Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/971d87c0-f9b6-332d-91fd-25349ddb466b.roa
File:                     971d87c0-f9b6-332d-91fd-25349ddb466b.roa (raw, json)
Hash identifier:          ws2FlIe2SjcZwCe7RrnP25by8+nqKrTob7c7Eyg2WAI=
Subject key identifier:   CF:80:29:9A:F9:55:8D:25:B2:53:58:04:64:5E:06:51:B8:85:F8:BC
Certificate issuer:       /CN=9af44307-21f9-411b-ba04-dedf105fd206
Certificate serial:       010D0C9F4328584D63AFA49D9D8A65C4808174C0
Authority key identifier: 73:39:24:7A:51:CC:FB:32:E2:8F:DB:CD:D0:3D:8E:32:83:F7:E9:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/971d87c0-f9b6-332d-91fd-25349ddb466b.roa
Signing time:             Sat 04 Apr 2026 01:00:25 +0000
ROA not before:           Sat 04 Apr 2026 01:00:25 +0000
ROA not after:            Fri 03 Jul 2026 01:00:25 +0000
asID:                     13335
IP address blocks:        155.103.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:63:af:a4:9d:9d:8a:65:c4:80:81:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af44307-21f9-411b-ba04-dedf105fd206
        Validity
            Not Before: Apr  4 01:00:25 2026 GMT
            Not After : Jul  3 01:00:25 2026 GMT
        Subject: CN=e1410606-919f-4036-b66c-1c53b9c30af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:85:cc:fb:ca:f5:87:16:16:40:54:c8:4d:9e:
                    84:99:27:8d:21:51:51:88:f1:df:77:23:8d:73:8b:
                    91:ec:f1:0b:c7:d0:92:e4:be:8a:df:3c:0d:51:89:
                    67:f2:91:6a:b8:3c:aa:02:93:e3:11:3d:bf:e1:be:
                    74:5d:0c:73:99:55:15:39:69:0d:e9:5b:66:17:3e:
                    5b:64:49:8a:38:33:64:e5:d2:13:20:75:86:bd:d1:
                    24:21:0f:57:50:c1:b1:d0:d4:bb:0c:17:23:9d:ed:
                    e5:05:fd:8c:7d:53:34:8d:e8:b6:10:bf:ca:cb:b8:
                    b0:85:a0:99:4b:5e:d4:3f:a1:11:d2:9e:cc:52:d1:
                    c4:8a:58:cf:8e:79:2a:ef:3d:b3:a1:fe:df:4b:3d:
                    9f:49:21:58:f5:c3:11:f8:62:48:5b:8b:2b:f1:21:
                    98:47:38:2a:e8:09:fb:e9:12:02:47:71:79:97:35:
                    df:cc:b3:a0:ba:5c:0d:74:93:59:97:1f:62:9a:70:
                    6c:ef:72:2d:1f:0c:9c:36:35:84:4f:48:3b:c9:12:
                    25:1b:07:a6:0c:c1:93:d0:dc:3d:56:5d:be:5c:77:
                    d4:e9:1f:75:a5:76:ca:a2:0e:e4:72:aa:cd:05:d2:
                    60:03:f4:c4:ae:aa:3c:8f:2e:89:19:18:5e:a0:81:
                    60:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:80:29:9A:F9:55:8D:25:B2:53:58:04:64:5E:06:51:B8:85:F8:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/971d87c0-f9b6-332d-91fd-25349ddb466b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.crl

            X509v3 Authority Key Identifier:
                keyid:73:39:24:7A:51:CC:FB:32:E2:8F:DB:CD:D0:3D:8E:32:83:F7:E9:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:42:8b:af:f5:84:55:5f:8a:8c:da:d3:a4:72:cc:41:84:93:
         0d:c0:19:b9:55:24:b9:9b:b5:82:e2:39:2b:d0:6e:d8:4b:6a:
         8b:4e:e0:a1:b9:ef:3c:5d:74:3f:47:e5:54:18:1b:3a:35:2e:
         2c:93:b4:a4:d5:ed:49:55:76:ff:be:4f:e3:46:b7:15:d6:10:
         9b:f0:14:00:10:6b:61:83:d5:f4:c2:5d:8a:ba:c6:cb:28:00:
         f6:8d:12:e6:cb:15:0d:1c:b6:52:b7:f4:49:7b:c9:38:c9:81:
         86:b7:12:d6:0f:3c:ad:6b:eb:d3:57:ac:cc:dc:13:97:d4:7b:
         0f:f7:0d:f6:f0:84:a4:72:fd:e7:29:27:d3:ae:a1:2c:93:55:
         e8:b0:30:f2:87:d6:c7:b3:ea:e1:ea:92:79:3f:de:9f:5a:70:
         c0:2a:5e:72:a0:8b:73:4f:15:53:9a:1f:1d:85:14:13:0d:b4:
         71:02:ed:c0:72:6f:77:5f:f4:29:52:52:26:02:a4:de:b6:eb:
         89:e4:8d:90:b2:87:f1:54:78:d9:53:7c:da:5d:42:f4:61:e6:
         24:1d:88:3f:f4:5e:c0:93:88:5f:43:ba:ee:3c:58:30:74:f4:
         84:7f:90:97:33:9c:10:cd:9b:30:81:cc:19:fd:b8:51:f9:6f:
         e0:d3:2f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:23:47 2026 by rpki-client