Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/1f2f402b-d83f-34b3-9b2c-78f1e99bc126.roa
File:                     1f2f402b-d83f-34b3-9b2c-78f1e99bc126.roa (raw, json)
Hash identifier:          NeKoEqlrU+JF8EfvmbN9T2YE+z0wuH6diUV6fLHI+hQ=
Subject key identifier:   18:16:73:55:64:3A:32:39:8A:B3:26:1F:CB:34:BF:C4:8F:B2:99:2A
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584DA3537EBF9DFD72CF4D6DE600
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/1f2f402b-d83f-34b3-9b2c-78f1e99bc126.roa
Signing time:             Sun 26 Apr 2026 20:06:34 +0000
ROA not before:           Sun 26 Apr 2026 20:06:34 +0000
ROA not after:            Sat 25 Jul 2026 20:06:34 +0000
asID:                     5065
IP address blocks:        104.241.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:53:7e:bf:9d:fd:72:cf:4d:6d:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Apr 26 20:06:34 2026 GMT
            Not After : Jul 25 20:06:34 2026 GMT
        Subject: CN=8268a423-4ade-4f4d-a91c-525fd6d8c26c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:51:96:b3:4e:b4:b7:06:35:ad:5a:2b:b4:88:
                    8f:90:18:af:5e:eb:b6:b6:d9:a3:41:d0:8d:f0:0e:
                    8c:3b:d0:cf:54:33:7a:59:10:58:cb:14:39:25:47:
                    bb:20:49:8e:1f:b5:34:a1:48:3b:e7:d5:35:ae:cc:
                    40:e3:c4:fb:9c:0d:f6:27:69:ee:ad:a4:21:07:e1:
                    ec:3c:89:5b:c4:06:fd:a0:0d:07:b3:a8:dd:df:00:
                    f2:c0:46:91:61:da:d4:65:12:f8:2e:d8:fc:9d:3d:
                    48:29:be:93:69:bb:a2:f4:95:75:08:b9:ea:6e:c7:
                    ba:ba:1d:cf:fc:f5:e1:03:ad:b5:1a:38:9d:54:97:
                    0d:9d:16:82:84:18:cf:f3:cd:4b:5e:1d:52:bc:df:
                    bd:c6:07:78:d3:71:a6:02:4f:22:8e:68:67:98:f6:
                    fe:18:dc:b1:7f:17:c4:24:26:45:1c:94:cd:36:c5:
                    02:a8:6d:19:e2:1c:76:af:d4:48:90:09:a2:fe:1f:
                    1d:7a:79:d1:37:07:e5:76:ac:7a:e4:eb:07:ef:d0:
                    81:3d:87:eb:f9:e4:10:47:91:50:80:a9:a4:5b:35:
                    87:78:f5:44:3f:a9:37:e0:f4:66:d8:a2:c5:b9:76:
                    49:5e:3c:32:b2:71:36:0f:32:7d:e1:12:08:d0:d7:
                    cb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:16:73:55:64:3A:32:39:8A:B3:26:1F:CB:34:BF:C4:8F:B2:99:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/1f2f402b-d83f-34b3-9b2c-78f1e99bc126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:31:d5:42:7c:11:a6:fb:60:8a:dc:3a:f3:d5:ed:23:2f:43:
         82:da:9c:d3:6d:97:c9:38:28:83:63:82:2d:6a:0f:84:df:43:
         33:34:25:8f:a1:9f:3a:9b:2e:7b:30:c8:bd:ed:18:7a:dc:49:
         78:ab:f2:a2:e9:06:04:5b:0d:6e:7c:6b:d1:9d:f4:10:b5:aa:
         9b:76:a5:6c:77:11:0f:74:d0:dd:bb:43:08:e8:ab:03:1b:f9:
         8d:b5:ab:6c:f5:ec:8d:57:93:23:9c:e0:01:7a:d9:d0:69:fb:
         db:d1:ce:1f:94:34:29:b7:84:78:17:49:6e:09:60:ee:38:5c:
         38:37:48:6b:02:88:76:5c:cd:5d:31:42:c9:8c:0e:6b:7c:e4:
         a9:11:a0:da:70:7b:8b:0d:d5:5a:52:f9:64:9c:2f:2d:4d:57:
         c2:d5:9c:f6:d4:05:7e:22:ce:71:37:c5:6b:e3:15:fa:85:0a:
         d6:12:bc:70:17:34:a0:77:34:d6:97:9d:80:60:7d:ef:66:66:
         bd:6c:ad:32:4f:6f:28:c8:af:f5:cf:fa:de:85:37:f9:1b:c6:
         e3:06:b5:7a:32:41:50:3f:e8:9d:68:9c:40:94:98:e1:e0:d4:
         ff:33:b1:5e:c1:29:ca:e0:49:18:31:f9:a5:f9:6b:65:7f:4a:
         07:82:09:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:04 2026 by rpki-client