Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce12a65-14da-3b72-95a5-da0ac1c3162a.roa
File:                     4ce12a65-14da-3b72-95a5-da0ac1c3162a.roa (raw, json)
Hash identifier:          25+kCNPN+Ynu+vcIe0TzvJO3iU/VnVyR01vdT78U3IY=
Subject key identifier:   D1:5D:63:2C:86:A6:9F:62:00:79:17:3D:98:93:71:C2:34:5F:63:F3
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E0005F926B51789C5686DCD80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce12a65-14da-3b72-95a5-da0ac1c3162a.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        108.177.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:f9:26:b5:17:89:c5:68:6d:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=3f6dd9b9-8b3e-4c68-bc03-603f4c705506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:63:c4:f3:39:81:87:96:d4:16:18:66:7b:55:
                    8e:dd:20:e6:b3:4f:e6:6e:6f:2f:7c:8e:49:b5:aa:
                    e3:80:c7:ed:8e:45:56:3b:78:de:db:44:2f:25:27:
                    16:ca:07:38:32:03:bc:ed:5b:a0:71:df:a1:85:ca:
                    9c:cd:42:87:8f:55:07:6f:c2:d3:2f:47:68:08:18:
                    ed:fe:60:d2:54:85:d7:d1:d4:d3:5f:e5:ce:28:c7:
                    a8:ab:65:a6:59:ad:ad:26:74:da:e2:2c:a2:bd:de:
                    cc:c0:e9:2a:2a:8b:3f:32:5c:f1:81:48:d9:ed:97:
                    37:03:0b:16:b7:eb:8d:b6:24:b6:f0:66:de:ce:ae:
                    e8:70:d8:bd:5d:f6:6b:ac:d3:31:ce:43:0e:dd:4a:
                    d5:a5:6a:99:6e:5d:f8:25:07:73:d6:b3:18:51:4f:
                    33:49:04:85:fd:7c:e0:1a:93:b5:10:fb:94:83:9c:
                    c5:a1:3e:f0:fd:bc:b2:18:9d:7b:05:f8:93:ca:04:
                    66:3e:50:34:95:a5:47:16:ee:4c:35:08:e1:99:23:
                    f9:b5:b3:bb:72:c6:95:00:fa:61:b6:a6:c2:4f:a7:
                    bb:0c:d9:ab:81:58:5d:c1:b8:cf:eb:74:e0:06:ae:
                    5e:0d:36:5c:ab:7f:3e:76:40:82:15:89:fb:33:64:
                    60:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5D:63:2C:86:A6:9F:62:00:79:17:3D:98:93:71:C2:34:5F:63:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce12a65-14da-3b72-95a5-da0ac1c3162a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:88:74:b5:2d:7a:77:c1:82:67:86:7f:06:2f:79:78:01:63:
         b0:49:d6:c5:70:80:9c:d1:11:5a:77:d8:76:7d:ae:aa:c2:1f:
         b7:3e:8a:55:db:b7:77:11:4c:fe:96:34:51:82:ad:ac:9a:89:
         6f:8b:a5:f6:58:1f:a0:91:44:6b:cc:fe:7d:15:53:81:93:7e:
         1f:20:8f:59:1a:c1:57:5c:c4:e9:70:79:35:75:cc:f1:0d:05:
         8d:34:d6:f7:b7:20:89:cf:cc:c9:fd:6e:c5:28:54:66:ca:7e:
         c5:b8:de:08:c6:8d:5d:12:4d:34:42:99:96:73:e0:59:f5:bc:
         1e:b3:5e:71:ef:a7:d3:3a:04:e5:e1:34:8b:21:3c:e3:cc:5a:
         31:fc:3a:c1:27:6e:6f:a9:51:68:63:39:44:b3:3c:7c:28:30:
         4e:04:51:57:cb:b9:b5:2e:d6:aa:29:a6:99:2b:97:ae:b4:ef:
         05:ad:31:aa:9b:b6:f7:dc:ee:05:84:e7:c6:62:60:33:56:8a:
         c5:a9:5f:6c:cf:c7:a4:94:44:67:7b:20:82:5c:d2:7c:21:4f:
         48:33:29:44:4e:59:3d:ea:03:94:8b:94:dd:73:ea:5f:07:87:
         2f:bf:df:78:17:20:a0:91:b4:dd:a1:40:9e:66:a4:c0:bd:e6:
         06:37:cc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:33:40 2026 by rpki-client