Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/0cd6796e-24d6-3b46-a126-08587718218d.roa
File:                     0cd6796e-24d6-3b46-a126-08587718218d.roa (raw, json)
Hash identifier:          WQc5W4Pwyh8KP/uIdYuL9a2ayzWf4zUgvkOUdVvULCo=
Subject key identifier:   AD:7F:AC:7C:6E:4A:1B:A1:24:0B:7E:A0:BC:CC:0A:23:80:2A:21:77
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584B8DFDA35AA772CBF8E87B0100
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/0cd6796e-24d6-3b46-a126-08587718218d.roa
Signing time:             Fri 17 Oct 2025 19:07:44 +0000
ROA not before:           Fri 17 Oct 2025 19:07:44 +0000
ROA not after:            Thu 15 Jan 2026 20:07:44 +0000
asID:                     834
IP address blocks:        104.241.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:fd:a3:5a:a7:72:cb:f8:e8:7b:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Oct 17 19:07:44 2025 GMT
            Not After : Jan 15 20:07:44 2026 GMT
        Subject: CN=ff31b7a9-5e0d-431b-b8a1-37dbe2e0e81c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:21:83:43:3d:9b:61:8f:aa:7a:f1:0b:81:f6:
                    0d:bf:de:a9:b7:96:92:45:e6:8e:b1:84:88:af:9a:
                    c2:7b:52:e5:08:15:fb:a0:42:a3:3a:a3:6f:6b:aa:
                    47:a8:93:07:0e:af:e0:93:f2:cf:43:c3:c8:bd:93:
                    23:23:3c:ba:80:1d:98:99:9d:0a:57:40:3d:7a:06:
                    80:51:da:d4:08:58:32:32:71:fe:e4:e1:82:5a:83:
                    fe:42:cd:30:79:7d:ef:5c:ef:47:1a:bd:cc:2f:ec:
                    b0:8b:19:f6:f6:f8:d6:c8:f8:fc:79:1e:0f:52:46:
                    89:7f:63:2c:ad:93:dd:77:c5:1b:b1:97:5f:37:96:
                    f9:a8:90:81:2b:e0:ba:e6:09:ea:83:81:38:a1:2f:
                    40:cd:f0:0d:7f:69:f6:77:0a:7a:28:6d:67:53:6b:
                    2c:48:b9:fe:b1:28:a8:dc:41:fc:e9:98:e1:0b:c2:
                    8f:02:c5:68:bd:66:ff:ae:75:91:f8:3b:e8:22:75:
                    97:5e:bc:ea:36:e3:b5:c9:94:14:39:22:4f:0a:6b:
                    28:fc:bc:a2:37:a9:7d:f7:94:4e:de:bf:84:85:47:
                    92:e9:e2:ff:13:6d:98:33:fb:70:22:2e:94:2f:10:
                    5a:82:d4:35:26:45:df:c7:d9:3a:4e:27:0c:59:d6:
                    c0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7F:AC:7C:6E:4A:1B:A1:24:0B:7E:A0:BC:CC:0A:23:80:2A:21:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/0cd6796e-24d6-3b46-a126-08587718218d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:07:c5:d5:a2:f2:a8:48:61:45:08:d3:dd:db:3e:a8:a6:f3:
         bd:fc:57:7a:b8:3d:1c:bb:d5:9f:4c:fb:c2:1d:3c:58:47:5d:
         29:b3:c2:e5:9b:b1:bc:83:dd:2b:c1:17:78:1e:c1:1c:78:95:
         a0:22:5b:80:53:3d:e3:e1:68:c3:c8:54:a5:1c:e1:86:6b:3d:
         9e:71:ef:9e:ef:af:7d:ac:bb:a4:47:c6:32:ff:f4:cf:fb:ae:
         e0:7d:9c:f0:ed:11:04:9d:12:81:33:15:87:b5:c8:c0:45:eb:
         91:6b:e6:b7:f6:41:8c:d7:42:b4:51:70:f2:f3:3f:42:4d:01:
         5d:5c:00:a5:56:47:07:84:d1:95:d8:f8:68:02:9a:e8:b1:06:
         0f:a1:d6:05:7c:76:43:b6:ce:bd:1e:1f:e1:30:f4:5f:d0:a0:
         8f:74:25:7d:21:bb:92:23:c3:72:ba:59:f0:4b:61:9c:d6:a6:
         fe:5c:f6:ce:7b:8f:00:6c:8e:03:47:4f:bb:ca:23:90:ac:70:
         57:bc:43:79:25:09:aa:15:98:27:bb:87:c3:65:56:59:3e:ae:
         5a:4b:d3:61:1b:3b:d9:09:c0:6c:70:33:11:07:ca:1f:1d:8e:
         ea:42:39:8c:85:01:9f:b3:61:b4:58:b3:d9:69:92:61:04:dd:
         6f:1e:73:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:17 2025 by rpki-client