Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ee8ac9ae-732a-3a47-b0ec-ef2e0676d4a2.roa
File:                     ee8ac9ae-732a-3a47-b0ec-ef2e0676d4a2.roa (raw, json)
Hash identifier:          0GJR/Ij11NT0t1PpN+HkgHzYZw0kcLatDWhUwIkk5fo=
Subject key identifier:   88:D3:B9:D9:5B:FA:FF:95:9F:F8:ED:83:39:AF:55:D7:AB:2E:E5:54
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584FBED140B0670D7017206CE3B0
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ee8ac9ae-732a-3a47-b0ec-ef2e0676d4a2.roa
Signing time:             Fri 06 Nov 2026 02:00:14 +0000
ROA not before:           Fri 06 Nov 2026 02:00:14 +0000
ROA not after:            Thu 04 Feb 2027 02:00:14 +0000
asID:                     401783
IP address blocks:        104.241.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:be:d1:40:b0:67:0d:70:17:20:6c:e3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Nov  6 02:00:14 2026 GMT
            Not After : Feb  4 02:00:14 2027 GMT
        Subject: CN=449bb69f-2e17-4051-86cb-3709c7240dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:5c:9e:eb:2c:2b:d1:6a:e0:21:3a:c6:18:
                    29:f4:c1:da:08:66:81:a0:9b:92:d2:4d:61:b1:28:
                    44:bd:1d:dc:13:ad:68:d6:c7:1b:ac:0f:18:22:e7:
                    7f:45:98:82:c6:85:9a:6b:89:b4:72:4d:01:6b:22:
                    ed:97:d9:3e:fb:49:3a:fc:f2:04:db:a5:ed:5b:98:
                    56:25:54:dd:27:04:98:aa:c1:c9:6f:46:58:23:28:
                    32:71:1d:9f:8d:95:cd:c8:65:6c:ba:c1:d3:01:5f:
                    8e:a1:8f:8f:d4:61:83:10:7d:70:8b:5b:68:4e:a1:
                    89:2a:3d:8f:6c:3b:72:66:dc:f0:16:f0:f2:71:50:
                    aa:5f:97:54:69:93:e5:7c:d3:67:3b:5c:4c:16:3b:
                    3c:ee:ba:6d:fd:96:ef:de:b6:39:48:78:b4:62:06:
                    0d:26:81:7c:ed:7b:48:bf:f4:ed:49:b7:21:e0:b2:
                    b8:03:6d:1d:9f:64:49:b3:10:9a:78:65:3d:aa:95:
                    c7:b7:c7:f1:ab:57:89:61:9b:b2:3d:c3:e3:bc:65:
                    79:18:17:e8:2a:c3:3d:d1:32:a6:83:2f:7b:5d:eb:
                    63:94:12:18:4e:8b:b4:cd:63:83:33:0b:fe:03:1a:
                    2c:15:bf:bc:29:a1:27:b4:f2:86:65:03:e5:53:44:
                    d3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D3:B9:D9:5B:FA:FF:95:9F:F8:ED:83:39:AF:55:D7:AB:2E:E5:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ee8ac9ae-732a-3a47-b0ec-ef2e0676d4a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:4a:37:86:c8:c0:9f:5a:f0:64:f8:6d:98:78:6b:a1:e9:b8:
         9d:0d:79:00:46:b3:5c:3d:29:c1:27:7b:bf:24:96:e3:eb:d6:
         b7:e9:86:38:4a:74:14:59:3b:76:fc:32:95:1b:df:f3:fd:48:
         29:74:a9:7f:e4:37:a8:18:0c:c1:b1:8e:55:a6:83:2e:de:ca:
         ab:61:4e:4f:15:b4:cd:d8:54:7b:89:40:70:13:c8:49:10:b3:
         8a:61:d2:19:d8:29:df:67:c5:ae:11:fd:71:13:f3:f5:4f:36:
         fb:6d:2a:01:cb:4b:17:27:38:e2:26:e3:c8:48:fc:a5:1a:50:
         13:22:80:0c:b1:1a:9c:9a:a9:8a:37:a0:3e:a4:55:fd:77:8e:
         aa:c8:68:28:f3:f2:9b:61:f5:48:a0:35:1f:fc:65:8b:a7:c2:
         73:da:b5:32:74:78:09:e6:2a:22:93:bb:2d:84:c1:73:39:db:
         bf:36:f5:72:cb:df:9e:81:7d:b6:4e:1e:8c:aa:6b:85:ab:77:
         27:7e:58:2f:99:09:ac:3c:b3:89:73:4f:1b:be:a9:4e:f7:0a:
         c0:d1:84:88:16:ab:56:ef:a6:f9:c7:03:fe:43:ca:5c:5c:f5:
         74:36:f8:1f:f0:18:be:ab:ec:18:aa:ea:5a:71:97:46:eb:35:
         62:9b:86:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:36:51 2026 by rpki-client