Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/e612dc76-d5bb-3c49-9aeb-c02d97dbc376.roa
File:                     e612dc76-d5bb-3c49-9aeb-c02d97dbc376.roa (raw, json)
Hash identifier:          y++7OGB7n+OlUOChr+h00nlhjNndHRmC3cb7Cfw2kas=
Subject key identifier:   FA:B2:F7:34:75:12:3C:4F:0E:82:1D:8E:29:78:A5:92:F2:DB:2B:E3
Certificate issuer:       /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
Certificate serial:       010D0C9F4328584F497354B90CF65B44A4C0D480
Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/e612dc76-d5bb-3c49-9aeb-c02d97dbc376.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     21581
IP address blocks:        108.161.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:54:b9:0c:f6:5b:44:a4:c0:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1278772d-4027-4986-8e54-01133f9256be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d6:96:32:f2:a1:6e:0a:45:35:23:b4:e0:bb:
                    48:e9:03:11:3e:ee:5b:ed:54:66:0d:29:6d:14:5c:
                    11:08:61:be:e1:44:05:f3:38:86:3e:2e:ab:b7:3d:
                    32:e3:de:cb:b9:e3:4e:7e:80:87:53:6b:12:54:64:
                    f2:99:2e:27:12:a9:7d:b1:29:3e:18:3a:42:bb:33:
                    9f:b4:99:b8:11:8e:57:90:fa:b3:b9:a1:db:4e:53:
                    c0:49:71:fa:a1:92:b0:9b:bd:35:d7:92:82:d3:81:
                    9e:10:a8:c6:30:9e:7e:a6:90:35:1a:b7:88:46:ae:
                    5b:d2:d8:2d:1b:73:0a:f1:fe:19:08:f5:47:c8:86:
                    97:72:9c:8d:41:47:ec:0f:7d:8d:6c:7f:be:7f:9a:
                    eb:ea:d0:b1:9d:0d:2e:09:b1:ff:8b:47:5e:42:8b:
                    9b:d5:74:5c:b3:72:99:3a:46:4d:98:85:de:8d:c4:
                    5e:da:ce:eb:23:a0:47:a1:b6:64:05:71:03:e3:e5:
                    00:fc:67:91:85:2b:f4:ab:30:6d:63:64:5c:c7:3c:
                    62:24:dd:f3:a3:5a:63:76:21:05:90:16:e1:8e:f7:
                    3b:a1:a6:1e:ad:6d:62:93:da:40:37:2b:c7:46:b8:
                    9e:af:1d:32:7e:d4:0e:71:46:f2:13:df:62:72:33:
                    91:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B2:F7:34:75:12:3C:4F:0E:82:1D:8E:29:78:A5:92:F2:DB:2B:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/e612dc76-d5bb-3c49-9aeb-c02d97dbc376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl

            X509v3 Authority Key Identifier:
                keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:21:bb:19:54:ee:b8:a2:07:d0:c9:85:87:6b:d0:28:72:90:
         a9:22:ae:23:55:81:f3:f4:6d:00:65:39:96:d0:56:a5:38:c7:
         6e:ed:70:39:ec:c7:46:d8:be:0b:00:91:db:68:8e:c9:0a:f1:
         c3:f1:99:ba:d0:d1:cd:24:20:16:f6:46:27:9b:0e:2b:6d:bc:
         f6:b2:20:6f:eb:dc:f4:3d:80:5b:66:c1:87:c9:60:da:9a:bf:
         9c:21:15:98:ab:d7:d6:8e:05:78:f5:21:41:8a:bb:00:72:9c:
         84:93:44:e6:73:07:b6:62:84:b9:4c:3e:8e:d5:79:58:29:71:
         c8:9b:37:d6:14:30:1b:03:c6:04:1b:24:99:fb:dc:7c:33:a1:
         c9:03:ba:ad:03:fc:91:04:42:fe:fe:7b:1c:81:bd:6b:93:6f:
         09:52:2a:4f:a3:71:ab:be:71:95:81:49:66:55:1c:c4:c1:f4:
         1f:94:69:7f:8e:bf:de:3c:42:7c:34:f0:a4:45:9d:22:99:3b:
         41:a8:b2:28:89:8e:e0:4e:1f:40:3c:c3:e4:1d:ea:f6:8f:06:
         b6:e7:e0:6c:84:e8:90:18:8d:16:09:d2:17:6f:88:21:8f:0b:
         43:22:20:1a:6e:ae:8e:8d:02:1e:8c:6e:29:68:23:63:65:0f:
         3e:fa:e6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:09:17 2026 by rpki-client