Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e85b2983-9674-3e51-b94c-3fbe65494821.roa
File:                     e85b2983-9674-3e51-b94c-3fbe65494821.roa (raw, json)
Hash identifier:          hQgBQmh9tu2yFzRRhPKv3btXcyZ2DWKbEW+kvUaUvbk=
Subject key identifier:   26:75:BB:DB:F9:67:CB:EF:ED:CD:77:42:7A:E2:86:3D:8E:64:14:A7
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D7E353D1B78419BD1482B2400
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e85b2983-9674-3e51-b94c-3fbe65494821.roa
Signing time:             Mon 13 Apr 2026 13:00:30 +0000
ROA not before:           Mon 13 Apr 2026 13:00:30 +0000
ROA not after:            Sun 12 Jul 2026 13:00:30 +0000
asID:                     20001
IP address blocks:        152.44.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:35:3d:1b:78:41:9b:d1:48:2b:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 13 13:00:30 2026 GMT
            Not After : Jul 12 13:00:30 2026 GMT
        Subject: CN=989296a3-4a30-4c5b-b6c8-9047ba1b9d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d7:d7:56:81:6f:fb:93:ea:fc:41:1a:97:3a:
                    24:16:d6:90:98:63:2e:25:b6:ee:8b:b8:51:30:a7:
                    c8:97:2d:6d:67:2e:c6:a0:d1:8f:6f:a4:97:ef:16:
                    31:30:e0:8b:7f:4d:27:5d:14:ed:5c:2a:43:06:b8:
                    4f:b8:a5:e4:4f:18:58:51:2e:96:8b:63:23:5f:58:
                    cd:0b:3b:e1:a5:d0:a1:bf:6a:12:5a:e1:95:a5:50:
                    97:fb:1e:ee:b4:c9:ed:67:e3:6e:15:a9:f5:3a:b9:
                    f6:31:e3:68:c5:67:3f:fc:99:7e:3c:e0:cd:ca:f8:
                    55:0a:35:b4:d5:27:2a:ca:33:f0:20:21:a2:8c:65:
                    21:ec:26:0f:a2:8d:a3:98:65:07:a5:9b:77:67:a4:
                    fd:d8:69:7c:35:23:c0:37:46:9f:a1:c1:82:d1:ba:
                    7c:07:c0:99:54:54:71:5c:96:ce:cd:ac:b9:93:08:
                    91:80:e7:ee:44:ca:3a:57:65:da:b8:2a:80:0f:8f:
                    bf:af:d6:77:6f:e8:e4:c4:48:a9:75:82:4e:1b:42:
                    46:e2:82:54:79:b2:b8:db:14:c9:cc:d4:ec:e1:99:
                    e7:dc:e2:aa:89:54:3a:7d:ca:d8:e6:9d:8b:b4:f3:
                    9a:19:7b:0c:f5:0c:0a:88:54:fc:e6:ff:0d:84:54:
                    49:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:75:BB:DB:F9:67:CB:EF:ED:CD:77:42:7A:E2:86:3D:8E:64:14:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e85b2983-9674-3e51-b94c-3fbe65494821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:d4:db:50:1b:7b:5b:ea:9f:17:b8:9b:f3:a8:f2:9b:92:cc:
         85:d7:b2:48:40:fa:84:58:48:83:c2:05:31:e5:e9:8f:a6:b6:
         f5:7e:26:35:d1:76:1f:fb:15:0c:62:32:fe:49:d9:43:0c:ca:
         f8:ff:fb:66:f4:92:65:5c:cb:64:73:29:1e:80:41:2d:d7:12:
         87:0b:f6:1d:d6:58:66:c4:c2:4d:17:bb:9d:7c:8c:fc:4a:c4:
         82:37:20:1c:89:d2:11:61:35:0f:a4:79:53:63:b0:da:25:bb:
         a7:1a:fd:af:0b:ca:fb:72:e3:0d:09:bf:64:77:15:a3:bc:e3:
         36:27:8b:2d:1a:ce:36:b2:2b:3c:45:39:a1:b6:3f:12:ef:1d:
         2a:4c:6d:a7:b4:e9:2d:20:e8:c6:8f:5a:e6:52:e3:92:9d:3d:
         9f:53:b9:0d:e7:84:d4:ea:62:ab:55:30:bd:3a:0e:ca:f2:c2:
         1a:ba:35:3c:ca:ee:7d:16:34:2e:0b:6a:6d:42:47:62:f2:a8:
         1b:d8:f2:3e:6b:f9:e4:0b:b6:20:bc:17:99:fd:8d:77:88:8a:
         97:14:1a:4b:42:30:a7:e1:64:4e:c0:a6:b2:eb:07:6e:ad:0b:
         40:c3:fc:1a:44:ab:57:85:1d:f2:96:00:09:4a:4b:82:53:c1:
         38:34:51:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:18 2026 by rpki-client