Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8ff2c5ce-e41d-3ab6-b22a-b27e602f499a.roa
File:                     8ff2c5ce-e41d-3ab6-b22a-b27e602f499a.roa (raw, json)
Hash identifier:          npYP7k5r/zEdEGhj3ud4Ti4BvCO6t5esxWCJYaKt88M=
Subject key identifier:   C4:8C:0E:AE:CA:C5:A0:C7:68:B6:5E:56:C6:BD:1D:3C:A8:FA:70:52
Certificate issuer:       /CN=8637a780-1944-4d75-b623-0c10c96f56eb
Certificate serial:       010D0C9F4328584D7A052C9B51C59D071E8CC880
Authority key identifier: 97:69:DE:A5:DA:C6:20:7F:42:CC:7D:86:D8:27:AC:E1:36:04:F6:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8ff2c5ce-e41d-3ab6-b22a-b27e602f499a.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     401133
IP address blocks:        168.100.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:2c:9b:51:c5:9d:07:1e:8c:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8637a780-1944-4d75-b623-0c10c96f56eb
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=35d6ac8a-de60-42c6-b78d-dfd5330dc716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c6:28:43:4b:7c:f1:ce:f9:85:f8:ed:04:01:
                    d1:d2:2b:56:57:f3:0a:3a:79:6d:a8:d3:30:f4:da:
                    36:f6:f0:2b:4f:d8:50:a0:2d:b2:d6:7f:1c:73:18:
                    12:74:1a:f3:9d:06:ac:c9:fd:a9:27:f6:0a:06:bc:
                    89:59:01:82:49:c4:c0:df:b9:c2:31:fe:7a:2b:21:
                    b6:ce:ea:76:2c:33:72:5e:4f:e5:b3:7d:21:9d:ca:
                    51:8d:97:35:2b:b8:14:ab:73:09:12:de:bd:a9:2c:
                    20:24:d9:a9:c9:f5:4d:03:0c:ff:e5:f5:50:eb:ad:
                    54:6d:57:9a:31:72:a5:16:ab:87:93:09:c9:d4:ce:
                    6f:4a:76:97:f3:7f:08:44:c1:70:48:1c:e6:97:e4:
                    65:bf:ca:ab:cc:db:f5:d4:74:22:3e:b9:38:33:fe:
                    08:6a:ef:76:1e:36:d6:40:94:16:ab:27:e5:42:a9:
                    ac:b5:78:b6:a4:6c:e0:ed:d8:70:0b:21:b0:29:7d:
                    ca:4a:fa:18:78:3b:9c:e2:72:86:58:bd:3f:46:ec:
                    31:3d:f3:9a:42:2e:94:5a:ad:b2:14:73:64:cb:9f:
                    41:e0:5d:6b:ae:67:40:7b:5f:70:c8:28:a5:a3:49:
                    2f:84:10:2a:19:8a:18:8c:1b:61:65:d8:b0:96:b8:
                    7a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8C:0E:AE:CA:C5:A0:C7:68:B6:5E:56:C6:BD:1D:3C:A8:FA:70:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8ff2c5ce-e41d-3ab6-b22a-b27e602f499a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.crl

            X509v3 Authority Key Identifier:
                keyid:97:69:DE:A5:DA:C6:20:7F:42:CC:7D:86:D8:27:AC:E1:36:04:F6:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:a5:fe:34:41:e6:a4:35:fb:0c:f6:86:be:a2:9b:ce:30:f1:
         04:02:d0:e5:0e:a6:60:26:b2:3f:e6:72:c5:c2:09:5d:8e:d6:
         05:65:42:26:17:28:b5:1b:cf:84:a2:04:b7:68:62:8c:6e:a8:
         a7:a4:fc:2c:e4:4a:cf:29:cf:f4:d5:20:75:cf:7e:32:d5:36:
         fd:46:9a:a6:01:97:6f:1c:ae:2d:22:e7:57:7b:fe:1b:fc:c2:
         58:cc:39:37:cf:a5:fc:9b:17:b0:70:cb:8d:b3:53:93:9d:d6:
         bf:c8:1d:ad:37:c3:ce:7f:02:10:b0:36:99:7e:6a:2f:5b:f5:
         ab:83:d4:96:66:f8:af:34:13:67:95:3e:95:dd:6d:07:b8:7c:
         6f:2a:ff:47:de:f5:a2:a1:ca:12:84:9a:7c:67:66:29:92:cd:
         f9:62:7a:d8:fd:3d:8e:c3:d1:a1:73:05:a5:81:a8:c2:dd:a8:
         b6:44:e6:4a:a2:2f:ae:59:46:d9:7f:cb:a1:66:c6:a2:f9:de:
         b9:8b:8c:51:21:c0:5e:61:cf:65:f4:7d:25:af:b2:29:e2:32:
         f2:58:04:2f:0a:bf:61:b3:f3:df:fc:6d:60:ac:29:a0:3c:13:
         75:84:ee:c5:d2:00:29:3f:e1:ad:88:9e:91:53:47:b9:f2:e8:
         6c:59:5f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:47:52 2026 by rpki-client