Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/108e4e2c-4dbf-325e-8ff7-74c2d6e1e6f2.roa
File:                     108e4e2c-4dbf-325e-8ff7-74c2d6e1e6f2.roa (raw, json)
Hash identifier:          Jp4z6cxAK/hLV5MV1SJxx6NknB4qudR4twYQvsCIcIs=
Subject key identifier:   43:F9:29:D1:10:A3:62:9D:F1:BE:9D:21:6D:CD:0D:45:7A:AA:9E:67
Certificate issuer:       /CN=f8cb8abc-eb90-4175-a744-ecca7be34b7d
Certificate serial:       010D0C9F4328584EA78756F7E3E0BECC23190CD0
Authority key identifier: 1F:85:60:57:29:28:E3:90:5E:97:AE:31:40:29:ED:3B:76:3B:79:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/108e4e2c-4dbf-325e-8ff7-74c2d6e1e6f2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     17278
IP address blocks:        192.231.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/f8cb8abc-eb90-4175-a744-ecca7be34b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/f8cb8abc-eb90-4175-a744-ecca7be34b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:56:f7:e3:e0:be:cc:23:19:0c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8cb8abc-eb90-4175-a744-ecca7be34b7d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=09a7b98f-9fb8-4635-b372-cc14c67a2a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:91:08:87:81:be:1d:e7:ce:65:5b:0a:98:67:
                    36:75:62:f9:f7:c1:a8:d4:8c:52:58:63:5e:03:44:
                    e2:d3:49:98:d5:a8:de:b7:07:de:d0:89:24:55:40:
                    af:82:4c:36:40:34:6a:20:30:04:38:57:98:b7:26:
                    66:aa:a1:6c:b3:21:3f:9f:50:e5:0a:ad:d3:4a:e3:
                    c5:b9:23:ac:a0:5d:cb:df:be:67:a9:c9:35:4f:80:
                    e1:72:26:08:d3:8a:36:d1:5f:65:14:db:0d:4d:4c:
                    68:f2:9e:b3:12:fd:58:dd:23:c6:d6:08:34:55:0e:
                    63:87:b6:42:c0:11:a6:54:68:06:23:ad:9b:f6:97:
                    8e:be:5c:c8:76:89:fb:47:c9:0a:b4:5b:ed:6c:04:
                    6d:07:63:84:e5:cf:6d:71:40:7d:ac:fb:74:23:fa:
                    e0:82:e0:0b:57:cc:e3:e2:24:a2:4f:a5:e2:36:70:
                    64:6c:2a:17:22:57:7b:df:b4:b9:f5:9d:95:b8:21:
                    22:de:d2:00:1e:07:e5:ef:b2:fc:11:02:3a:20:c2:
                    76:a7:98:d5:e5:10:32:98:f8:40:b1:5b:dc:c9:b1:
                    54:4e:d0:57:e1:54:26:9c:45:ab:6f:1c:ac:60:70:
                    64:f6:c6:06:37:9a:6a:45:c6:4c:03:d8:e6:5d:1e:
                    28:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F9:29:D1:10:A3:62:9D:F1:BE:9D:21:6D:CD:0D:45:7A:AA:9E:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/108e4e2c-4dbf-325e-8ff7-74c2d6e1e6f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/f8cb8abc-eb90-4175-a744-ecca7be34b7d.crl

            X509v3 Authority Key Identifier:
                keyid:1F:85:60:57:29:28:E3:90:5E:97:AE:31:40:29:ED:3B:76:3B:79:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:6a:c4:73:39:9d:a0:0b:e8:bf:23:8d:63:bf:da:e0:ae:f9:
         78:f2:96:a8:5c:8a:80:72:d6:4d:3e:18:e5:ae:12:4e:7c:71:
         c6:a3:0e:27:17:b8:f5:4a:30:f6:aa:03:d0:b2:9c:d1:be:2b:
         c1:68:f1:74:79:fd:ee:63:0f:aa:9a:60:49:e2:9c:70:ee:8c:
         91:a3:31:f5:7e:25:ab:9f:6d:6b:bc:3d:cf:c1:13:d6:2f:f0:
         50:c3:f4:0b:7a:15:f6:42:84:d8:82:6e:de:dc:0e:31:a8:6c:
         78:1d:39:b8:08:93:69:da:5f:98:bc:0c:9d:5e:ea:71:85:2c:
         38:9c:8f:82:04:be:7b:49:52:93:70:18:e3:47:3a:4e:c0:b0:
         1d:6f:5e:dc:fb:25:b1:88:d1:80:0e:de:91:32:f8:59:6d:97:
         39:c3:dd:99:d3:02:82:f5:b8:e1:6d:9b:ff:32:8f:69:1a:cc:
         70:47:e8:4a:47:d8:0f:45:2a:ea:e2:8b:91:ed:2c:c0:7a:62:
         1a:b9:c8:88:a0:a4:5f:16:5a:75:a2:39:04:84:12:1e:99:ac:
         67:b5:90:4c:4b:d9:89:ed:71:c6:14:b8:3f:59:7d:12:19:a3:
         54:f0:fb:45:35:78:68:e0:37:f2:31:99:f3:f4:f5:f4:b3:ad:
         83:33:cf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:11:45 2026 by rpki-client