Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f6e0bea0-135d-3d7a-b8ef-67634244e3b3.roa
File:                     f6e0bea0-135d-3d7a-b8ef-67634244e3b3.roa (raw, json)
Hash identifier:          ECxQDUVAPywKdO1/I+eQx0/ysZuari7x6ywmcryV7jU=
Subject key identifier:   42:EE:10:C6:70:37:B8:E1:E1:E0:BF:66:5D:1D:0C:56:FC:39:BA:F1
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F0AA22B2F7716DB0E40084E00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f6e0bea0-135d-3d7a-b8ef-67634244e3b3.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     13536
IP address blocks:        108.171.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:2b:2f:77:16:db:0e:40:08:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=c36b861a-1019-442c-9fef-6c3e76ce273a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:90:37:0e:67:9b:41:93:7f:0d:ec:e8:ec:1c:
                    ba:7a:83:37:5a:8a:f5:72:e6:3b:fa:c8:82:dd:fb:
                    37:86:44:4d:e8:c8:15:96:b6:af:cf:ab:1a:00:9a:
                    b7:2d:d3:be:d6:45:66:9c:10:3c:f6:65:5a:c4:31:
                    7e:48:52:82:d1:a8:d1:f8:ca:42:49:10:88:01:46:
                    01:6d:71:96:57:0a:f8:c4:e2:ff:fc:b0:e1:36:5b:
                    3b:5e:b1:0d:07:22:38:d2:58:bb:8d:a8:e1:e6:10:
                    9e:93:26:70:24:31:f1:92:3d:07:7a:ca:3a:c7:2e:
                    04:d7:3b:a2:81:22:75:5f:57:a1:5f:15:41:cb:ef:
                    e4:1e:7f:51:aa:c4:39:d5:91:2f:02:f4:f3:09:23:
                    20:f1:30:e4:da:b8:73:53:3e:a8:2b:20:99:21:3a:
                    fc:a3:2c:01:18:4b:4b:da:4d:22:80:77:ae:42:e1:
                    9b:d9:01:f4:23:78:5d:aa:d2:39:2e:bc:d8:2d:84:
                    a3:3f:0d:32:43:08:d0:8d:4b:1f:3e:e5:61:8b:88:
                    82:fb:3b:2a:cf:b5:ef:f6:d9:fa:ed:98:9e:84:3f:
                    17:12:08:b6:97:8e:5a:30:40:a2:f6:67:bd:c7:7f:
                    97:83:0a:6d:f5:6d:49:4d:8d:1d:cd:43:64:a5:9e:
                    7b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EE:10:C6:70:37:B8:E1:E1:E0:BF:66:5D:1D:0C:56:FC:39:BA:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f6e0bea0-135d-3d7a-b8ef-67634244e3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.171.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:4f:56:bd:04:53:28:74:c7:01:69:28:4e:ca:f7:6c:71:87:
         20:28:92:49:0c:29:e3:65:47:89:5c:f0:b7:4a:53:2d:af:23:
         d0:e6:f2:f3:17:0e:bc:12:60:da:1f:5e:c4:71:f1:d2:fc:87:
         84:62:e9:f6:a2:dc:05:bf:c0:74:5c:f2:8c:66:c6:75:c7:9f:
         5b:aa:72:de:3c:14:63:61:35:09:e9:6f:48:66:aa:61:1e:ba:
         01:cf:73:e6:33:37:e8:fc:7e:1d:72:98:99:93:ad:4a:11:66:
         b5:1e:66:a2:6b:e1:4a:2e:fc:d8:74:f6:42:8e:ff:51:b1:e9:
         c8:37:45:8b:8c:ce:a9:4f:2b:30:f1:94:83:cf:a0:b3:ba:46:
         cb:4d:cb:87:2d:10:34:77:e2:a2:27:a4:b5:55:dd:53:95:84:
         de:90:95:d7:f6:55:cd:1e:56:64:a7:c4:bd:10:e7:98:fa:0c:
         9d:7a:dc:91:70:d0:15:30:73:a2:11:05:89:e7:18:d4:4a:53:
         a3:ec:ca:d1:ca:17:f9:b1:13:25:ed:19:6a:fa:87:39:f0:1d:
         75:60:28:fd:38:61:4b:e4:29:d2:a9:34:cf:11:0d:e9:1b:63:
         17:8f:33:88:52:0e:6a:30:24:41:04:a1:14:cd:4e:0d:0a:81:
         10:8f:ee:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:38:56 2026 by rpki-client