Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4f62f1f0-c8f2-3a59-b859-b5e75fba118c.roa
File:                     4f62f1f0-c8f2-3a59-b859-b5e75fba118c.roa (raw, json)
Hash identifier:          bzZSBTWncz9mGyu05T8KsiRDBK/vGZHbNVqZvRsJYG0=
Subject key identifier:   3D:F1:AA:D3:70:EB:EB:E7:5A:6F:DF:96:C3:22:68:E9:67:F0:65:02
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584CE3621EAFA11D22FDE1CA5F08
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4f62f1f0-c8f2-3a59-b859-b5e75fba118c.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     15169
IP address blocks:        108.177.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:1e:af:a1:1d:22:fd:e1:ca:5f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=7b79c15d-078a-49ce-a362-5fdb29d48f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2d:4c:a2:f0:dc:af:be:e8:d6:24:18:e9:dd:
                    a0:d9:df:3e:ec:ae:b8:76:e3:12:15:a9:fb:f7:dc:
                    89:90:10:12:a6:de:bd:90:4f:1b:ac:ec:7a:da:b7:
                    52:0a:d3:3b:44:10:23:2c:98:21:83:4c:01:06:00:
                    8e:fe:ec:bc:94:42:6d:0e:76:75:5b:95:ec:77:d5:
                    c3:c2:3d:6c:ee:56:64:df:4f:ca:69:8d:cb:e8:30:
                    cc:5b:54:c5:58:b4:13:3d:ba:e7:fb:86:cc:9a:e6:
                    e2:3b:80:d2:e6:dc:f3:89:f0:1b:43:86:c0:86:81:
                    bb:d9:f0:98:06:74:ec:6b:60:ed:f2:94:89:73:ee:
                    7f:bd:6d:fa:19:84:74:8b:c6:f3:ad:55:5a:ed:83:
                    f5:82:0b:dd:bb:4f:ba:03:d6:c5:25:80:e7:0e:d2:
                    7b:3f:a4:3b:97:1c:ec:91:6b:3e:44:d7:0a:cf:8a:
                    ea:6d:69:2f:01:a9:14:b6:3a:c5:a6:cc:c7:02:64:
                    fc:d5:59:59:99:ec:12:5e:8d:53:14:5a:97:38:d2:
                    d4:ec:18:97:cc:a0:d5:a3:de:f2:00:e4:8c:6c:e7:
                    3b:f5:01:af:77:63:21:58:f8:0e:7c:47:b6:8c:9e:
                    cd:1b:1b:3f:dc:be:1f:fc:dc:02:90:0f:95:f4:88:
                    8b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F1:AA:D3:70:EB:EB:E7:5A:6F:DF:96:C3:22:68:E9:67:F0:65:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4f62f1f0-c8f2-3a59-b859-b5e75fba118c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:87:5a:d2:d1:0a:98:2c:91:8c:91:88:5b:4c:d5:1c:63:ec:
         69:2b:e9:82:ac:c9:b3:3e:fc:2e:24:e3:c4:6a:09:36:84:38:
         1d:6e:ab:cb:cb:d3:f3:96:2a:fd:a1:89:31:09:31:d2:94:ad:
         0e:23:c0:7b:95:cb:7d:14:68:af:28:21:1f:8b:0e:6d:5b:f2:
         17:20:79:dc:3e:51:f8:e4:a4:da:3f:5f:ba:ff:73:24:d3:e0:
         8c:87:f5:c1:53:69:01:ca:13:39:9b:c8:87:3e:32:22:9f:01:
         33:7d:e4:00:ed:d3:9e:76:e3:85:56:6d:b1:a6:95:33:0a:a2:
         9a:cc:37:ec:af:e3:6f:9e:cf:ff:11:a8:8d:4c:28:fe:c1:3b:
         c3:2f:3b:28:b6:53:2c:93:79:9f:22:5b:88:ef:2f:1d:ce:ce:
         8f:25:fe:96:78:48:cb:d1:dc:8c:46:fd:ce:b1:95:8b:ae:84:
         e3:ad:cb:49:6f:73:5a:c5:5f:37:3a:85:4d:b9:0c:74:33:33:
         8c:14:96:2d:af:ce:5c:7f:e3:1c:79:79:f4:17:ca:9a:1c:f9:
         ef:d0:ba:f0:e9:ea:18:e0:a8:27:61:da:18:4f:f8:d6:da:9d:
         dc:c2:9b:af:36:46:c1:04:a0:c2:a0:fa:00:0d:9c:03:53:b0:
         40:be:f7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:23:51 2026 by rpki-client