Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56fdfdb4-7db7-3d15-97cd-e58717e56a17.roa
File:                     56fdfdb4-7db7-3d15-97cd-e58717e56a17.roa (raw, json)
Hash identifier:          IbexHELrpkCzq23ts2ZR/dKsSO3n+3H/MpAvI8sbRy8=
Subject key identifier:   A6:96:F4:7E:FD:7F:F6:BB:D4:D3:9B:1F:96:B7:AC:FA:C7:45:B5:4D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EDB2C84317D27426493B03BA0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56fdfdb4-7db7-3d15-97cd-e58717e56a17.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     15169
IP address blocks:        108.177.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:84:31:7d:27:42:64:93:b0:3b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=6b5a8e51-c6d3-4a1c-be1e-516453ab8c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:65:41:c7:ee:f3:3d:c8:1e:23:3c:00:d1:
                    9e:74:ad:e8:7e:10:d5:20:08:dd:7a:63:15:7b:89:
                    87:b1:82:f0:34:0c:df:71:2e:b4:c2:06:0d:0d:8f:
                    81:42:36:23:15:b0:96:05:f3:e9:84:50:cf:32:7c:
                    e2:32:6e:12:75:16:85:70:e2:b5:78:7f:f9:a1:da:
                    2e:8f:41:5c:23:d5:76:47:8a:0a:ee:fc:82:30:46:
                    bd:d7:f0:41:4b:9d:37:85:6a:70:97:c7:2a:d1:6b:
                    22:a8:da:0a:54:16:b5:93:14:ca:ef:c0:5d:2b:f7:
                    d2:b3:12:54:71:36:18:c1:e6:cd:60:89:35:86:ac:
                    25:52:c9:90:54:e3:2c:66:6d:c5:4a:82:07:eb:80:
                    82:5b:4a:0c:18:97:de:a4:a0:76:22:f5:a1:cd:34:
                    f6:15:8a:fc:ed:36:ac:70:9d:f4:81:cb:c5:08:7b:
                    f0:b5:54:d5:5b:bf:f5:dc:42:f9:a8:b7:8d:ed:d3:
                    d5:1d:2f:d2:cc:52:92:7b:fe:ac:1e:f2:07:ab:d1:
                    96:37:16:c8:92:87:ea:0d:a2:07:26:77:4b:ff:04:
                    6d:33:dc:5c:67:dd:9b:72:ea:b6:9c:fa:89:81:df:
                    61:36:e7:37:7a:4d:e4:66:c3:27:d3:7e:bd:08:75:
                    a6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:96:F4:7E:FD:7F:F6:BB:D4:D3:9B:1F:96:B7:AC:FA:C7:45:B5:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56fdfdb4-7db7-3d15-97cd-e58717e56a17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:bd:df:e0:a6:21:54:d3:64:1f:dc:fc:47:f9:6e:b3:eb:5c:
         01:38:b2:9e:d0:73:b8:3d:3f:7b:b7:8f:34:87:7a:68:ce:d2:
         7a:85:ee:5a:a8:50:d4:28:01:73:8f:c0:8f:df:7b:19:00:f9:
         3b:35:ec:9a:0d:05:6d:e1:aa:98:4d:db:9e:10:f7:93:9e:fc:
         35:ef:37:ba:a0:4f:35:38:9c:35:82:3e:a7:c4:5a:89:e8:7c:
         d2:27:3a:62:b8:4d:65:76:a5:e8:b2:2a:3b:f9:6b:20:32:5e:
         69:3c:59:e5:66:a6:92:74:19:76:da:02:65:ab:ae:6d:1f:8e:
         60:c1:86:88:1a:a0:e5:7c:b4:e9:8f:97:da:6c:e2:fa:e7:b0:
         14:ed:5b:fb:e5:7a:64:ce:99:2a:4c:24:16:88:53:89:d5:80:
         6b:57:6f:a4:3e:33:e9:70:83:da:53:33:fc:56:fa:4b:61:f4:
         35:99:fc:86:7f:b3:2e:41:0f:2f:9f:f4:03:36:db:15:e8:8d:
         17:79:07:0a:0a:9a:c6:51:16:fe:73:f2:ea:74:1b:41:de:fc:
         99:5f:5e:8a:5e:d2:c4:80:48:03:f5:e3:a1:87:2b:ce:c6:da:
         42:fe:28:f6:ed:b3:b9:af:ad:9c:27:ec:75:6c:c1:2b:96:b6:
         d2:8d:0a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:25:53 2026 by rpki-client