Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/40cbcf0c-295c-3056-a484-825c09d6e930.roa
File:                     40cbcf0c-295c-3056-a484-825c09d6e930.roa (raw, json)
Hash identifier:          kFR8yISAWOlIiBUEBonR8y1wOyYdtuwe1juhtZhuLnU=
Subject key identifier:   5D:8C:57:B4:54:41:50:0C:14:51:64:A7:A2:DB:50:E6:CB:E0:FC:0D
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584E2809BDD6272B3773064C6080
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/40cbcf0c-295c-3056-a484-825c09d6e930.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     213607
IP address blocks:        104.241.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:bd:d6:27:2b:37:73:06:4c:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=e154c6da-97e3-45c2-a4dc-96816452207c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:61:7c:f8:33:76:07:a5:10:d5:4b:67:8c:41:
                    a5:56:f4:78:df:52:5f:c3:bf:21:fa:da:95:c1:c4:
                    18:37:1d:1d:87:c5:58:2b:06:4c:6a:71:26:ca:06:
                    c1:85:65:6e:50:8d:bf:47:86:ac:1f:fb:4f:db:65:
                    bc:80:9f:31:d5:5f:03:ea:ca:9a:fc:fa:6a:10:f8:
                    55:84:a6:71:54:3d:22:4e:d8:74:be:24:5c:e1:68:
                    59:c5:3f:02:8e:4a:5d:40:48:34:bb:d3:4e:25:f4:
                    53:5a:26:67:7a:95:ff:46:4c:ba:76:43:c2:c7:8b:
                    79:f4:bb:51:45:42:b4:0d:eb:23:c7:d6:6f:36:db:
                    dc:82:37:31:d6:40:c8:95:2e:0c:0d:44:e5:22:4f:
                    ab:98:f9:8e:5e:56:15:b8:17:1b:ff:f3:8d:f1:85:
                    eb:c9:8b:f6:42:72:ea:51:9a:9d:03:67:00:bd:1d:
                    1b:be:e5:27:71:b1:ef:b6:98:a9:87:d4:43:d0:05:
                    6b:24:8c:d9:40:b1:ef:1e:c6:b0:e6:41:86:5d:6d:
                    41:04:29:cb:e7:a7:98:1a:d8:f0:ca:e6:16:1d:68:
                    aa:56:d3:65:7f:8e:cb:e5:36:49:2d:30:6e:e2:f0:
                    b2:5a:91:1a:69:ce:eb:1b:75:2f:b1:80:2e:ee:a7:
                    4a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8C:57:B4:54:41:50:0C:14:51:64:A7:A2:DB:50:E6:CB:E0:FC:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/40cbcf0c-295c-3056-a484-825c09d6e930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:1c:e7:21:28:b8:03:ef:b5:b4:53:ea:0d:ab:f3:c5:82:db:
         4e:df:f1:8b:e1:65:fd:08:7a:de:9f:5b:5f:da:cd:16:29:f4:
         86:fe:02:a3:77:79:f9:ff:6e:fb:85:c9:6a:e5:a9:63:7f:6c:
         2c:64:f4:6b:4b:ad:27:80:11:d9:15:c5:68:24:b4:95:59:dc:
         87:80:40:c8:ff:72:70:ab:81:38:3e:66:96:99:3d:1c:8b:5a:
         9c:18:4a:35:3c:f5:e7:98:84:67:20:67:d3:5f:32:f9:e0:11:
         33:cd:90:23:fe:0d:54:4a:09:ee:40:84:f6:e2:f0:5b:8f:0e:
         ed:d7:18:3c:59:e8:ae:b0:0a:ac:e4:52:3f:bc:b7:20:e9:c2:
         77:85:59:11:c6:8a:01:2c:e7:a1:ff:d4:74:1a:ad:9e:b9:a7:
         19:df:c5:be:c3:7f:c0:7c:27:06:66:b6:76:d6:65:bf:ee:a2:
         a2:17:fe:b0:2c:cc:7b:8c:1d:06:71:81:8c:5f:1f:02:87:25:
         a2:37:20:86:47:68:c2:7f:29:80:8e:99:56:9e:af:cd:5a:b7:
         b9:38:3e:ef:70:00:4f:f4:5b:88:0d:c0:0d:ff:e6:fb:e3:50:
         5d:50:e6:0e:a5:ca:d2:41:0f:f2:7b:b8:77:f7:8c:98:80:d1:
         55:a9:cf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:48:32 2026 by rpki-client