Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/fb2158a1-e1a4-3c3b-a330-dbbd9af27de0.roa
File:                     fb2158a1-e1a4-3c3b-a330-dbbd9af27de0.roa (raw, json)
Hash identifier:          MMhmzQpyvfJvhfYNUPHw7GoQYmEFkpQ95zWVz+qP9Vs=
Subject key identifier:   6A:83:6E:52:E1:77:C6:2E:DC:1F:60:72:55:C6:1D:45:71:DC:3B:07
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584DA8157BC248B641ACA9089480
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/fb2158a1-e1a4-3c3b-a330-dbbd9af27de0.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     395793
IP address blocks:        104.241.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:7b:c2:48:b6:41:ac:a9:08:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=092faf58-da1a-4a72-8085-095df6433d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e6:33:0e:db:a6:a1:d2:2c:1a:56:f0:30:ff:
                    36:f2:10:4c:99:8a:b6:1c:f7:27:4f:d5:84:37:f4:
                    fc:21:ea:2a:4b:21:bf:28:c3:d3:61:eb:3b:fa:83:
                    58:54:f6:e2:77:b7:6c:4a:b7:f6:00:32:79:84:a2:
                    1f:60:97:4b:14:10:ae:bc:70:b3:ea:d4:e2:05:78:
                    91:df:0d:d9:39:57:9d:e0:74:03:f0:94:f8:84:b3:
                    ea:67:33:02:3a:ae:24:2c:74:f5:57:1b:12:7a:90:
                    5e:7d:2b:b8:9e:e6:d2:7b:bb:13:e3:9a:8d:cf:a0:
                    14:72:3a:96:78:fe:58:5e:36:95:50:52:28:89:34:
                    7d:70:f4:53:7a:7f:5c:17:b3:06:17:b0:bb:eb:83:
                    83:46:0c:3c:4a:94:95:d9:a7:99:09:6f:db:a7:1c:
                    6b:8a:3e:d3:47:af:84:e3:f6:e9:70:95:06:7e:26:
                    b7:7f:8c:6c:ad:f0:48:36:42:89:e5:46:8f:3d:8a:
                    bd:44:dc:ec:29:27:b8:1a:73:80:5d:a6:25:d3:83:
                    e0:ab:5f:f1:68:90:f2:39:9e:2c:7b:e7:dd:97:a6:
                    75:d2:30:99:22:a7:39:da:2f:64:a6:63:7d:fd:ec:
                    28:9a:98:b4:39:28:9a:50:d5:cc:72:15:ef:77:ae:
                    94:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:83:6E:52:E1:77:C6:2E:DC:1F:60:72:55:C6:1D:45:71:DC:3B:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/fb2158a1-e1a4-3c3b-a330-dbbd9af27de0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:e3:37:2a:67:22:a9:c7:f9:81:24:a3:b2:69:e1:a6:d2:b1:
         c8:e3:77:fa:59:9c:98:98:f7:ae:4e:c2:24:47:31:dc:50:5d:
         11:ee:08:91:8d:30:5b:29:04:dc:ba:4f:a5:3a:50:7b:40:d6:
         48:e5:a2:19:a2:fa:04:2f:24:35:84:30:18:a0:e4:ea:a8:db:
         1e:30:d5:ff:43:59:70:f3:e7:01:bf:1b:df:85:eb:d2:3d:6d:
         33:b5:94:2e:4e:0a:d3:bb:32:3b:58:64:36:bb:51:26:ec:f2:
         8b:a5:ea:02:05:0e:64:cd:ad:25:46:b8:b7:2f:8e:b5:22:1c:
         45:94:90:db:49:57:3b:e9:06:6d:94:47:7d:5a:c5:ae:73:f2:
         20:88:fa:a8:0f:4c:cc:7b:d4:c2:2e:93:d5:d5:f2:de:08:bc:
         85:57:5a:80:fb:11:3a:df:08:97:f2:ea:45:44:92:32:ac:f6:
         9c:0f:a1:f2:11:1a:24:2a:5d:d9:64:e5:41:a1:1a:d1:60:23:
         89:5d:74:8c:aa:ef:6a:34:c6:66:39:ee:b8:91:94:d7:ab:4f:
         34:86:4d:b2:e3:bc:bc:80:d3:9f:10:38:9a:36:ff:ea:cc:19:
         fc:ec:3c:52:69:ad:6a:83:2e:f8:c5:78:d4:a5:e6:08:5e:67:
         72:de:22:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:07 2026 by rpki-client