Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/954453ea-f967-32a1-ad32-201ccb15cf85.roa
File:                     954453ea-f967-32a1-ad32-201ccb15cf85.roa (raw, json)
Hash identifier:          Orw+sIs/pincDUDnzM0TUY6mWEBke5w19XubrRm7QOw=
Subject key identifier:   D4:C3:BA:73:DE:15:3B:6B:11:B3:BA:FB:FC:FA:C4:6D:49:92:8D:A8
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584F2527AA6A88D8BC2C2A688E00
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/954453ea-f967-32a1-ad32-201ccb15cf85.roa
Signing time:             Sat 12 Sep 2026 01:00:12 +0000
ROA not before:           Sat 12 Sep 2026 01:00:12 +0000
ROA not after:            Fri 11 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        104.241.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:25:27:aa:6a:88:d8:bc:2c:2a:68:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Sep 12 01:00:12 2026 GMT
            Not After : Dec 11 02:00:12 2026 GMT
        Subject: CN=91a98211-77f0-40d2-bc90-b66434d65e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:64:d4:e8:03:b9:4c:e8:69:81:82:dd:43:10:
                    f6:e9:cc:dc:c5:8e:e9:70:e0:89:86:2c:16:8c:73:
                    cb:af:fb:46:4c:6b:ac:d3:48:c5:33:70:7c:0b:04:
                    1d:9f:63:43:2d:f2:e2:49:dd:b5:33:5b:97:f1:86:
                    2f:95:f3:60:ec:38:6a:e1:19:c4:db:8f:4b:9f:9d:
                    06:24:2c:6c:b8:9b:3c:da:34:71:bd:33:43:63:d5:
                    b7:2e:9e:2c:06:41:d6:25:ae:78:31:bb:80:e0:13:
                    56:5a:d4:bf:18:2f:e5:61:1a:96:ea:09:ee:9e:d6:
                    f4:16:bf:cd:b0:00:ff:fa:20:56:2c:26:05:13:ea:
                    46:40:52:aa:41:a8:35:b9:c0:bf:83:68:7c:c3:f0:
                    e8:b5:81:3b:99:6c:1c:e9:9c:39:2f:4b:06:20:93:
                    4d:74:4d:23:13:b3:bd:fd:c3:08:ec:09:cb:df:68:
                    86:77:87:e0:5c:f6:ec:13:0e:af:df:40:ab:3c:26:
                    ff:df:25:93:b2:6e:3c:73:2b:fa:45:aa:01:05:b2:
                    d5:c8:40:76:3c:a6:84:08:bd:7c:3a:6a:84:dd:80:
                    86:7c:03:22:ef:ca:f7:f9:2d:aa:5c:c4:58:07:c5:
                    b6:75:25:83:97:1c:62:f7:9b:90:60:d7:69:da:2e:
                    3e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C3:BA:73:DE:15:3B:6B:11:B3:BA:FB:FC:FA:C4:6D:49:92:8D:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/954453ea-f967-32a1-ad32-201ccb15cf85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:93:d1:2f:83:ef:47:da:9a:76:12:4c:ca:6b:d1:ab:5b:a2:
         0e:18:5a:03:27:af:01:aa:ce:f5:8e:b5:29:57:87:dc:16:d3:
         7e:e4:2a:ff:a8:f9:b3:6c:8b:9f:1e:2c:dc:d0:12:f8:d2:1f:
         41:52:74:8d:cc:34:9d:65:d5:a5:4b:73:50:f8:f6:43:18:f2:
         ac:64:b2:ca:75:ff:db:13:80:e1:7a:82:f2:3b:b3:b2:3e:19:
         fa:5b:84:c5:36:a1:bc:b9:b7:32:41:e4:6c:2e:b9:c8:86:7c:
         6a:3f:98:63:fa:e2:ea:13:6d:ef:6d:6f:d2:2d:39:be:f8:df:
         0c:dc:4a:55:15:73:6e:82:71:02:04:91:c8:af:52:73:77:59:
         84:86:65:fa:1e:62:a0:a3:25:57:52:28:ff:73:5a:1a:71:b6:
         79:d9:4c:8a:d1:9d:f5:a6:78:7b:f6:bc:ce:12:41:23:c0:17:
         53:04:c1:5c:47:49:f1:c3:51:1e:8a:7d:fb:09:96:c7:62:21:
         61:44:8c:9b:0f:83:d6:76:7a:23:43:a5:49:37:fd:e6:5c:e5:
         5a:80:1b:2d:55:e1:cf:90:ed:64:28:5c:23:59:93:5f:69:c7:
         3f:e4:de:a3:0a:ed:dc:7a:ff:f7:f4:97:dc:61:e7:8d:9b:c0:
         3a:9f:64:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:55:21 2026 by rpki-client