Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa
File:                     48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa (raw, json)
Hash identifier:          JCIbnV+Rlqvt38KZYG3EYDJbz3USZo5+6vaG2mz5sNA=
Subject key identifier:   80:B6:E5:83:24:E3:F2:74:AE:E8:77:92:DA:96:A0:8F:2B:B4:84:CF
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E0005FA8E1E306061D1A32100
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        108.170.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:fa:8e:1e:30:60:61:d1:a3:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=6622794a-df44-442b-bee5-d8be4364e6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:08:cb:55:ee:a7:8f:38:32:90:3c:87:99:82:
                    a7:56:c5:1b:f7:59:b6:12:45:32:24:dd:e9:ac:33:
                    2e:83:da:78:4a:09:f0:75:e1:d1:16:0a:44:b2:57:
                    9c:91:50:45:22:7d:73:86:04:cf:30:62:80:40:6f:
                    d3:fb:e3:61:e5:c3:b1:c7:d7:c6:7d:33:3a:bb:40:
                    e2:d8:3b:c9:79:e1:2f:0d:a5:03:35:07:80:34:66:
                    fd:97:91:38:c6:2e:dd:c4:76:70:f9:db:87:2b:83:
                    04:7f:fa:51:67:73:46:6a:96:f4:ee:e4:37:54:51:
                    24:dd:ad:12:6d:9e:cb:84:b5:6f:ae:ac:19:83:c7:
                    13:8e:c9:7f:3f:36:74:5c:61:56:8f:76:31:e5:56:
                    61:e2:bd:e6:97:55:eb:95:eb:b1:59:87:42:0d:0c:
                    26:4c:00:98:94:2d:34:0f:a0:be:f0:06:94:42:2d:
                    51:97:47:0d:b8:9e:ea:1c:6a:7b:de:68:00:de:92:
                    5e:e3:42:48:28:a2:5f:28:63:a6:15:c4:6a:3a:69:
                    3a:e1:ab:65:9a:c5:fc:d6:01:81:1a:71:12:fc:4a:
                    91:11:0c:e7:be:d5:23:1e:14:5c:c7:62:7f:b8:d8:
                    59:d2:43:b3:4d:37:44:2e:7c:92:a3:57:fe:91:ff:
                    27:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B6:E5:83:24:E3:F2:74:AE:E8:77:92:DA:96:A0:8F:2B:B4:84:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.170.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:9e:f9:d9:d6:79:39:78:4d:d4:2e:95:df:39:7b:00:91:2a:
         85:66:42:14:56:13:ee:ea:9f:1a:83:39:8e:6b:f8:38:64:8e:
         68:23:fd:15:93:4f:e0:6d:82:b6:08:da:de:8f:9b:8c:e9:e0:
         55:b6:17:cf:b3:e9:0a:a8:3f:01:f5:18:33:1b:a5:d3:67:a0:
         e2:bb:b2:cc:bd:a3:e6:ce:a7:5e:f9:f4:51:57:e0:29:c5:19:
         55:e6:88:c8:91:13:f2:bf:53:93:ac:b6:d4:a8:42:65:95:a7:
         76:30:06:15:ab:30:d1:c7:43:e0:1b:b0:15:08:fe:7d:50:83:
         95:82:24:6f:ff:9b:ac:0e:0e:63:71:93:b4:c6:e6:2e:82:60:
         00:db:47:6b:6c:2f:15:fb:05:40:15:a6:fa:1b:96:ef:61:89:
         53:66:70:01:e4:0e:91:51:06:08:85:39:30:66:2f:f2:fb:87:
         0d:b5:22:97:6b:32:f2:f9:f9:1c:f4:d5:34:19:23:7a:e0:8a:
         8d:a6:7e:e0:0a:35:15:51:9a:f3:56:19:a8:d8:4d:42:8b:7a:
         34:9e:7b:d5:12:22:39:f0:38:02:7a:fc:1f:bd:e8:39:05:93:
         76:93:08:3c:e6:26:05:ba:d0:8a:97:74:1c:3a:3f:50:22:ad:
         76:5e:02:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:12:46 2026 by rpki-client