Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2b01e8a5-5bc6-3b57-9464-78ee952d54f1.roa
File:                     2b01e8a5-5bc6-3b57-9464-78ee952d54f1.roa (raw, json)
Hash identifier:          8kw+7xxoI5rDmkCzyzdgpYXbxxKk2d9Axz31MzI/W+w=
Subject key identifier:   8D:34:F2:0F:82:47:14:BF:5B:0D:21:92:7C:6C:8D:B0:0E:4F:1F:59
Certificate issuer:       /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
Certificate serial:       010D0C9F4328584F4974DFD1B0ABBC49D79B9F80
Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2b01e8a5-5bc6-3b57-9464-78ee952d54f1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     18606
IP address blocks:        176.108.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:df:d1:b0:ab:bc:49:d7:9b:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=857986b6-1901-4051-8237-9a944a9c8e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:57:aa:8e:a2:63:83:5b:16:d5:98:d7:b8:d1:
                    f2:78:7b:fe:aa:19:e2:a5:3f:c6:f0:af:f9:61:26:
                    1c:9e:9c:d9:27:3b:c0:26:95:31:f5:46:88:52:29:
                    be:46:d8:fb:56:3e:81:b8:45:bc:c9:17:e8:06:47:
                    d7:20:40:44:24:bc:72:37:61:28:d9:3b:8d:82:7b:
                    50:c8:0b:d7:04:79:0c:dc:90:5e:a2:52:15:dc:3e:
                    cf:28:72:e5:1b:f1:77:83:a7:d3:7d:62:ed:5b:8b:
                    89:ad:b7:cc:4a:3c:26:be:c3:c4:b0:23:05:8b:61:
                    86:06:13:67:6e:50:6d:b1:3f:26:b7:ca:97:fe:e7:
                    3d:84:1b:5b:9f:a2:3a:b9:e5:a8:bf:cb:33:d2:c1:
                    e7:79:d3:b0:57:22:23:5d:a4:27:a3:07:3b:2c:0c:
                    9d:99:fc:86:7c:80:09:59:38:ed:a2:d2:c0:7c:bd:
                    43:e8:d0:48:55:2d:94:2c:f3:dc:8f:30:61:8b:16:
                    62:22:9d:c1:69:9d:14:2c:73:dc:98:7c:1d:1f:f2:
                    ae:af:c8:fc:76:0b:cf:2d:75:74:1d:a9:91:10:54:
                    ca:ee:f2:fd:c9:b0:f3:cd:3e:23:22:10:cf:6a:49:
                    d7:55:fa:e1:b2:2a:89:2c:ab:6f:26:d5:7d:68:26:
                    63:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:34:F2:0F:82:47:14:BF:5B:0D:21:92:7C:6C:8D:B0:0E:4F:1F:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2b01e8a5-5bc6-3b57-9464-78ee952d54f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl

            X509v3 Authority Key Identifier:
                keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.108.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:aa:c7:ad:78:d6:a5:a3:4b:6e:1d:03:e9:91:ff:2f:66:5f:
         9d:c0:8e:21:6a:6c:0c:91:16:f4:a1:91:06:36:4e:ef:2f:c7:
         30:3c:ee:90:f1:cb:05:ad:6e:ea:e2:09:33:e2:76:e6:6c:09:
         19:33:f5:f5:bf:30:ef:01:d2:de:7f:4c:ce:6f:59:bc:7d:bf:
         7b:dc:56:3c:90:d2:b9:aa:1c:e0:23:1f:ea:6e:78:dd:a2:1f:
         d0:df:83:d3:55:33:39:e3:56:e5:0e:cb:2a:9f:85:e4:1a:fe:
         49:57:64:37:90:99:ce:3c:f5:b7:43:fc:3c:99:50:b8:c5:b9:
         dc:fc:80:3f:75:29:30:51:5e:15:af:9d:3f:4b:54:a6:8b:c0:
         fb:df:74:54:c0:ec:dd:13:21:4d:12:59:d9:31:1c:fd:73:88:
         3b:56:8f:93:82:af:29:96:ad:6c:3c:36:43:78:fb:f1:72:83:
         df:ab:29:93:a5:7e:08:c4:4a:9f:03:77:f7:19:41:1b:d4:41:
         66:58:9d:89:21:56:7d:70:15:c2:69:ba:ee:85:aa:91:96:36:
         b7:59:a2:1a:bf:38:0a:34:b8:95:5c:bc:c4:0b:5d:af:4a:86:
         e3:5d:60:66:db:d6:9c:22:3b:23:0e:77:d8:29:06:a8:d3:81:
         48:b6:ea:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:39:48 2026 by rpki-client