Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/0e2f73df-fe4a-3c07-a45e-f81c1c1663d3.roa
File:                     0e2f73df-fe4a-3c07-a45e-f81c1c1663d3.roa (raw, json)
Hash identifier:          /11pEzjGhB9Q7iQ6HZd8P3+iZ2Igkpd//rrTlk7gp9E=
Subject key identifier:   1F:41:AB:4C:F6:50:16:19:35:FE:A3:AA:F7:4F:DD:8D:BC:4E:76:15
Certificate issuer:       /CN=f73a8827-1cd1-43b6-9070-d36d44304938
Certificate serial:       010D0C9F4328584F5EC25C828A6E9E58903C1240
Authority key identifier: 1B:F6:B6:F7:15:67:32:97:8F:CE:8B:24:1C:BC:A6:6F:83:97:8A:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/0e2f73df-fe4a-3c07-a45e-f81c1c1663d3.roa
Signing time:             Fri 02 Oct 2026 16:13:03 +0000
ROA not before:           Fri 02 Oct 2026 16:13:03 +0000
ROA not after:            Thu 31 Dec 2026 17:13:03 +0000
asID:                     174
IP address blocks:        108.175.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/f73a8827-1cd1-43b6-9070-d36d44304938.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/f73a8827-1cd1-43b6-9070-d36d44304938.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:c2:5c:82:8a:6e:9e:58:90:3c:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f73a8827-1cd1-43b6-9070-d36d44304938
        Validity
            Not Before: Oct  2 16:13:03 2026 GMT
            Not After : Dec 31 17:13:03 2026 GMT
        Subject: CN=f6385fb3-ca61-435a-8e67-6340c427ad89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7d:0d:7c:d0:d2:6a:69:ab:6d:63:c9:a3:2a:
                    03:df:84:57:16:53:41:75:7e:00:42:9b:33:c9:44:
                    78:63:a4:f7:51:35:24:b7:ca:71:de:96:a1:41:5f:
                    15:98:89:60:35:47:8b:aa:0c:90:0f:5b:16:fc:1a:
                    57:d7:ac:cb:ed:33:be:5d:0b:35:3d:1a:dc:be:65:
                    b5:55:e8:35:57:1e:66:82:ca:a3:d3:c2:24:29:fb:
                    d1:fa:95:b8:ba:72:42:bb:7c:5f:7c:e9:43:49:21:
                    9d:5e:90:e0:ea:23:a6:dd:5e:00:4d:53:b6:17:6d:
                    4c:33:5c:c1:46:f7:bd:64:74:99:c9:46:64:19:ec:
                    43:c3:e8:75:a9:83:bd:03:5c:2c:c9:a8:17:bf:0e:
                    38:17:38:bc:1a:56:ae:75:0b:ff:2d:6a:43:64:04:
                    aa:aa:5e:a3:b2:fc:fa:10:3e:b5:77:36:a9:a0:a9:
                    51:e8:45:de:56:26:bf:0f:d8:ee:a9:77:02:45:db:
                    46:76:d3:65:7a:6c:52:86:2b:d0:06:c2:4f:ef:fe:
                    bc:d5:06:7c:32:56:96:2d:9e:0d:66:2a:0b:8e:99:
                    04:30:14:12:6f:8c:d5:41:65:4d:64:8f:8b:37:fb:
                    e0:0c:19:20:91:2c:4c:59:75:09:6e:9b:e1:9d:ac:
                    ec:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:41:AB:4C:F6:50:16:19:35:FE:A3:AA:F7:4F:DD:8D:BC:4E:76:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/0e2f73df-fe4a-3c07-a45e-f81c1c1663d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/f73a8827-1cd1-43b6-9070-d36d44304938.crl

            X509v3 Authority Key Identifier:
                keyid:1B:F6:B6:F7:15:67:32:97:8F:CE:8B:24:1C:BC:A6:6F:83:97:8A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.175.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f6:65:03:e6:65:bf:5f:ca:57:9e:44:34:c7:49:1b:dc:7c:
         7b:c3:42:c9:0c:0a:4a:41:eb:03:f6:ac:cb:d0:c0:bc:0e:8c:
         d1:b1:85:20:92:4d:54:3a:ac:14:c1:66:86:01:cb:b9:8c:5c:
         ba:fe:86:1a:b7:13:fe:0e:29:f3:b1:ac:63:99:78:99:d7:0d:
         02:5c:ef:b4:5d:de:4a:29:10:36:77:ab:e3:1c:13:7f:9c:51:
         e8:91:59:e8:d7:dc:74:9c:6e:6f:2d:ce:0c:c0:62:40:cc:80:
         f5:9e:f0:f5:a4:57:62:a6:05:bd:26:9d:4d:d0:de:f5:bb:af:
         8e:96:d5:06:69:8e:c1:62:23:43:de:09:39:c7:03:89:46:9d:
         d8:2e:0f:1a:02:58:91:5e:15:90:37:34:fa:80:68:b3:a6:26:
         a0:15:8f:c4:5f:91:11:74:7e:fc:1d:98:c7:16:c7:57:22:d2:
         66:f2:45:d0:5d:3a:18:50:65:b7:be:df:6d:92:01:e9:3b:73:
         31:0d:a3:0a:bf:74:31:f1:0e:99:fd:50:ec:42:14:78:b3:d9:
         4a:cf:bb:e8:7d:4b:be:b1:0b:f2:49:57:d1:16:88:e1:7d:b0:
         5c:3d:94:53:2b:0f:b5:ac:ca:d8:a8:30:87:7a:8f:5e:d1:48:
         94:da:33:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:22:31 2026 by rpki-client