Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92eb0590-3e0e-3d16-bd14-02f1e2f5b3c0.roa
File:                     92eb0590-3e0e-3d16-bd14-02f1e2f5b3c0.roa (raw, json)
Hash identifier:          izSdpFHEQxwX7JzvN1R760ULi82tPMPCpbHGxed0dBc=
Subject key identifier:   DB:52:4F:9B:13:F8:30:3A:00:8E:FF:BE:AF:42:58:A0:95:5A:D3:9A
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D1F4A7C98C7D6E5642CD7BC80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92eb0590-3e0e-3d16-bd14-02f1e2f5b3c0.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     15169
IP address blocks:        108.177.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:7c:98:c7:d6:e5:64:2c:d7:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=9ff16768-ef04-43ef-b4e9-d0b0eecb5e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f1:3b:57:fe:06:c5:da:f6:0e:18:03:94:2d:
                    7e:73:9f:17:97:22:bb:8c:e9:e5:5c:d2:7a:c2:f0:
                    09:ef:39:8d:4b:24:d2:a6:a9:67:a4:3a:23:b7:0b:
                    0f:50:02:32:a3:32:0a:c5:62:38:6d:49:67:75:32:
                    44:8b:46:78:fb:07:70:d7:cd:a6:db:15:9f:7c:e3:
                    47:54:1a:5c:18:f8:83:30:80:fa:b9:7b:29:01:eb:
                    05:05:00:0a:1a:05:06:a8:18:83:9e:b9:23:9c:ab:
                    0b:fa:6f:e2:66:14:5a:17:34:c5:a4:82:aa:66:51:
                    85:9e:6a:ca:28:f6:54:59:a0:54:17:39:fb:d8:86:
                    83:86:9c:58:de:74:14:bf:ed:89:a6:3d:66:36:56:
                    69:71:66:d0:98:66:a6:f4:f2:a4:24:1e:30:90:76:
                    15:c0:a1:0e:95:19:a9:c7:ee:b1:87:34:16:69:d3:
                    04:94:61:58:92:59:3f:f2:45:5f:f0:dd:67:fc:6e:
                    33:6f:e0:22:df:1a:ff:67:ef:80:27:3d:ea:ee:07:
                    cf:03:af:37:48:4c:ea:98:b4:77:45:3d:af:19:44:
                    f6:1c:71:f5:19:42:83:9c:86:2d:b6:fe:ef:a5:3e:
                    3e:7d:76:b5:9b:96:70:fa:a9:f5:3b:b7:12:e0:f3:
                    5e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:52:4F:9B:13:F8:30:3A:00:8E:FF:BE:AF:42:58:A0:95:5A:D3:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92eb0590-3e0e-3d16-bd14-02f1e2f5b3c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:77:7d:b4:d3:ef:c7:a7:c9:b7:51:38:db:20:62:39:6c:a2:
         7f:5a:e3:ad:38:ff:c2:75:7f:0e:a4:e4:17:5c:00:3a:63:b4:
         e1:66:29:44:60:54:bc:56:c6:a8:0b:a2:3c:94:63:f2:10:4a:
         99:74:c2:a3:0a:f6:8d:20:13:34:45:18:5f:7a:55:9f:7c:ad:
         28:35:54:ad:e5:ce:bd:cc:54:97:b8:9f:a4:3e:04:7d:ac:52:
         47:ff:b7:01:73:b5:be:68:5a:cd:48:21:f9:8a:df:5c:91:be:
         1f:e2:66:20:63:42:a2:46:c5:78:67:9a:5a:d4:a0:b1:e2:ff:
         03:00:9f:2f:4e:fd:6e:71:fc:3d:0a:dd:40:3a:fc:73:26:78:
         12:68:47:69:6b:c8:d1:3e:58:07:6f:39:c7:c8:6a:20:c5:0e:
         8f:43:13:5b:d4:fa:ac:00:0f:bb:cc:08:97:d6:97:07:24:e7:
         f4:03:d8:30:29:14:13:34:e9:53:b1:d7:e7:15:19:5b:e7:ad:
         d9:b0:9f:71:dc:cc:03:62:0a:8f:60:fd:d5:a3:c1:ca:28:97:
         54:89:00:dd:4c:5a:fd:dc:91:d4:ca:10:f2:86:52:a1:0a:7b:
         ba:a0:97:40:f4:1a:98:a1:5c:3f:2f:2e:81:31:7b:44:8c:96:
         8e:ed:16:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:30:27 2026 by rpki-client