Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33f58a87-81f6-3e5a-8fdd-0097ec196d85.roa
File:                     33f58a87-81f6-3e5a-8fdd-0097ec196d85.roa (raw, json)
Hash identifier:          uEjryXb+/mFuCrDL/J/mWA5MrPasDh2tZVaueH2Fu8I=
Subject key identifier:   47:93:9D:89:EC:62:11:02:96:18:C8:DA:DB:E1:A8:D6:F4:D2:E6:FA
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E1E448F4E455D313D26249500
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33f58a87-81f6-3e5a-8fdd-0097ec196d85.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     15169
IP address blocks:        108.177.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:8f:4e:45:5d:31:3d:26:24:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=af1bb87e-a344-4c1f-a828-744ce93ba311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:be:87:85:5f:9f:7a:9b:44:f1:7b:23:1c:17:
                    10:ac:93:3e:25:0c:2a:40:dd:39:78:a9:9a:70:e3:
                    b1:da:6f:5c:df:0e:78:71:2d:66:77:61:43:71:70:
                    52:10:d8:12:61:43:e8:4b:c1:18:0f:c6:48:52:b3:
                    e6:53:48:08:61:40:36:bc:d1:61:c2:78:0f:f0:64:
                    75:c8:24:4c:1f:3e:90:08:2b:2c:84:ff:b9:ed:12:
                    12:72:e4:f1:e8:54:6a:1c:31:6f:96:a7:13:94:11:
                    f9:71:4f:ab:09:23:37:80:2d:5d:74:32:91:b2:20:
                    f6:60:2c:b6:38:cc:78:9f:3d:28:12:18:2d:b1:f9:
                    b3:36:7f:ac:11:70:c1:11:ad:e7:96:1d:9c:e0:ac:
                    ea:61:ce:52:59:60:b4:73:66:34:68:5b:21:30:39:
                    fb:31:c5:af:f2:90:6f:f5:20:ff:ab:2e:d1:81:e7:
                    66:b6:98:ce:99:1f:1d:6c:8e:b4:d8:99:3e:95:6c:
                    9d:38:c6:63:ae:0b:05:3e:13:a5:56:11:66:70:3d:
                    9a:16:0c:37:a0:4b:24:7b:fd:d4:aa:86:93:42:6f:
                    74:dd:fc:5a:3c:b6:c7:c7:56:76:54:16:59:28:67:
                    de:4d:fe:75:bb:c3:31:7b:d5:3c:4a:c5:be:62:d6:
                    24:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:93:9D:89:EC:62:11:02:96:18:C8:DA:DB:E1:A8:D6:F4:D2:E6:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33f58a87-81f6-3e5a-8fdd-0097ec196d85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:90:42:ed:f6:18:80:0e:a3:2c:af:09:3b:38:b3:eb:33:98:
         5c:af:2c:3f:0c:22:18:3d:28:79:f7:bd:67:2a:39:b2:c6:7c:
         bd:42:c3:e3:04:7e:5f:ab:dc:d7:9d:32:8d:a5:0c:10:79:47:
         25:4e:c1:e1:0c:ac:e9:c2:84:4e:02:70:05:f1:81:f8:e6:52:
         b2:b6:27:7d:5c:03:8c:eb:d2:97:de:30:94:cf:49:67:a0:9d:
         0d:08:5f:c7:05:91:ce:a9:02:18:d0:6e:52:4b:51:f7:f0:61:
         3b:c3:e6:5a:db:2d:ea:4d:f2:bf:15:4c:db:a8:4a:01:0a:55:
         16:10:97:09:bd:94:98:c6:6e:a3:ef:f7:bf:1f:80:22:22:fa:
         dd:9d:1b:6a:88:8a:a8:00:85:34:67:56:ca:dd:84:00:15:60:
         c2:69:65:3e:e6:fa:65:d7:a1:39:af:fd:38:a3:cd:73:b0:b6:
         f6:06:d2:74:e6:18:c0:f6:c5:13:28:64:93:e8:19:54:45:d0:
         59:9a:14:ee:bd:0e:05:12:11:28:5d:40:66:03:e1:32:c8:ab:
         22:73:fb:e2:6a:7f:77:f1:83:19:01:cd:b1:f1:82:5e:89:ba:
         21:55:f4:c3:41:8b:d9:09:a5:e1:ed:a0:e2:b8:06:73:11:d1:
         83:59:1d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:34:43 2026 by rpki-client