Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/4c2203c5-922a-38e0-952e-b742429f4dd8.roa
File:                     4c2203c5-922a-38e0-952e-b742429f4dd8.roa (raw, json)
Hash identifier:          PnybnXFZWKwnPbH1IBKKAlF3pAoJMrZB41TXk7tkbtQ=
Subject key identifier:   61:64:39:EF:B0:7F:3F:22:7A:A2:93:5D:A1:9F:21:41:30:45:CB:16
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F4328584EA787CFECC039945192876080
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/4c2203c5-922a-38e0-952e-b742429f4dd8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14413
IP address blocks:        108.174.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:cf:ec:c0:39:94:51:92:87:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a1e17fa5-3924-4365-b45d-9700c3c36ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:63:d4:bc:21:6f:17:74:26:19:61:c5:66:d7:
                    7f:cd:b7:21:18:a8:60:93:78:f8:11:0c:71:e3:5c:
                    c4:53:dc:81:54:f0:52:29:bb:0f:78:58:fe:5b:19:
                    5e:32:01:5f:b9:71:e1:6e:fa:3d:a3:3b:ab:8e:2f:
                    34:07:f2:74:da:7f:20:f6:fe:87:17:d1:f8:22:4b:
                    fb:cb:ee:13:f7:19:6b:11:71:31:15:71:24:cb:5c:
                    d9:e0:a6:43:e5:2b:30:c0:b2:ca:5a:e5:40:3d:d1:
                    d5:2a:5b:98:1e:ca:c6:06:c0:7b:36:e2:25:85:dc:
                    41:f1:8b:c0:ca:66:8e:69:2b:4b:fc:64:af:c1:e0:
                    b9:84:76:d1:57:e4:99:b3:5f:1a:f2:f1:e1:1f:a1:
                    92:6c:7f:4c:72:4a:65:48:13:5e:5d:25:37:40:e6:
                    6d:2f:bd:6b:1a:a9:b4:93:15:a6:87:1f:ff:f7:12:
                    ec:53:15:ab:0a:19:c8:be:34:98:36:a8:b8:92:28:
                    f6:94:60:e6:74:10:ba:b9:5f:bd:41:f1:36:a3:e3:
                    a6:5f:37:af:6d:fb:7f:02:9b:62:e1:2c:2d:4e:dc:
                    7c:e2:c6:28:1b:7b:05:73:73:7e:ac:65:da:f5:e4:
                    ad:d1:e8:01:b3:c5:2b:74:85:c7:7e:55:49:ee:ea:
                    b4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:64:39:EF:B0:7F:3F:22:7A:A2:93:5D:A1:9F:21:41:30:45:CB:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/4c2203c5-922a-38e0-952e-b742429f4dd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.174.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a8:d0:09:f4:9f:fa:74:f0:ea:01:7c:7c:9a:e2:4f:61:a1:
         59:b8:41:a1:d5:93:86:b3:b8:ae:27:b5:44:b8:71:b8:5e:d8:
         1d:4a:f8:55:56:94:8d:19:97:d6:cd:9b:c1:96:e0:23:cf:88:
         7b:43:bc:49:c7:0a:e2:bb:13:ac:17:fc:da:0a:f7:fa:0b:d7:
         62:ac:36:93:2c:ca:f0:18:7e:62:e6:d8:95:4d:e1:1f:5b:3b:
         1f:74:45:92:7d:10:4e:57:08:86:6b:ae:06:2c:25:15:e0:58:
         be:3e:64:b0:43:48:6d:61:e0:5f:7c:3b:e8:31:b5:26:a6:34:
         bb:53:9b:25:83:12:8b:26:bf:a9:6e:b5:52:47:c7:04:63:68:
         a7:61:bb:fc:19:8a:a1:30:8a:2f:e4:0e:7f:b6:4a:da:ef:41:
         a7:1e:f3:39:07:22:10:8b:50:05:f3:4f:c1:1f:00:d2:b2:91:
         ca:a9:8b:25:19:aa:9b:9a:f3:48:cb:54:e6:23:e6:67:54:bf:
         d9:06:a4:88:2a:34:8e:67:96:f1:0a:4f:eb:6b:b5:fa:dd:e4:
         d3:6a:44:57:66:33:ac:a8:31:c3:b1:7d:c6:ad:46:ee:88:79:
         91:23:d3:f8:a5:19:11:ed:e0:7a:4e:01:ec:b1:ec:f0:da:99:
         dd:63:db:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:54:41 2026 by rpki-client