Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ee8ac9ae-732a-3a47-b0ec-ef2e0676d4a2.roa
File:                     ee8ac9ae-732a-3a47-b0ec-ef2e0676d4a2.roa (raw, json)
Hash identifier:          WrIX4yrO7rzzoBgis8C/XzNdQeo1WzaDM24vo/fBC7c=
Subject key identifier:   23:DA:05:C7:81:94:FD:A0:64:89:F9:C9:34:74:FA:34:4E:78:82:C4
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584D9A22CEFD1DF5F9E93FC42C80
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ee8ac9ae-732a-3a47-b0ec-ef2e0676d4a2.roa
Signing time:             Thu 23 Apr 2026 13:06:12 +0000
ROA not before:           Thu 23 Apr 2026 13:06:12 +0000
ROA not after:            Wed 22 Jul 2026 13:06:12 +0000
asID:                     401783
IP address blocks:        104.241.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:22:ce:fd:1d:f5:f9:e9:3f:c4:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Apr 23 13:06:12 2026 GMT
            Not After : Jul 22 13:06:12 2026 GMT
        Subject: CN=cb86c61e-66d5-417d-a49d-a3eff6960f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d3:39:32:11:86:19:2e:15:1c:25:50:e3:49:
                    8f:93:0c:55:e9:0f:1f:29:ea:a9:18:f6:22:b0:7d:
                    78:e9:b4:65:f3:75:e1:09:c5:46:3f:67:6d:7a:b5:
                    70:d6:a4:eb:b4:e8:9a:23:90:ca:d8:35:07:8d:ac:
                    a3:e9:61:66:fb:bb:62:e8:ca:48:24:c5:44:b3:93:
                    50:07:a3:97:d8:69:71:43:47:31:6a:1c:f0:6e:85:
                    eb:0b:08:08:41:c3:b7:f1:e5:e6:e9:50:4f:55:15:
                    4c:68:04:74:22:9a:5b:e4:a9:42:31:75:6b:bd:7a:
                    3d:4a:6a:a3:80:a9:af:da:14:93:67:27:12:5a:6a:
                    2b:42:2f:10:9a:d0:f9:83:07:5b:5e:fe:ee:ae:4d:
                    f3:d0:a2:41:9a:9a:de:da:a0:1a:9f:fd:a6:e9:7d:
                    a9:e1:c9:b1:37:b8:c2:12:e0:03:92:49:44:d9:58:
                    f9:7d:3d:c6:59:f9:c2:37:23:17:98:aa:5c:03:57:
                    98:33:c7:9a:01:87:e1:c9:89:2d:1c:93:1f:02:a4:
                    36:8b:1f:e2:37:c9:0a:b3:84:ec:33:47:d6:ba:14:
                    6f:06:ec:79:4e:4d:62:87:32:20:81:20:2b:a4:47:
                    31:ff:d6:0e:07:71:fc:c7:f6:6a:c4:0b:e2:e4:6f:
                    03:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DA:05:C7:81:94:FD:A0:64:89:F9:C9:34:74:FA:34:4E:78:82:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ee8ac9ae-732a-3a47-b0ec-ef2e0676d4a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b9:09:fa:7f:f8:3e:cc:de:df:5d:0f:89:be:3f:57:5f:b9:
         53:b9:8c:9f:4e:86:f5:48:e8:47:25:41:8a:04:e0:11:26:7e:
         26:29:23:8f:fe:c1:f5:dc:a7:aa:35:c0:67:2e:9d:be:9b:7b:
         83:fc:5c:89:2b:c0:29:81:84:fd:35:b5:8b:28:64:26:8a:12:
         d1:3b:d1:45:51:a8:57:96:88:56:3e:88:13:45:a8:d8:27:6f:
         6f:f1:3b:9e:81:07:1d:92:c5:f1:38:62:93:18:57:a7:83:ca:
         17:54:5f:53:87:9d:6c:c1:7c:6c:0d:64:36:f8:dc:c0:b2:cc:
         48:1e:39:85:51:26:3e:a5:4b:8c:97:b8:b0:75:7b:e1:ba:9e:
         da:d0:03:20:41:ec:62:83:92:95:6a:8c:6d:f2:32:a9:99:8b:
         08:30:57:b6:1c:5c:68:e3:0e:77:84:af:cc:bf:c1:42:a3:58:
         b6:f0:b2:23:a9:c6:f5:e9:37:1d:e5:c8:86:7e:ca:d3:e6:59:
         db:24:fb:2c:68:87:dd:0b:1e:a6:bd:ac:97:9e:de:d4:bf:14:
         5a:7f:41:a3:d4:c5:c6:65:2e:16:e2:f6:a4:ad:da:37:97:37:
         d9:f5:89:6d:5f:d3:34:92:b0:0e:30:8d:dc:5f:22:94:72:4c:
         75:76:8c:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIs79HfX56T/ELIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI2MDQyMzEzMDYxMloXDTI2MDcyMjEzMDYxMlowLzEtMCsGA1UEAxMk
Y2I4NmM2MWUtNjZkNS00MTdkLWE0OWQtYTNlZmY2OTYwZjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNM5MhGGGS4VHCVQ40mPkwxV6Q8fKeqpGPYi
sH146bRl83XhCcVGP2dterVw1qTrtOiaI5DK2DUHjayj6WFm+7ti6MpIJMVEs5NQ
B6OX2GlxQ0cxahzwboXrCwgIQcO38eXm6VBPVRVMaAR0Ippb5KlCMXVrvXo9Smqj
gKmv2hSTZycSWmorQi8QmtD5gwdbXv7urk3z0KJBmpre2qAan/2m6X2p4cmxN7jC
EuADkklE2Vj5fT3GWfnCNyMXmKpcA1eYM8eaAYfhyYktHJMfAqQ2ix/iN8kKs4Ts
M0fWuhRvBux5Tk1ihzIggSArpEcx/9YOB3H8x/ZqxAvi5G8DQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCPaBceBlP2gZIn5yTR0+jROeILEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZWU4YWM5YWUtNzMyYS0z
YTQ3LWIwZWMtZWYyZTA2NzZkNGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPG6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIS5Cfp/+D7M3t9dD4m+P1dfuVO5jJ9OhvVI6EclQYoE4BEmfiYpI4/+
wfXcp6o1wGcunb6be4P8XIkrwCmBhP01tYsoZCaKEtE70UVRqFeWiFY+iBNFqNgn
b2/xO56BBx2SxfE4YpMYV6eDyhdUX1OHnWzBfGwNZDb43MCyzEgeOYVRJj6lS4yX
uLB1e+G6ntrQAyBB7GKDkpVqjG3yMqmZiwgwV7YcXGjjDneEr8y/wUKjWLbwsiOp
xvXpNx3lyIZ+ytPmWdsk+yxoh90LHqa9rJee3tS/FFp/QaPUxcZlLhbi9qSt2jeX
N9n1iW1f0zSSsA4wjdxfIpRyTHV2jCM=
-----END CERTIFICATE-----
Generated at Wed May 13 02:38:17 2026 by rpki-client