Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/2c004264-4360-305a-bc1d-4e40913d4a3a.roa
File:                     2c004264-4360-305a-bc1d-4e40913d4a3a.roa (raw, json)
Hash identifier:          wNVI7XOBIiYnt2GJph8lF+TDwU8B2HFWEQnIavwfvDc=
Subject key identifier:   33:A0:0B:A2:9C:84:92:8E:08:19:F6:0A:4F:D7:C1:6E:17:A2:BF:56
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584FCCC69E2C5B8B0D813D3E08C0
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/2c004264-4360-305a-bc1d-4e40913d4a3a.roa
Signing time:             Wed 11 Nov 2026 02:00:12 +0000
ROA not before:           Wed 11 Nov 2026 02:00:12 +0000
ROA not after:            Tue 09 Feb 2027 02:00:12 +0000
asID:                     395793
IP address blocks:        104.241.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:cc:c6:9e:2c:5b:8b:0d:81:3d:3e:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Nov 11 02:00:12 2026 GMT
            Not After : Feb  9 02:00:12 2027 GMT
        Subject: CN=cd29669d-482c-4925-8d09-1be19a94c598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:28:21:7b:c0:b0:48:5e:10:0e:cf:e0:41:
                    9b:b9:c2:c0:d7:de:63:28:e7:57:1f:47:69:35:63:
                    25:55:b6:6b:c6:f9:e6:f1:b3:3a:9f:1f:d6:78:ad:
                    92:39:b2:1d:ef:fc:b2:14:f2:78:ac:d6:95:8b:5e:
                    2f:eb:08:c0:b9:98:f8:01:13:04:87:ff:3f:62:60:
                    ad:7c:10:cd:76:07:0f:54:24:fc:7a:f4:cc:4b:6b:
                    e9:62:cb:e4:a0:af:7d:78:ca:52:ec:fa:86:49:a6:
                    0f:b4:0e:a0:0c:9d:62:6d:6e:6a:e3:b4:1d:bc:35:
                    ce:c9:c7:cf:0d:82:20:04:62:d4:de:57:03:7e:2d:
                    20:59:1d:c7:09:30:b5:78:26:7f:37:7e:c1:a1:30:
                    d5:4f:c9:97:0f:36:cd:a1:75:f0:52:b6:bd:68:ef:
                    72:25:05:c0:f6:9c:c4:da:85:53:57:bf:e3:2d:0c:
                    88:62:61:bd:09:5f:11:48:c9:c4:3d:5f:4e:11:a4:
                    47:8d:66:a3:3e:d7:aa:25:6f:4b:d3:e0:aa:4d:45:
                    5b:75:ab:d9:52:0a:84:62:f1:80:e1:0b:75:96:05:
                    a7:ef:d3:3d:7e:9a:ba:ba:f5:f6:91:05:64:66:06:
                    99:c5:95:0b:c1:68:77:a9:2d:75:4b:87:6b:16:f7:
                    5b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A0:0B:A2:9C:84:92:8E:08:19:F6:0A:4F:D7:C1:6E:17:A2:BF:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/2c004264-4360-305a-bc1d-4e40913d4a3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:f2:f0:fe:ae:2a:4c:f3:ee:fe:b1:90:4b:f7:cf:df:19:d0:
         fa:08:7b:c6:bc:0a:db:8a:bf:7a:1e:c3:a8:a9:56:30:f4:83:
         8a:70:8b:2a:2c:0b:15:8c:4b:d1:48:f9:29:9c:3a:0e:bd:c1:
         4c:69:b5:ab:b8:d7:2d:39:37:0e:11:77:98:6d:26:c9:3c:c9:
         55:8e:e4:de:f8:b8:ab:f0:a4:d8:76:90:64:32:56:8e:6e:3a:
         e6:38:d7:ac:71:47:2c:6f:4f:e0:b2:a5:14:c2:0c:96:20:2c:
         6d:b6:d2:e5:1f:04:66:d8:f4:28:3d:37:70:9e:d1:74:4f:3e:
         f1:02:44:46:07:a7:90:27:f9:e2:15:9b:9a:62:78:77:2e:1a:
         4e:d4:ef:3f:74:bb:f9:c2:14:5e:4c:b8:f2:2a:30:ee:61:56:
         71:f4:55:c2:e7:ff:a4:fa:d5:bb:ca:a8:6c:8d:bd:4b:2e:ca:
         f0:9e:e0:05:62:8e:d6:f8:06:33:90:99:06:48:88:51:25:23:
         fc:f7:a0:80:83:26:c0:63:54:82:2d:b7:f9:a8:8c:36:81:e6:
         7f:fb:2a:01:07:1f:65:22:52:01:de:df:c2:5a:e2:8d:46:91:
         2b:e8:fb:08:18:bc:db:5b:88:62:17:6b:64:cb:e3:b3:e5:22:
         c3:07:4f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:37:33 2026 by rpki-client