Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e34da093-8f73-3e4f-a638-ff1353002369.roa
File:                     e34da093-8f73-3e4f-a638-ff1353002369.roa (raw, json)
Hash identifier:          HgJhf3vSyRDc8BcdnzS2FBzt1goUpU9Kwn3jMU1P4rM=
Subject key identifier:   1F:A5:56:D9:B2:9E:7E:F8:F3:B1:E2:6C:F3:B7:A0:6D:5C:09:B1:77
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584D39CF98D98015C3BE93282010
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e34da093-8f73-3e4f-a638-ff1353002369.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     54252
IP address blocks:        104.241.131.0/24 maxlen: 24
                          198.1.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:98:d9:80:15:c3:be:93:28:20:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=2c0acb17-486c-4f37-9c03-14a189ca6fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:80:f9:92:b8:1a:d0:0c:7a:b8:93:ca:d3:
                    55:e0:49:e6:2d:04:df:db:d5:02:ce:22:22:a7:c6:
                    a6:23:f3:9d:67:ba:d3:b2:1f:c8:b5:b5:07:c3:a0:
                    60:42:08:66:f1:b1:38:88:c7:93:2a:b9:00:92:87:
                    6f:7a:84:68:28:07:16:f9:71:10:66:c8:3c:cb:d8:
                    d1:79:92:10:50:e6:f4:32:73:34:72:b4:83:9f:ec:
                    d0:6e:21:b6:37:87:5c:6a:b7:db:f2:94:97:2e:35:
                    f0:15:0e:34:74:9e:a6:75:9a:12:10:c0:a5:99:23:
                    6a:2e:f1:11:61:e2:d3:fe:dc:7b:f0:d1:93:19:88:
                    89:d2:09:1c:5d:a1:31:74:fd:36:43:87:67:00:81:
                    1b:54:5d:74:b2:11:a5:f7:9b:00:31:81:4a:ad:8a:
                    23:d5:11:51:99:4b:31:a7:5f:8e:b8:56:f2:3c:01:
                    f9:cb:10:63:6a:00:ce:4d:c3:cf:8b:68:28:c4:67:
                    2e:c4:0f:d0:c6:9d:6b:61:39:ce:a3:0c:88:72:cc:
                    63:b9:22:e4:f3:90:84:e6:e4:ef:52:4d:d8:71:75:
                    34:cb:d5:d4:69:b0:15:52:36:dd:54:89:30:22:93:
                    e4:21:35:21:99:1a:8d:7d:cf:22:6c:ba:7d:0a:26:
                    40:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A5:56:D9:B2:9E:7E:F8:F3:B1:E2:6C:F3:B7:A0:6D:5C:09:B1:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/e34da093-8f73-3e4f-a638-ff1353002369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.131.0/24
                  198.1.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:cb:59:f6:79:f1:f9:5b:80:6c:16:37:a4:bf:d0:44:1c:c4:
         41:45:1b:f0:15:5e:db:c6:17:e3:29:8f:63:b4:cc:fa:a3:a2:
         ca:d2:24:5a:6f:27:a6:47:f8:3f:41:62:1b:b3:80:c9:df:08:
         24:f9:c6:dd:a4:eb:ff:a4:43:95:7f:06:97:78:b6:08:52:63:
         14:49:98:8c:63:52:c4:58:87:a2:5c:d9:53:2f:8e:f8:c7:7a:
         1f:cd:4d:29:d4:29:31:55:88:0d:d3:2a:98:75:07:15:bf:2b:
         09:3b:f9:81:60:2d:3b:fd:d8:39:1f:cc:df:00:78:c5:3a:1e:
         e8:6e:6e:49:a6:93:1c:d6:18:ac:e4:9b:3f:3a:0d:66:1e:e6:
         a5:17:99:b6:4d:88:a6:e9:9f:52:b7:d6:06:83:44:4a:17:74:
         c7:10:49:00:71:f8:c5:f1:c2:0e:6e:e8:60:59:23:79:df:c6:
         ea:06:8a:bb:8e:8d:5a:a4:c8:69:2d:04:3a:1a:50:c3:86:a1:
         72:50:6a:51:63:d2:d5:87:d7:b6:a1:8a:a2:28:e6:9f:50:62:
         ba:9c:b8:43:02:9e:2f:57:ac:3c:ef:e0:8c:14:1d:fe:a9:4b:
         be:09:e9:6c:8c:66:17:a1:d9:75:cf:67:f9:54:a8:00:75:45:
         7d:8f:d3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:57 2026 by rpki-client