Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/0e3b5874-4786-3d0c-afad-673cfb0ec212.roa
File:                     0e3b5874-4786-3d0c-afad-673cfb0ec212.roa (raw, json)
Hash identifier:          blaIxmumUWAM+bT/erXrNCgYMiu4yDqVa5kY25ZiAPQ=
Subject key identifier:   CF:C0:90:E8:CC:78:7C:D2:18:94:48:7D:7D:05:59:91:05:BE:B4:F8
Certificate issuer:       /CN=f73a8827-1cd1-43b6-9070-d36d44304938
Certificate serial:       010D0C9F4328584F74EB1762796138397FB71080
Authority key identifier: 1B:F6:B6:F7:15:67:32:97:8F:CE:8B:24:1C:BC:A6:6F:83:97:8A:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/0e3b5874-4786-3d0c-afad-673cfb0ec212.roa
Signing time:             Sat 10 Oct 2026 14:42:54 +0000
ROA not before:           Sat 10 Oct 2026 14:42:54 +0000
ROA not after:            Fri 08 Jan 2027 15:42:54 +0000
asID:                     218648
IP address blocks:        108.175.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/f73a8827-1cd1-43b6-9070-d36d44304938.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/f73a8827-1cd1-43b6-9070-d36d44304938.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:74:eb:17:62:79:61:38:39:7f:b7:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f73a8827-1cd1-43b6-9070-d36d44304938
        Validity
            Not Before: Oct 10 14:42:54 2026 GMT
            Not After : Jan  8 15:42:54 2027 GMT
        Subject: CN=0ef23ff9-7204-4123-a557-527a1ac9dbd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a2:3f:08:a6:75:35:a4:1b:ac:a7:95:c7:a2:
                    24:51:aa:26:8c:2b:48:83:dc:d9:c8:d1:1f:b4:ec:
                    c0:6d:8c:34:77:b2:85:33:51:2d:57:12:9e:78:1a:
                    7e:f3:25:9b:e1:75:bb:76:8b:e0:1b:26:d9:cf:88:
                    88:12:3d:93:e5:53:2d:9f:e2:ae:43:a6:91:cf:a8:
                    d5:57:06:f4:65:7b:4c:85:9f:dd:c3:3b:de:71:99:
                    63:17:08:a6:bb:00:11:e8:2e:a3:c9:75:5e:dd:f1:
                    21:e6:a4:76:0c:8f:c1:1a:b9:5b:00:b1:04:48:e5:
                    94:fd:ae:11:3f:3a:b8:45:a5:da:64:9d:d7:c4:0e:
                    aa:0c:e6:b0:c2:86:fc:be:d6:48:a0:ef:b5:b8:1f:
                    86:c5:e4:38:84:0f:bc:36:a5:82:66:d7:72:0e:8c:
                    4e:03:ee:f1:e1:9d:5b:7a:5f:27:8f:d4:49:7e:16:
                    5b:b5:2f:4b:29:b7:b1:2a:d0:fd:0d:d5:38:dd:2d:
                    8e:bb:4d:4d:54:fd:fe:51:db:2f:3f:42:1e:8d:b7:
                    ff:b2:8a:5c:fc:14:ee:58:df:37:cc:e8:f1:34:75:
                    cc:33:68:8e:93:44:0e:08:ec:6c:99:a9:e9:bb:8e:
                    c9:52:d6:0c:1a:c1:8a:9a:be:c9:f5:e2:02:76:92:
                    0e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C0:90:E8:CC:78:7C:D2:18:94:48:7D:7D:05:59:91:05:BE:B4:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/0e3b5874-4786-3d0c-afad-673cfb0ec212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/f73a8827-1cd1-43b6-9070-d36d44304938.crl

            X509v3 Authority Key Identifier:
                keyid:1B:F6:B6:F7:15:67:32:97:8F:CE:8B:24:1C:BC:A6:6F:83:97:8A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.175.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:0b:2e:0e:d5:40:ee:d2:ba:01:96:ba:74:c9:72:d2:17:d5:
         af:d6:f2:27:49:36:46:9f:23:89:7d:5e:50:24:82:53:fa:07:
         8c:96:71:a7:1d:cf:5b:1e:cf:51:49:c1:eb:f3:5c:a8:b3:ea:
         d0:06:b9:06:60:49:6c:8c:47:83:6e:e7:70:f8:a3:0e:af:e6:
         80:8e:aa:f5:d3:8a:b4:6a:1e:74:55:72:a3:d5:ee:50:46:6c:
         e0:13:53:c6:db:6b:fb:f3:8e:a4:7b:ef:fb:b3:b3:f5:b9:cd:
         65:fa:6d:df:b9:9b:d2:88:67:9e:08:fc:29:2e:af:e7:98:64:
         df:d3:6f:75:55:19:68:e2:31:ff:70:38:5f:1b:70:63:b5:eb:
         91:95:6b:3a:df:ba:07:b2:ca:37:10:8e:b8:0a:cd:69:00:5d:
         fc:f8:64:44:73:10:22:24:c5:7a:e5:88:3e:1d:e1:b9:0a:ec:
         a3:cc:15:4f:dd:c0:67:0a:04:a4:c4:ac:71:2d:64:68:6a:5a:
         6e:81:07:c4:ce:8c:38:02:7e:a2:25:fa:8a:ab:e4:87:03:aa:
         30:02:65:9e:17:f8:7e:1c:a3:0a:42:21:43:04:c5:43:63:4f:
         2a:89:0a:4a:82:3f:73:29:55:13:03:89:4e:2b:82:5b:88:24:
         78:7c:fe:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:36:45 2026 by rpki-client