Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/0c208ef4-e41c-3b36-b71d-457dafd8db8e.roa
File:                     0c208ef4-e41c-3b36-b71d-457dafd8db8e.roa (raw, json)
Hash identifier:          4xvjkrKiybf49c6OZbwSS9C1sDqka6S426yjN6aZi6I=
Subject key identifier:   B3:B7:24:84:5D:D9:44:6F:23:48:97:A3:8F:94:67:16:03:C5:0A:86
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584D9A22A261BB5EE6B6EF5D1F40
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/0c208ef4-e41c-3b36-b71d-457dafd8db8e.roa
Signing time:             Thu 23 Apr 2026 13:05:51 +0000
ROA not before:           Thu 23 Apr 2026 13:05:51 +0000
ROA not after:            Wed 22 Jul 2026 13:05:51 +0000
asID:                     401783
IP address blocks:        104.241.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:22:a2:61:bb:5e:e6:b6:ef:5d:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Apr 23 13:05:51 2026 GMT
            Not After : Jul 22 13:05:51 2026 GMT
        Subject: CN=b0e29872-1b03-4e04-888b-98302f48d1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:be:46:96:63:5b:fc:63:11:fd:52:39:5a:23:
                    f2:40:db:d8:68:6b:2f:7b:15:87:a2:a0:5f:9c:39:
                    c6:90:df:24:6b:fd:c6:c3:a9:50:18:db:ed:f2:7f:
                    1b:7c:ac:59:a6:50:10:24:dd:2b:5f:80:d7:9f:47:
                    73:a9:b2:b3:f4:ea:16:c6:36:5a:f8:88:30:cb:f8:
                    53:46:fe:8e:42:b7:ab:51:84:f6:62:b8:ca:80:44:
                    bf:89:bd:c9:97:82:ae:da:c2:fb:7b:17:67:42:b3:
                    f2:8b:72:4a:90:f3:81:09:1e:e1:3c:58:a6:16:f9:
                    68:80:6d:dc:45:65:b2:6c:2f:b0:84:ae:0f:77:54:
                    25:de:bc:dc:6b:45:70:55:d1:48:60:98:30:1c:99:
                    c3:51:4e:9d:35:2a:f4:66:fe:ba:27:31:a0:e8:12:
                    be:79:d7:7d:e4:82:4d:97:63:6d:e4:e3:95:e7:2b:
                    75:49:81:71:15:0c:11:2d:89:18:ae:86:62:0f:1b:
                    0a:03:c6:df:97:d6:3c:69:c8:2d:22:b2:dc:b9:68:
                    8d:a5:1a:80:38:76:04:c4:29:d3:72:de:51:0c:d5:
                    75:63:1e:48:cc:5a:09:45:10:b5:4f:51:8d:1d:ee:
                    ca:6d:10:4c:88:4d:1a:53:fc:61:f6:6a:86:3b:67:
                    8b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B7:24:84:5D:D9:44:6F:23:48:97:A3:8F:94:67:16:03:C5:0A:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/0c208ef4-e41c-3b36-b71d-457dafd8db8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f4:e8:f7:6e:4c:18:22:7b:64:0c:32:7d:7f:9b:11:79:08:
         2c:b8:5f:39:f6:99:59:a4:6e:94:a8:5d:39:60:a2:e6:37:e8:
         af:8f:57:45:75:69:12:0e:9b:4c:70:dd:ce:d5:0c:3d:7e:95:
         a2:2a:b9:01:0a:b5:c0:a6:7f:82:2a:d1:11:c3:bb:44:f0:fe:
         be:c6:4b:4f:23:20:dc:0a:4c:b7:32:87:3b:c9:d4:00:e2:e4:
         81:cf:23:5c:51:66:0e:25:dc:7a:4d:2d:ed:f1:0d:68:f6:66:
         3f:0e:de:0c:cb:62:2f:21:f0:63:be:a9:b7:42:d1:82:d7:c3:
         c8:3c:da:a7:63:96:36:e2:ec:4e:b1:86:4f:d5:ff:45:2c:71:
         3b:a2:fa:4a:40:6b:20:ff:e8:c8:fa:44:a9:db:55:56:42:b6:
         ef:2b:da:55:94:f7:d9:58:c1:e0:73:58:3b:c1:8e:42:5c:80:
         8f:3a:9c:07:43:1e:87:2f:4e:d1:ea:49:50:ee:91:61:82:a8:
         5a:d3:2a:ef:7f:00:e2:48:13:52:8d:62:aa:d8:18:21:bd:b7:
         86:de:19:b8:ea:58:58:92:0b:39:64:36:78:7f:6d:10:ee:e8:
         0a:e0:6c:83:0a:5c:d1:ca:d7:a3:e8:9c:c1:75:36:49:27:3c:
         a4:7f:18:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIqJhu17mtu9dH0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI2MDQyMzEzMDU1MVoXDTI2MDcyMjEzMDU1MVowLzEtMCsGA1UEAxMk
YjBlMjk4NzItMWIwMy00ZTA0LTg4OGItOTgzMDJmNDhkMWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr5GlmNb/GMR/VI5WiPyQNvYaGsvexWHoqBf
nDnGkN8ka/3Gw6lQGNvt8n8bfKxZplAQJN0rX4DXn0dzqbKz9OoWxjZa+Igwy/hT
Rv6OQrerUYT2YrjKgES/ib3Jl4Ku2sL7exdnQrPyi3JKkPOBCR7hPFimFvlogG3c
RWWybC+whK4Pd1Ql3rzca0VwVdFIYJgwHJnDUU6dNSr0Zv66JzGg6BK+edd95IJN
l2Nt5OOV5yt1SYFxFQwRLYkYroZiDxsKA8bfl9Y8acgtIrLcuWiNpRqAOHYExCnT
ct5RDNV1Yx5IzFoJRRC1T1GNHe7KbRBMiE0aU/xh9mqGO2eLnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLO3JIRd2URvI0iXo4+UZxYDxQqGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMGMyMDhlZjQtZTQxYy0z
YjM2LWI3MWQtNDU3ZGFmZDhkYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPG3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEv06PduTBgie2QMMn1/mxF5CCy4Xzn2mVmkbpSoXTlgouY36K+PV0V1
aRIOm0xw3c7VDD1+laIquQEKtcCmf4Iq0RHDu0Tw/r7GS08jINwKTLcyhzvJ1ADi
5IHPI1xRZg4l3HpNLe3xDWj2Zj8O3gzLYi8h8GO+qbdC0YLXw8g82qdjljbi7E6x
hk/V/0UscTui+kpAayD/6Mj6RKnbVVZCtu8r2lWU99lYweBzWDvBjkJcgI86nAdD
HocvTtHqSVDukWGCqFrTKu9/AOJIE1KNYqrYGCG9t4beGbjqWFiSCzlkNnh/bRDu
6ArgbIMKXNHK16PonMF1NkknPKR/GNk=
-----END CERTIFICATE-----
Generated at Wed May 13 02:38:25 2026 by rpki-client