Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/880db0a3-90fa-3124-a117-5ee1e9a9998d.roa
File:                     880db0a3-90fa-3124-a117-5ee1e9a9998d.roa (raw, json)
Hash identifier:          whQOlgFcpfT65lFx9izFU86nwnRyGvlQtxHl9yN8+Lc=
Subject key identifier:   61:61:1F:D6:61:B0:2C:FA:86:2C:81:45:51:B8:13:C4:12:58:24:1F
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584D39CF88EB4CBE8E2F9CF64B00
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/880db0a3-90fa-3124-a117-5ee1e9a9998d.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     64267
IP address blocks:        104.241.131.0/24 maxlen: 24
                          198.1.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:88:eb:4c:be:8e:2f:9c:f6:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=8ff0f9a4-d97b-426b-821f-24a628968763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:85:07:ef:4a:52:25:98:9a:60:59:60:3a:d2:
                    47:fe:61:a2:6d:73:4b:b9:9a:47:0a:e1:70:50:b8:
                    f6:bb:b7:52:09:75:7f:86:6d:6e:8d:b9:fb:00:63:
                    7b:af:3d:b5:1a:74:10:ba:37:8e:59:52:b3:e7:ad:
                    a7:d9:9d:fe:5e:60:36:00:38:ad:cb:dc:97:f1:fa:
                    ab:fd:5e:45:89:bc:f8:16:db:63:9d:fb:cf:f2:7f:
                    69:fe:04:9e:cf:4c:28:2c:ce:3d:fa:7f:30:70:22:
                    ed:a5:7e:95:9a:89:10:ba:74:c3:cc:6b:79:51:37:
                    53:3b:a9:29:29:82:d8:28:22:36:29:63:69:db:fa:
                    cb:64:99:0f:cd:68:62:a5:ab:3a:42:8d:a6:d8:ab:
                    0a:67:a4:f2:61:aa:1b:0d:42:60:60:5a:c7:ef:2a:
                    d7:72:88:8b:f0:70:b3:5a:37:46:95:f9:0f:54:06:
                    77:ea:8c:26:e1:30:5c:88:bd:49:26:70:2d:77:86:
                    95:bf:94:85:b0:a5:5e:73:0b:c6:b2:1c:47:3c:1b:
                    cd:4b:4f:9c:58:76:46:83:f4:ba:ec:02:ea:92:88:
                    69:5e:52:c3:ca:94:f4:88:c9:d9:5d:9a:5a:72:f5:
                    d7:5b:ea:68:30:8c:29:7b:9a:af:ca:a6:b8:d4:9f:
                    c0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:61:1F:D6:61:B0:2C:FA:86:2C:81:45:51:B8:13:C4:12:58:24:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/880db0a3-90fa-3124-a117-5ee1e9a9998d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.131.0/24
                  198.1.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:6e:47:bc:f5:2b:98:46:43:1f:dd:02:a7:86:5f:30:19:76:
         d6:d8:24:b8:39:a8:0c:9b:f0:ba:ed:6e:58:4c:33:8e:d8:fc:
         a2:50:9a:00:81:52:8b:8a:33:12:90:e1:8c:60:5c:22:81:fe:
         b8:92:e6:03:59:67:d9:d7:16:ea:47:a8:f4:86:f0:cb:66:01:
         4d:04:cc:45:cd:78:c7:79:d5:9a:11:34:58:26:fe:cd:b4:76:
         d8:78:36:e1:7f:18:4b:5a:ee:fd:36:b2:1d:bb:0e:7f:2b:74:
         3f:b3:16:1b:7c:45:c2:58:55:77:5a:10:1e:ce:a3:eb:68:1c:
         78:3f:9e:0e:e3:9d:d1:8e:1c:3c:68:ab:55:cb:c9:9e:85:51:
         b0:45:91:c2:fc:ca:7c:71:56:62:1f:3e:bd:de:fc:ed:09:fe:
         ea:c9:f8:37:98:31:72:e6:e5:0e:3b:8f:61:ea:e9:fc:89:25:
         15:5d:95:8d:e0:0b:79:74:07:ef:99:d7:85:25:48:54:d8:50:
         2e:90:e7:e6:4e:5e:73:f2:26:bc:0d:ce:ef:a5:ed:eb:05:fb:
         52:4d:38:3e:d1:77:08:00:5f:8b:9b:c5:11:c0:7f:eb:c1:aa:
         58:83:22:dc:38:55:f9:90:6b:13:75:62:fc:7d:62:22:82:31:
         42:0a:4f:a0
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE05z4jrTL6OL5z2SwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk
OGZmMGY5YTQtZDk3Yi00MjZiLTgyMWYtMjRhNjI4OTY4NzYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoUH70pSJZiaYFlgOtJH/mGibXNLuZpHCuFw
ULj2u7dSCXV/hm1ujbn7AGN7rz21GnQQujeOWVKz562n2Z3+XmA2ADity9yX8fqr
/V5Fibz4FttjnfvP8n9p/gSez0woLM49+n8wcCLtpX6VmokQunTDzGt5UTdTO6kp
KYLYKCI2KWNp2/rLZJkPzWhipas6Qo2m2KsKZ6TyYaobDUJgYFrH7yrXcoiL8HCz
WjdGlfkPVAZ36owm4TBciL1JJnAtd4aVv5SFsKVecwvGshxHPBvNS0+cWHZGg/S6
7ALqkohpXlLDypT0iMnZXZpacvXXW+poMIwpe5qvyqa41J/AKQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGFhH9ZhsCz6hiyBRVG4E8QSWCQfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvODgwZGIwYTMtOTBmYS0z
MTI0LWExMTctNWVlMWU5YTk5OThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPGDAwQA
xgHmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFBuR7z1K5hGQx/dAqeGXzAZdtbYJLg5qAyb8LrtblhMM47Y
/KJQmgCBUouKMxKQ4YxgXCKB/riS5gNZZ9nXFupHqPSG8MtmAU0EzEXNeMd51ZoR
NFgm/s20dth4NuF/GEta7v02sh27Dn8rdD+zFht8RcJYVXdaEB7Oo+toHHg/ng7j
ndGOHDxoq1XLyZ6FUbBFkcL8ynxxVmIfPr3e/O0J/urJ+DeYMXLm5Q47j2Hq6fyJ
JRVdlY3gC3l0B++Z14UlSFTYUC6Q5+ZOXnPyJrwNzu+l7esF+1JNOD7RdwgAX4ub
xRHAf+vBqliDItw4VfmQaxN1Yvx9YiKCMUIKT6A=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:42 2026 by rpki-client