Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af9062fc-c2de-328a-89b2-ae470ad5b211.roa
File:                     af9062fc-c2de-328a-89b2-ae470ad5b211.roa (raw, json)
Hash identifier:          LIaUYmsd7QLCWLqkIrz81dgVLipNkv5doL3+Bj6s8ys=
Subject key identifier:   3F:C8:A4:FF:90:E2:A9:AE:E4:27:CF:F6:4E:A7:86:32:FF:47:4D:6C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E0005F11B42765D278556A3A0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af9062fc-c2de-328a-89b2-ae470ad5b211.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        108.177.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:f1:1b:42:76:5d:27:85:56:a3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=21e88a42-bad3-4a3b-b02c-7de803988852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:64:61:01:b9:f7:20:1b:fe:d6:a2:31:b0:
                    97:22:d4:7f:33:a7:aa:8f:3d:d5:9a:36:f7:cf:b7:
                    0f:8d:41:f4:ab:83:ab:97:65:87:13:0a:07:4d:64:
                    c5:c0:21:c0:8a:57:22:ee:f0:e4:57:bb:83:ae:a9:
                    7d:2a:88:77:8a:cf:a5:00:2a:0a:94:3c:77:f5:de:
                    15:03:03:6b:98:99:af:13:5f:15:25:82:7b:71:22:
                    71:40:6a:73:43:41:a7:a7:ba:8e:00:5e:0e:93:21:
                    42:9e:11:b6:bb:26:34:e7:7b:4b:d4:f4:30:f5:3a:
                    81:fe:ff:d6:f4:c9:2f:20:46:a0:c6:8b:7a:ad:4d:
                    f9:2e:fa:7a:e2:f5:83:55:ee:75:4a:8c:7d:09:57:
                    d3:0e:da:10:39:7c:a7:28:19:11:e2:40:3c:a7:67:
                    35:41:77:7a:f9:db:21:42:0c:5c:8e:6b:2c:94:d0:
                    c6:d3:ad:18:39:42:71:1d:b4:e1:81:c5:c2:b1:dd:
                    f0:a8:a9:40:b6:b2:c1:30:58:02:70:3e:21:44:dc:
                    3e:d5:42:ee:fa:ff:7c:59:e8:58:50:7e:ec:38:e3:
                    c9:33:b1:6a:fd:c5:70:40:2c:51:8e:d6:6f:49:b9:
                    86:60:a2:6a:ff:f3:11:b7:11:58:99:76:70:f0:88:
                    c1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C8:A4:FF:90:E2:A9:AE:E4:27:CF:F6:4E:A7:86:32:FF:47:4D:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af9062fc-c2de-328a-89b2-ae470ad5b211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:51:32:19:05:24:ed:be:26:ba:95:8c:87:22:cd:ed:0c:24:
         c1:13:1f:dd:46:aa:72:87:d5:f3:fe:63:00:80:eb:de:7d:6e:
         69:70:19:35:30:8a:37:15:bf:57:80:c1:2b:33:e6:89:cd:2e:
         c1:3e:2f:aa:50:e8:d5:55:9b:a7:de:aa:9e:7c:a1:d3:28:15:
         4b:05:ed:d3:7a:1e:26:4a:2e:48:e9:43:52:f0:89:da:a7:ef:
         26:53:e1:f3:f8:cc:74:9f:6f:38:85:a2:7a:65:2a:b3:a1:36:
         2b:18:88:6c:8a:45:1c:1c:84:73:d1:23:8c:48:f4:a4:9c:18:
         f1:fc:6d:79:18:c6:22:fd:1c:cd:6b:59:18:c4:a2:8d:95:cc:
         a6:2c:55:51:be:cc:ae:a3:69:eb:ad:91:1a:e5:90:e6:76:e3:
         bd:11:99:ad:a1:eb:c0:a5:74:86:59:9f:1b:14:34:c6:36:f5:
         14:fb:57:fe:a6:33:8a:3e:51:a7:f8:7b:aa:73:68:82:5a:1f:
         5a:81:cc:00:2d:13:92:ea:f8:64:9d:26:0c:e0:87:f3:21:32:
         9f:3c:8c:e2:7a:cf:d2:96:c9:b9:31:c3:fc:16:40:55:3b:bb:
         07:e7:17:0d:25:92:ed:24:28:44:fc:c5:ee:4d:d7:a0:30:39:
         1b:d5:2b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:19:55 2026 by rpki-client