Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b5cfa33-fc05-34aa-b1b9-bfe8a7d0e17e.roa
File:                     9b5cfa33-fc05-34aa-b1b9-bfe8a7d0e17e.roa (raw, json)
Hash identifier:          e0o053Z48wlb/DWA1kPUwh4ElkEpVUUmXoVmMPE5dwI=
Subject key identifier:   8A:A0:B0:C9:38:A4:5F:23:62:95:9C:6F:1D:2E:21:41:A6:93:39:30
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E00061B1DFED839189EDC1290
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b5cfa33-fc05-34aa-b1b9-bfe8a7d0e17e.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        108.177.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:1b:1d:fe:d8:39:18:9e:dc:12:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=e49fb0f7-19ac-4fae-8e85-10f983202d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fe:bc:ea:dd:fb:95:c5:ee:2a:1c:c0:61:75:
                    8f:e2:42:a6:43:28:9d:95:d3:11:65:74:40:6c:60:
                    33:8d:0b:f6:68:69:95:5e:09:40:66:cd:64:b8:fe:
                    23:07:b8:4c:35:6e:a2:6b:66:e8:01:13:8b:6d:d6:
                    50:28:a6:a6:ce:9a:93:1c:1f:54:e5:eb:34:4f:b8:
                    cb:12:2a:43:05:98:e5:a3:2c:bb:2d:19:7d:71:e3:
                    b8:c3:8b:7e:86:cc:90:bb:a8:2c:22:cf:87:94:40:
                    1d:87:a2:52:ca:8a:97:de:21:b4:63:b7:56:01:50:
                    8d:48:e4:fc:20:15:ef:30:a8:80:f4:d9:ee:84:07:
                    72:e0:db:c5:21:8c:38:13:05:b2:80:ad:1a:02:55:
                    54:8b:19:96:6b:d8:60:2c:87:a1:c1:ca:88:6a:4d:
                    49:d4:43:29:73:ae:ff:d6:a7:42:15:6f:47:bd:d2:
                    25:44:d3:b1:64:e8:be:e6:68:1d:31:5f:21:97:11:
                    6a:45:f9:58:36:77:25:05:87:65:e1:45:ee:70:57:
                    5e:92:69:98:c0:1d:7c:fe:bc:fe:0a:d8:7e:fa:28:
                    e9:a3:28:ee:0d:f0:f3:4b:3c:6a:27:92:67:91:b1:
                    b3:17:f2:25:34:3c:2c:c3:37:00:9f:88:d5:63:88:
                    b0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A0:B0:C9:38:A4:5F:23:62:95:9C:6F:1D:2E:21:41:A6:93:39:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b5cfa33-fc05-34aa-b1b9-bfe8a7d0e17e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:aa:d6:92:73:b4:27:56:1e:bd:d8:57:ff:41:24:f9:fa:2f:
         1a:b2:0a:1f:c1:17:86:22:6a:10:27:2b:52:3e:e5:bb:fc:6e:
         a7:56:d8:38:d3:14:d0:34:45:3b:e8:64:0d:7a:32:85:fd:19:
         12:5d:78:de:f7:29:22:dd:04:0c:ed:77:21:c0:59:46:68:4b:
         b1:94:3f:36:6f:97:39:46:f2:11:98:95:df:b0:40:c2:f9:6d:
         ef:0b:89:52:76:e0:09:fb:dd:1d:e1:72:28:84:d8:b0:1c:fe:
         e4:9e:9e:2f:69:05:e8:6a:51:1d:7d:30:06:53:10:c1:53:18:
         e7:f7:49:24:66:b1:cd:c2:eb:1f:5c:f2:8e:85:64:67:62:89:
         87:a6:a4:41:64:e5:0e:21:84:1d:9e:d1:28:20:cd:16:ea:1f:
         bd:82:fb:72:2a:63:2f:44:f9:c4:78:30:91:26:87:11:65:a8:
         a9:f4:17:3e:39:e4:11:44:6b:52:5c:9a:93:7b:56:30:fc:84:
         e0:b5:e1:07:cb:fc:ef:3a:b2:cb:31:47:7d:8c:ac:ab:ce:3e:
         95:78:9a:33:3d:a2:1e:9c:a9:49:7d:d4:6e:30:00:a8:07:86:
         2b:99:4d:e6:78:66:ee:c7:c7:36:44:8d:25:16:2c:5e:27:27:
         8d:e3:94:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:20:47 2026 by rpki-client