Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/d96f77b1-8352-3b23-80a2-1e5585cb1a8c.roa
File:                     d96f77b1-8352-3b23-80a2-1e5585cb1a8c.roa (raw, json)
Hash identifier:          ZBbTs1R7h4+FgDpzR3hBUOWd9TwU0VhiD2fPGyj7Slw=
Subject key identifier:   51:9D:2A:F2:B5:99:7F:17:DD:BA:EF:A2:95:FF:3C:7F:2E:DD:E1:B5
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584DAC45930D6FBC5348ED21DE00
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/d96f77b1-8352-3b23-80a2-1e5585cb1a8c.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     395793
IP address blocks:        104.241.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:93:0d:6f:bc:53:48:ed:21:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=1a86ff99-1cdd-4335-9b47-6af1eb2fe55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c4:52:19:1c:13:81:2b:e2:b1:0f:bd:7d:49:
                    72:92:da:40:19:94:3a:a4:a9:cd:c9:45:5b:51:41:
                    df:fe:83:8c:0c:03:89:02:8b:43:57:8e:10:b6:f1:
                    40:93:d3:32:4e:43:00:2c:04:81:c6:42:d6:da:64:
                    ba:43:1e:fe:d5:48:0c:32:3e:92:12:3c:9a:30:f3:
                    7f:2e:25:c1:90:9b:67:36:77:e0:c5:ef:21:82:1a:
                    8a:a2:00:b8:5f:e5:b1:8a:4e:5b:be:29:50:b0:e8:
                    3b:14:4a:dd:c5:03:b5:d0:0c:49:4d:b4:3b:f9:46:
                    3e:5f:ff:0d:f4:f6:24:99:a8:36:21:99:11:aa:b9:
                    94:cb:a6:f8:64:ee:43:fd:ee:7c:7c:c5:7c:58:fb:
                    f3:f4:ab:3d:4f:ec:20:6e:83:2d:75:4d:7b:a4:3a:
                    a1:d1:d8:54:da:c3:e4:0e:86:34:14:a0:e1:cd:97:
                    74:64:7d:48:1b:97:f3:9f:96:99:7e:67:73:7a:6c:
                    6f:02:9e:3b:d7:aa:0c:61:23:2a:01:e8:30:d5:b8:
                    ae:77:a3:db:77:fd:13:ca:0b:d2:29:8b:27:fb:d3:
                    06:90:0b:d8:ad:25:5f:47:a8:f3:f2:a8:bc:35:01:
                    29:7f:f9:38:0e:c3:72:9e:4d:b7:69:2a:1a:c9:c4:
                    52:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9D:2A:F2:B5:99:7F:17:DD:BA:EF:A2:95:FF:3C:7F:2E:DD:E1:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/d96f77b1-8352-3b23-80a2-1e5585cb1a8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:33:fd:5d:93:dc:53:f1:eb:c0:b8:91:2a:09:8f:bd:19:86:
         57:b2:b2:e9:f6:16:b5:f0:5c:d9:71:40:51:64:9d:34:3c:b2:
         43:ec:f5:85:52:5a:75:79:b5:45:0a:50:38:d9:53:fa:76:12:
         ff:51:de:a9:23:89:cf:cd:c4:a6:ab:1b:d3:05:5d:c4:d6:27:
         76:cf:a5:04:df:ce:a3:88:ee:4a:49:de:9a:52:e9:f3:e4:b8:
         b9:f2:2b:3a:46:fb:70:d4:24:51:27:e4:18:8b:d8:94:ba:7d:
         b8:63:27:77:d9:2d:5e:52:0e:d1:7d:eb:80:bd:71:c5:a2:60:
         4b:9b:6d:c5:e8:f8:25:1e:18:38:5c:6e:94:b0:06:46:57:c4:
         98:a1:03:32:de:46:d2:61:06:d9:f4:a4:77:c3:0a:b8:14:0a:
         46:25:0b:a0:9d:51:f5:6d:b4:f6:d7:fe:ab:7e:10:5b:c7:58:
         26:00:b9:43:3d:a2:b4:96:47:8c:de:9b:41:1e:c3:4c:89:c4:
         51:ef:88:be:e3:bf:d9:79:3c:c8:a2:d2:a3:fa:66:0b:84:55:
         71:01:36:f9:50:87:d4:18:bb:49:b3:3d:e2:8a:06:ed:93:87:
         e8:c0:b0:58:dc:60:be:45:86:84:bf:11:09:34:cd:a9:be:37:
         4f:a4:79:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRZMNb7xTSO0h3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk
MWE4NmZmOTktMWNkZC00MzM1LTliNDctNmFmMWViMmZlNTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsRSGRwTgSvisQ+9fUlyktpAGZQ6pKnNyUVb
UUHf/oOMDAOJAotDV44QtvFAk9MyTkMALASBxkLW2mS6Qx7+1UgMMj6SEjyaMPN/
LiXBkJtnNnfgxe8hghqKogC4X+Wxik5bvilQsOg7FErdxQO10AxJTbQ7+UY+X/8N
9PYkmag2IZkRqrmUy6b4ZO5D/e58fMV8WPvz9Ks9T+wgboMtdU17pDqh0dhU2sPk
DoY0FKDhzZd0ZH1IG5fzn5aZfmdzemxvAp4716oMYSMqAegw1biud6Pbd/0TygvS
KYsn+9MGkAvYrSVfR6jz8qi8NQEpf/k4DsNynk23aSoaycRSmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFGdKvK1mX8X3brvopX/PH8u3eG1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZDk2Zjc3YjEtODM1Mi0z
YjIzLTgwYTItMWU1NTg1Y2IxYThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPGNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABAz/V2T3FPx68C4kSoJj70Zhleysun2FrXwXNlxQFFknTQ8skPs9YVS
WnV5tUUKUDjZU/p2Ev9R3qkjic/NxKarG9MFXcTWJ3bPpQTfzqOI7kpJ3ppS6fPk
uLnyKzpG+3DUJFEn5BiL2JS6fbhjJ3fZLV5SDtF964C9ccWiYEubbcXo+CUeGDhc
bpSwBkZXxJihAzLeRtJhBtn0pHfDCrgUCkYlC6CdUfVttPbX/qt+EFvHWCYAuUM9
orSWR4zem0Eew0yJxFHviL7jv9l5PMii0qP6ZguEVXEBNvlQh9QYu0mzPeKKBu2T
h+jAsFjcYL5FhoS/EQk0zam+N0+keSY=
-----END CERTIFICATE-----
Generated at Wed May 13 02:32:30 2026 by rpki-client