07:84:eb:72:43:
         f0:7e:12:21:74:85:a5:90:a4:60:c1:e7:94:86:fc:d3:51:14:
         5d:c7:19:c2:d6:86:7b:97:bb:ad:de:76:d9:37:d7:45:a3:00:
         d9:b7:ab:6f:1c:9a:47:f9:5a:12:89:fd:7e:47:56:4e:f7:3f:
         4e:b7:91:eb:44:bd:42:35:1d:84:e9:4c:4b:f1:7f:77:37:ec:
         5c:52:38:66:8b:df:2d:2c:73:84:7f:ad:09:a5:f1:7f:40:76:
         55:3c:7c:79:75:9e:64:cb:59:4f:50:70:73:4c:4d:e1:27:fa:
         56:9b:dc:2a:22:44:35:b2:bf:6b:13:52:2f:6f:7a:07:03:b1:
         d7:a3:96:44:ea:be:bc:d4:0a:6b:05:93:48:26:b0:98:4b:cd:
         68:c4:8a:06:a5:58:53:14:bb:a1:3b:fc:e9:da:ff:f8:14:a0:
         3e:35:96:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:43 2026 by rpki-client