Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/2c004264-4360-305a-bc1d-4e40913d4a3a.roa
File:                     2c004264-4360-305a-bc1d-4e40913d4a3a.roa (raw, json)
Hash identifier:          AabEtCxjHRN3pud51AHT6zJo15+9nfDUhhvxDctrCxk=
Subject key identifier:   EA:93:C7:4B:DB:D1:73:B7:12:75:27:07:F3:65:00:67:A5:CC:70:05
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584CC77759591765D9AC033F57C0
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/2c004264-4360-305a-bc1d-4e40913d4a3a.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     395793
IP address blocks:        104.241.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:59:59:17:65:d9:ac:03:3f:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=379c44a7-504f-4116-b5a3-40c9fad9ef74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:f3:68:c2:68:8b:d9:5a:f0:39:17:70:a2:
                    f5:20:23:8a:24:b7:1c:d2:ef:eb:da:c5:54:7e:b2:
                    8d:1a:ad:07:8e:d0:62:4a:1b:67:a1:59:ca:15:13:
                    02:e0:0a:2d:a3:f5:60:af:8a:73:ba:5c:96:25:9a:
                    43:f9:4d:bf:bd:d5:d2:16:50:8b:c9:e4:51:4a:2c:
                    6b:29:70:b5:ae:4d:31:4e:ba:a2:5d:0e:04:c4:44:
                    b6:2c:c4:12:e2:6b:a8:6c:2e:6f:a2:5c:ab:dc:6e:
                    c7:f0:06:3c:7e:16:52:6e:96:c9:f5:06:b1:a3:de:
                    2d:44:f9:38:1f:05:82:18:56:20:79:8e:9f:5c:7f:
                    f5:26:23:e2:ef:49:8f:77:4f:33:db:7c:68:be:66:
                    a7:89:71:63:da:8c:e9:e6:24:f2:db:38:f9:17:80:
                    0a:02:ef:63:0a:7f:f3:a5:97:12:98:f4:5a:85:0d:
                    ca:5f:35:e6:65:af:f8:be:4e:cd:72:0e:e2:51:0c:
                    76:22:6f:4b:a1:40:b9:3b:5f:2b:fb:33:75:f8:27:
                    37:2a:6b:0d:e3:3b:4e:68:9e:78:4d:16:36:67:ba:
                    81:27:12:d3:06:08:8c:b7:03:bd:3f:bf:fd:46:59:
                    ae:e1:9c:3a:d9:d9:0e:76:b7:c6:e7:16:96:f1:28:
                    c3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:93:C7:4B:DB:D1:73:B7:12:75:27:07:F3:65:00:67:A5:CC:70:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/2c004264-4360-305a-bc1d-4e40913d4a3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e9:81:9d:e5:5d:9d:74:88:13:f9:8c:65:c1:3d:9f:54:9a:
         13:79:0d:3f:38:2d:62:8d:99:f1:e1:ea:44:be:d1:29:cd:74:
         27:7f:53:13:b4:10:70:84:d7:6f:87:4b:eb:e7:3f:66:3a:ae:
         41:11:75:a4:6f:87:02:6e:0f:14:e0:93:83:63:a8:d3:ab:5c:
         17:f3:a3:e0:e1:9c:08:5f:7e:6a:81:03:43:ce:fb:df:9e:ca:
         82:12:35:75:b9:99:a4:f4:26:58:37:80:01:07:8b:82:3b:fe:
         27:d8:fa:13:e6:b2:eb:86:3c:51:1d:1d:e0:89:29:f8:d3:10:
         a7:e9:d3:57:9f:b1:93:de:a9:ed:b8:fb:5f:6d:e6:dd:b8:86:
         b2:1a:b1:2c:40:58:8b:c0:0f:c3:05:d8:3b:55:1b:fb:81:bc:
         de:e5:de:e5:f6:aa:62:a0:2e:48:ce:a3:ae:11:e1:ca:c2:97:
         2f:5a:93:db:5e:0d:13:b7:6c:c0:46:c8:2c:7f:c6:d5:60:1e:
         01:23:08:ec:f5:46:f7:d9:29:9c:bb:83:05:8b:fa:3b:de:3d:
         3f:5c:25:70:82:16:9d:4f:b8:f0:fd:07:cc:62:52:23:98:4e:
         87:39:f6:ac:45:47:98:7b:56:4d:c2:68:c2:17:53:1a:1c:50:
         6c:7a:a0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:52 2026 by rpki-client