Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/880db0a3-90fa-3124-a117-5ee1e9a9998d.roa
File:                     880db0a3-90fa-3124-a117-5ee1e9a9998d.roa (raw, json)
Hash identifier:          QSxcneoPObdV+BJrj7x/YKfwWPMuOEbgVOMAbmKa0vU=
Subject key identifier:   4F:A6:C7:E3:F2:7E:9D:E5:A2:4E:4C:1C:BE:E1:32:24:79:30:7F:BC
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584E1A143FA22DD076035C06CC40
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/880db0a3-90fa-3124-a117-5ee1e9a9998d.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     64267
IP address blocks:        104.241.131.0/24 maxlen: 24
                          198.1.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:3f:a2:2d:d0:76:03:5c:06:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=90a1403a-1ca9-414c-9b28-1d246dedc08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4a:8f:8c:ed:8c:81:49:82:c7:f5:7f:67:d1:
                    f1:de:da:b5:97:e2:17:e4:07:a2:29:7b:6b:0d:8b:
                    e1:39:10:10:ae:bb:10:e9:db:85:5b:5f:24:ae:89:
                    49:53:43:50:62:ba:e0:fe:5c:bb:ba:fd:b0:72:70:
                    f1:20:5f:31:13:38:fa:ef:d9:e7:4b:af:58:ad:9d:
                    29:3d:1c:55:06:69:03:ae:d3:23:1f:3d:63:bd:40:
                    83:9e:35:bf:56:28:d3:3b:94:3b:41:54:0b:c8:bb:
                    fb:64:f4:8a:72:11:a9:ea:ab:c0:84:65:f8:49:03:
                    bb:19:1a:63:c9:f0:ac:19:20:59:cd:09:01:4a:45:
                    54:fe:8f:16:af:17:6f:2b:50:c1:ef:49:5e:5b:09:
                    0c:3b:f9:60:0a:fa:4a:ec:15:88:a4:10:16:95:cd:
                    54:5a:cf:de:db:86:b3:9a:0c:14:de:ea:0b:b3:1f:
                    03:47:47:17:7e:46:92:3d:47:59:d7:05:d9:92:f2:
                    15:5b:84:02:00:b1:80:50:9b:52:ab:33:1c:f8:bb:
                    ca:7d:e2:60:7a:23:1a:15:f1:9d:c3:d0:f3:3c:26:
                    3c:0f:ba:86:6f:26:67:77:c3:09:60:fb:0d:85:b2:
                    e2:12:ac:0e:d5:c4:57:60:51:f2:ba:4f:ae:98:bd:
                    6c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A6:C7:E3:F2:7E:9D:E5:A2:4E:4C:1C:BE:E1:32:24:79:30:7F:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/880db0a3-90fa-3124-a117-5ee1e9a9998d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.131.0/24
                  198.1.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:5c:59:c0:74:be:18:30:b8:65:60:bc:25:64:e5:73:39:36:
         7d:06:d7:45:16:5b:fb:9a:04:e9:45:39:1e:4e:30:c5:e1:63:
         85:91:7f:8f:56:7a:39:6a:52:68:e3:39:38:f2:06:0c:8f:c8:
         a2:d5:90:6a:d0:59:e5:b8:ff:94:1f:69:13:e2:47:73:c7:81:
         2e:a6:3f:36:0d:a2:9e:ec:28:7b:e7:1e:1c:aa:f1:59:d0:5f:
         0f:e2:66:c7:6d:f8:cb:3d:70:93:30:2e:74:c4:3c:ef:5e:b0:
         4f:4d:d4:cd:cc:51:f9:26:73:06:0b:fc:ee:28:0c:75:d4:b3:
         7c:68:7c:a5:96:cc:1f:88:95:36:ae:7e:6c:7b:da:12:54:71:
         3a:6d:e6:0d:37:32:85:2f:cf:5b:3c:bc:7c:fe:cd:0c:16:7f:
         0b:6e:07:5d:31:03:0b:38:b0:0a:f8:24:3a:46:23:44:e1:93:
         e9:27:cf:68:3b:2c:54:9c:f5:02:9f:de:b1:3a:cb:c4:0a:ca:
         59:5c:44:96:bc:67:1a:8b:5d:55:51:10:88:b1:a0:10:a0:65:
         a4:46:50:a5:65:97:8f:36:3b:e0:a2:d5:49:6b:0f:83:2e:3c:
         d2:0b:80:34:49:59:18:6d:74:ce:cf:2d:4a:a1:e5:d8:d3:fc:
         e7:5a:b7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:09 2026 by rpki-client