Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/34c772a7-3c4d-3e9d-b2e4-263f16074e47.roa
File:                     34c772a7-3c4d-3e9d-b2e4-263f16074e47.roa (raw, json)
Hash identifier:          7OPVc68Ka7OrKKF1av0wMUqt2KEMf3bjcXgt8/zVmxw=
Subject key identifier:   60:B5:B8:5F:78:51:2F:5C:BC:B8:9A:E0:EF:16:D8:91:21:8F:18:78
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584DC9C8C3D095ADF5D405ABE280
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/34c772a7-3c4d-3e9d-b2e4-263f16074e47.roa
Signing time:             Sun 10 May 2026 14:43:34 +0000
ROA not before:           Sun 10 May 2026 14:43:34 +0000
ROA not after:            Sat 08 Aug 2026 14:43:34 +0000
asID:                     834
IP address blocks:        104.241.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:c8:c3:d0:95:ad:f5:d4:05:ab:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: May 10 14:43:34 2026 GMT
            Not After : Aug  8 14:43:34 2026 GMT
        Subject: CN=ca6d8747-e91f-457f-9c03-dfb72b60d5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:32:c2:5a:33:3a:40:17:b6:86:2d:26:c0:90:
                    dd:23:9d:fc:4d:26:13:a5:72:7c:99:78:a8:d4:f1:
                    9f:f2:25:ac:06:49:ef:db:ef:9e:90:48:01:02:05:
                    04:d0:e5:06:25:b8:f0:ea:cd:e2:00:f3:8a:41:e5:
                    54:d1:7b:18:e1:bb:e3:bd:77:ff:52:6d:a2:43:95:
                    fe:40:34:75:c7:10:61:cd:45:9a:89:cf:17:3b:d7:
                    66:74:62:e2:c3:48:55:bb:f8:45:c0:c6:3f:22:a4:
                    d6:4b:fe:1b:e3:be:41:4b:7e:33:fc:c7:fb:a4:dc:
                    43:42:7e:ee:33:f9:07:0f:84:c8:6f:04:8d:fe:78:
                    85:ad:d4:06:5c:42:d4:8b:2d:f0:e0:00:ca:91:e0:
                    8e:71:c0:91:2f:8f:60:b0:8d:fb:a9:ea:c7:ee:5a:
                    b7:17:b7:04:fe:66:11:ea:e9:97:95:e0:cb:a1:52:
                    0e:d2:20:56:0f:62:2a:c4:77:16:8e:54:9c:e7:e4:
                    17:6a:ca:27:60:3c:25:9e:b5:bc:f5:bf:7a:28:d7:
                    3c:ae:28:43:a7:a1:2d:c8:1a:a9:42:4e:16:e8:9c:
                    b8:fb:5d:ef:a2:b5:9e:0a:24:d7:9c:ac:13:8c:80:
                    ff:fa:54:7f:5b:fc:d9:3b:5f:5a:bc:e2:b7:c2:b0:
                    5e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B5:B8:5F:78:51:2F:5C:BC:B8:9A:E0:EF:16:D8:91:21:8F:18:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/34c772a7-3c4d-3e9d-b2e4-263f16074e47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:9f:84:67:3d:7d:b7:9a:35:0f:df:79:3f:47:dd:03:95:eb:
         75:75:7c:9d:4b:23:5a:97:c8:77:57:2c:30:25:5a:17:9d:5b:
         1f:f7:62:b4:e3:0c:f8:d2:0e:01:2b:5d:94:8e:47:34:0e:3e:
         f7:89:15:d6:74:39:d7:3b:9d:6a:7d:be:30:6b:96:16:72:be:
         b4:84:b0:40:a9:59:ec:84:4d:03:15:b2:26:7a:9d:b3:af:26:
         91:e6:a1:35:e4:af:26:e7:db:0d:45:b5:b8:c2:4d:cf:dd:21:
         ac:f7:88:50:ff:ee:34:4b:cd:75:27:db:01:54:4c:85:ee:d9:
         70:6c:74:30:de:7e:c3:4c:05:72:e5:e1:f7:c6:22:e0:aa:7e:
         fb:a1:5a:e4:da:5a:c6:7d:21:0b:24:d2:4d:e8:0d:2a:3c:39:
         d7:b4:86:89:b8:b1:9b:74:0f:46:bd:2e:a9:63:00:38:d3:ea:
         50:70:48:f7:bf:27:88:09:67:48:2d:29:5e:e4:1d:f8:d2:5c:
         09:41:9f:4f:c5:61:ba:5c:57:c7:e8:2a:92:00:e8:87:d0:79:
         13:48:c0:4f:3e:31:a3:ce:d8:cc:5e:f7:9c:1f:8b:36:90:fe:
         a4:47:6f:bb:d1:61:5e:7c:80:84:7a:26:ad:eb:7d:06:1d:07:
         fa:8c:f1:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3JyMPQla311AWr4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI2MDUxMDE0NDMzNFoXDTI2MDgwODE0NDMzNFowLzEtMCsGA1UEAxMk
Y2E2ZDg3NDctZTkxZi00NTdmLTljMDMtZGZiNzJiNjBkNWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTLCWjM6QBe2hi0mwJDdI538TSYTpXJ8mXio
1PGf8iWsBknv2++ekEgBAgUE0OUGJbjw6s3iAPOKQeVU0XsY4bvjvXf/Um2iQ5X+
QDR1xxBhzUWaic8XO9dmdGLiw0hVu/hFwMY/IqTWS/4b475BS34z/Mf7pNxDQn7u
M/kHD4TIbwSN/niFrdQGXELUiy3w4ADKkeCOccCRL49gsI37qerH7lq3F7cE/mYR
6umXleDLoVIO0iBWD2IqxHcWjlSc5+QXasonYDwlnrW89b96KNc8rihDp6EtyBqp
Qk4W6Jy4+13vorWeCiTXnKwTjID/+lR/W/zZO19avOK3wrBekwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGC1uF94US9cvLia4O8W2JEhjxh4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMzRjNzcyYTctM2M0ZC0z
ZTlkLWIyZTQtMjYzZjE2MDc0ZTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPGXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIafhGc9fbeaNQ/feT9H3QOV63V1fJ1LI1qXyHdXLDAlWhedWx/3YrTj
DPjSDgErXZSORzQOPveJFdZ0Odc7nWp9vjBrlhZyvrSEsECpWeyETQMVsiZ6nbOv
JpHmoTXkrybn2w1FtbjCTc/dIaz3iFD/7jRLzXUn2wFUTIXu2XBsdDDefsNMBXLl
4ffGIuCqfvuhWuTaWsZ9IQsk0k3oDSo8Ode0hom4sZt0D0a9LqljADjT6lBwSPe/
J4gJZ0gtKV7kHfjSXAlBn0/FYbpcV8foKpIA6IfQeRNIwE8+MaPO2Mxe95wfizaQ
/qRHb7vRYV58gIR6Jq3rfQYdB/qM8UA=
-----END CERTIFICATE-----
Generated at Tue May 12 22:33:22 2026 by rpki-client