Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/730a56ef-f399-3df5-aca5-b72adc9c9451.roa
File:                     730a56ef-f399-3df5-aca5-b72adc9c9451.roa (raw, json)
Hash identifier:          +ZiZ7SCHgqNVsg7gyLkiDdY3ry0gDF6qPc/Rec/gzMo=
Subject key identifier:   E5:6A:41:FF:B5:37:BC:9C:B3:ED:60:87:72:F6:6F:26:85:86:4D:E2
Certificate issuer:       /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
Certificate serial:       010D0C9F4328584DFA7079320EDC101D0D40BD00
Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/730a56ef-f399-3df5-aca5-b72adc9c9451.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     21581
IP address blocks:        108.161.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:79:32:0e:dc:10:1d:0d:40:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=46858569-45e0-46e8-bc47-4a8b6b9ac46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:22:04:88:e8:64:74:eb:d1:8f:a3:e7:d7:9c:
                    dd:b0:e9:f2:24:65:4f:d7:c8:aa:af:a0:69:26:e7:
                    f3:b9:76:f8:c1:98:4b:16:6b:12:6d:8d:08:7c:93:
                    a5:3d:a8:ad:be:9e:d9:44:a1:a0:01:41:88:44:0f:
                    3f:86:fa:36:dc:d8:bb:57:18:39:fd:22:d5:14:2d:
                    91:5d:08:b0:64:05:b1:68:a5:29:ce:bc:d0:5a:4f:
                    30:61:36:0a:93:c9:d6:ab:ca:3e:77:18:c8:a6:4f:
                    5f:4f:ae:e3:0a:e1:9a:08:e5:49:91:a6:04:f7:ac:
                    22:29:a5:67:9b:ac:b5:97:01:77:41:68:4d:09:7b:
                    c2:33:02:7e:b4:7e:f0:82:0b:8a:4b:8f:05:9f:cf:
                    e6:b5:0a:a0:85:70:8c:b0:09:7d:82:ab:5f:63:97:
                    a7:df:be:fb:d3:56:a0:7a:d2:b4:50:89:fc:67:d6:
                    70:b6:45:c5:3f:fe:08:df:c3:6c:94:a7:a1:ff:30:
                    b3:3c:f4:20:19:89:66:82:2f:54:f7:cc:9d:ed:b4:
                    0a:19:c1:68:ca:a1:5a:b5:f4:ad:ca:c1:fc:31:a4:
                    0f:60:f5:76:31:ca:fa:5a:d4:3a:2f:80:f7:5f:b2:
                    a7:eb:0f:49:bc:09:c7:73:2e:d2:be:d1:c2:7a:6d:
                    c1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6A:41:FF:B5:37:BC:9C:B3:ED:60:87:72:F6:6F:26:85:86:4D:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/730a56ef-f399-3df5-aca5-b72adc9c9451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl

            X509v3 Authority Key Identifier:
                keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:82:50:a0:a6:bc:c9:bc:07:bb:c1:75:62:5b:e1:fb:ec:d0:
         4f:7b:07:4a:c1:81:01:3f:5b:f8:b0:4b:06:05:2c:0b:33:43:
         95:39:89:a1:f1:6c:b8:62:2c:8f:48:5b:e1:95:e3:94:63:f0:
         56:8b:a3:ce:10:35:6b:81:9e:81:09:0f:1d:46:74:a2:fd:71:
         a3:07:ee:19:07:34:5c:a1:77:e1:f3:f0:27:fc:67:bb:04:cb:
         89:ee:49:7f:d2:47:29:35:d4:1e:2b:d3:f7:fc:53:a5:35:52:
         8d:c1:4e:b3:be:9b:16:9d:c0:22:73:ad:42:86:77:f3:26:4a:
         83:6b:59:6d:2f:1e:8c:5f:13:eb:c7:04:57:7e:77:fb:08:7e:
         1a:4c:5c:5e:42:5d:34:1e:15:4a:89:c2:10:5b:cd:f7:b1:38:
         65:ad:be:db:41:a7:5d:2c:53:ff:ea:bb:ff:c4:40:f5:51:95:
         3e:2e:75:dc:41:49:7f:a1:57:67:47:c9:90:8a:1a:dd:a2:09:
         f2:d7:56:95:e1:41:d0:3a:f9:f4:08:14:bf:a1:e7:c2:37:c4:
         f4:ed:b0:5b:0e:54:1f:91:64:06:fa:64:94:73:5d:03:e5:5e:
         2b:1b:82:78:a8:53:23:ba:52:e4:b4:38:e9:ac:3f:f5:49:db:
         3c:57:9b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:48:26 2026 by rpki-client