Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec6f085-b2e5-3605-baa2-4f1c4fc3dea4.roa
File:                     4ec6f085-b2e5-3605-baa2-4f1c4fc3dea4.roa (raw, json)
Hash identifier:          kg5+7x2AayJOXTgdw4jKiKEWOY30nY+9rkIteLiTlqE=
Subject key identifier:   73:08:52:3D:AD:E2:19:7B:7C:3B:15:4C:F8:88:76:3E:CF:0D:A9:0B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA79A7556298F89DC4A9B6380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec6f085-b2e5-3605-baa2-4f1c4fc3dea4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        108.177.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:75:56:29:8f:89:dc:4a:9b:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d339004c-75a5-431a-a06a-4240c2d15a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:fc:d3:0c:19:e3:8c:f5:90:7a:46:f9:e0:
                    16:e4:75:66:18:73:e8:07:41:f9:93:fd:34:ed:88:
                    54:55:ef:4c:9e:f2:6d:78:5a:05:54:b1:51:0f:0a:
                    76:f0:52:3f:03:38:29:c2:aa:ad:eb:b4:ea:50:5e:
                    cb:f3:ff:de:0f:15:10:ac:0b:03:2e:d8:2d:4b:1a:
                    8b:ba:e5:1f:c5:a7:86:1c:c0:04:bc:6e:5d:a4:3c:
                    c3:b1:ed:27:94:23:c6:62:b3:e2:74:54:1a:2a:72:
                    1a:09:e6:49:c7:4b:86:a7:f1:e4:9b:79:d8:93:c9:
                    18:bb:02:94:69:87:51:0e:da:23:5c:ea:9e:bb:be:
                    d4:a6:d6:a2:3d:86:5c:53:b5:f2:08:d4:a2:2d:d9:
                    21:60:a7:10:96:de:f8:3f:1a:36:be:90:d1:75:39:
                    40:0c:63:21:c9:05:54:b2:22:0d:93:84:24:c5:9b:
                    2e:bc:a6:3e:a1:1d:27:bd:c8:7e:45:7d:5f:96:a4:
                    bc:30:42:9b:30:af:a4:63:7f:12:2a:c0:ce:ab:7d:
                    c2:0a:8e:14:1a:ce:af:ac:d3:37:a7:0c:61:8c:2f:
                    11:47:fd:b5:3e:5d:ac:65:77:29:af:89:f5:d7:b1:
                    8e:1b:cc:67:da:d5:30:80:4b:bd:63:40:9f:f6:70:
                    14:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:08:52:3D:AD:E2:19:7B:7C:3B:15:4C:F8:88:76:3E:CF:0D:A9:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec6f085-b2e5-3605-baa2-4f1c4fc3dea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:6f:ea:a2:ba:de:8e:96:ad:0c:9e:51:70:fe:6e:a6:8d:1c:
         98:61:1e:34:ba:c5:33:48:51:7f:34:75:1f:4a:64:54:10:08:
         89:3a:bd:37:e2:ba:3d:ca:ac:c9:fa:d1:18:6b:ea:9f:b5:7c:
         56:bc:d8:46:10:fb:2d:d6:1e:42:fc:41:ef:16:4b:27:40:6f:
         80:50:9c:e9:5d:0d:a2:67:4a:04:23:28:a4:eb:72:52:59:75:
         72:0e:ad:c6:40:c5:bc:0b:59:f4:a9:33:2b:1f:83:dd:17:cd:
         79:79:88:eb:57:b2:0f:80:4d:99:1e:04:1f:ac:e9:5b:cf:c6:
         d3:54:8e:55:05:a1:fa:8c:a1:71:94:ce:c0:2f:b1:04:37:a6:
         c1:76:ee:74:e9:a0:a5:35:6b:04:58:d8:10:b4:86:e8:dd:3d:
         d2:2b:e4:6a:05:01:d8:ca:73:31:2e:8e:ed:3b:b7:60:ad:65:
         6a:bf:c2:f3:c9:9c:b5:55:ca:6a:f2:2a:95:b3:b4:7a:8b:22:
         bf:b0:f2:4a:af:12:4a:d5:5c:92:92:82:6d:36:96:15:c2:b7:
         7e:41:3d:96:ce:3f:74:03:bd:70:6c:41:77:93:da:c1:74:cb:
         08:46:22:69:60:59:e5:7c:c4:b2:18:62:70:35:09:d3:6b:b7:
         44:c4:7d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:10:53 2026 by rpki-client