Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/730a56ef-f399-3df5-aca5-b72adc9c9451.roa
File:                     730a56ef-f399-3df5-aca5-b72adc9c9451.roa (raw, json)
Hash identifier:          tZu8pAt+dY40cWbjoV3GljT3aXhRtJvMsY3bKMdi8P8=
Subject key identifier:   4C:41:EF:3D:07:8F:D4:74:85:F0:74:D1:FF:73:AA:41:8D:4A:D5:06
Certificate issuer:       /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
Certificate serial:       010D0C9F4328584F497442233C1A8A2E9F4C93C0
Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/730a56ef-f399-3df5-aca5-b72adc9c9451.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     21581
IP address blocks:        108.161.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:42:23:3c:1a:8a:2e:9f:4c:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e89df2fd-9f6a-409d-ad7f-247dcdd35a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:06:31:d4:a0:c0:78:1a:93:7c:01:c1:f3:06:
                    9e:4b:b3:2b:53:be:47:6b:b9:fc:f4:3f:e7:16:16:
                    a0:4d:1a:85:e2:c0:2b:4e:94:40:66:a3:ed:74:17:
                    6c:10:e4:92:b5:e2:25:36:a8:d7:bb:27:04:80:50:
                    fb:71:64:22:34:a2:fe:ea:59:42:58:ef:51:a1:8f:
                    94:15:df:5b:e0:1c:67:fe:af:b6:75:af:2f:90:5a:
                    8a:15:20:ea:fe:94:e4:8d:0b:d6:c1:03:50:92:5f:
                    34:36:a3:e4:e8:c6:9d:d6:25:63:4f:ff:e8:b4:6e:
                    1b:2f:9b:1d:2f:12:3b:92:f8:c7:fe:d2:6e:62:d5:
                    11:30:6d:72:ff:f9:b5:f7:34:7e:56:60:d5:22:db:
                    e5:54:93:8e:af:89:ab:3f:2c:b8:74:55:5b:1c:b7:
                    96:c5:3c:62:0a:d4:5f:e1:f2:3b:f4:6c:f3:28:dd:
                    92:76:6b:48:fd:d8:3a:ab:c3:6c:e2:c7:be:c3:2b:
                    da:4c:1e:99:5c:68:d3:9a:74:dd:3a:f9:c9:12:cd:
                    7f:92:71:83:c4:9d:5f:15:f9:83:e7:8c:21:f0:76:
                    91:02:68:10:ca:70:4b:60:6a:87:40:f0:6c:7c:d0:
                    84:35:18:4c:c9:40:a5:d9:de:85:9a:f6:ed:e9:b2:
                    7a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:41:EF:3D:07:8F:D4:74:85:F0:74:D1:FF:73:AA:41:8D:4A:D5:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/730a56ef-f399-3df5-aca5-b72adc9c9451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl

            X509v3 Authority Key Identifier:
                keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:f3:87:64:92:64:f1:50:e4:17:82:f1:f7:1c:2f:2d:e2:ff:
         38:98:e7:d4:d6:4c:c7:ad:b6:ff:68:71:44:b1:f8:6a:2f:21:
         6f:ab:b3:e9:04:be:b0:d3:d4:2f:80:90:82:62:3f:a8:e8:10:
         34:42:ca:93:f8:fa:c7:81:d5:15:6b:9f:b5:0b:95:57:cc:e8:
         48:b5:22:93:06:df:6c:83:79:52:2e:f4:27:ae:91:bd:ed:02:
         10:1b:2b:16:97:11:6a:28:45:1b:74:ab:29:75:52:b4:87:c1:
         62:ad:f5:9b:c5:b3:d5:0f:58:cd:7a:df:c1:22:e9:e4:20:b4:
         62:68:2f:a4:1e:75:39:ca:bc:ca:2e:9a:10:b8:1b:be:64:7d:
         c9:1d:28:d0:4d:1a:e9:e5:ac:62:31:aa:6d:a9:f4:d1:86:62:
         cd:37:7d:39:e5:7e:92:35:56:7c:9c:e0:b3:ea:70:5e:2a:eb:
         26:0a:c2:77:39:a1:44:fa:52:6e:87:ed:27:58:a4:d5:21:b7:
         0e:5a:ab:96:06:7c:01:41:67:1f:18:c8:30:af:90:cf:f3:52:
         a5:21:0e:1d:e9:72:36:ab:0e:cf:97:8c:7e:7a:3f:b6:49:bb:
         b5:f6:8b:39:51:c0:ce:c3:49:27:e7:c3:29:55:be:ae:e9:b6:
         fd:eb:23:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:11:11 2026 by rpki-client