Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/78e9e955-1fd0-3718-b0df-b7cc01b9cc77.roa
File:                     78e9e955-1fd0-3718-b0df-b7cc01b9cc77.roa (raw, json)
Hash identifier:          38bWW+0vQl7ra7nXcMbVDfzLdScSjQv4dsRIcgdQCqA=
Subject key identifier:   EE:E9:89:F8:29:FC:51:C6:E0:F4:BA:E5:20:09:C5:22:4D:C9:63:07
Certificate issuer:       /CN=f73a8827-1cd1-43b6-9070-d36d44304938
Certificate serial:       010D0C9F4328584F5B095CD18222009504196D80
Authority key identifier: 1B:F6:B6:F7:15:67:32:97:8F:CE:8B:24:1C:BC:A6:6F:83:97:8A:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/78e9e955-1fd0-3718-b0df-b7cc01b9cc77.roa
Signing time:             Thu 01 Oct 2026 08:12:52 +0000
ROA not before:           Thu 01 Oct 2026 08:12:52 +0000
ROA not after:            Wed 30 Dec 2026 09:12:52 +0000
asID:                     174
IP address blocks:        108.175.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/f73a8827-1cd1-43b6-9070-d36d44304938.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/f73a8827-1cd1-43b6-9070-d36d44304938.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:09:5c:d1:82:22:00:95:04:19:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f73a8827-1cd1-43b6-9070-d36d44304938
        Validity
            Not Before: Oct  1 08:12:52 2026 GMT
            Not After : Dec 30 09:12:52 2026 GMT
        Subject: CN=3d5480e9-3742-4cfc-9832-c6b257f1c210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6a:70:ea:21:53:e3:da:fb:3b:f7:68:9e:e1:
                    fc:e2:b7:de:d1:92:a0:d2:15:8d:f3:44:06:ab:17:
                    55:1a:35:f6:97:47:39:17:c8:f3:ae:ec:09:c3:1d:
                    34:62:46:a5:6e:7c:3a:d4:77:1b:58:84:00:41:78:
                    6f:26:90:3b:19:3e:74:bd:7e:c0:b4:b9:2b:fe:97:
                    80:c0:f0:51:93:0e:d2:51:84:37:80:76:cd:bf:ce:
                    61:88:8f:69:06:61:e8:9a:10:85:17:12:16:d5:7b:
                    1d:4d:1d:f8:72:8a:6b:8f:16:c4:33:65:b9:d0:0e:
                    03:24:44:31:56:1c:26:c4:29:97:74:95:27:24:ad:
                    ee:d4:85:64:f6:08:43:b1:89:fd:e1:f4:37:50:be:
                    82:cd:94:14:19:e2:04:eb:1c:ed:60:1f:78:a3:cd:
                    41:c3:e9:d4:72:5c:94:ab:3e:8f:10:5e:2a:0a:bf:
                    cb:97:a1:32:00:40:1a:9b:fe:9e:0a:ec:3d:ac:a9:
                    25:5e:4c:ab:7f:3a:74:59:5b:24:27:96:7a:57:d4:
                    e0:b9:4a:78:e2:f4:9f:67:a9:02:09:6b:03:4a:7d:
                    de:4d:dd:f1:ce:50:df:9e:f7:b3:e6:57:9f:c0:3d:
                    a7:fd:dd:2b:85:e9:d1:f2:18:41:48:d9:76:2c:00:
                    25:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E9:89:F8:29:FC:51:C6:E0:F4:BA:E5:20:09:C5:22:4D:C9:63:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/78e9e955-1fd0-3718-b0df-b7cc01b9cc77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/f73a8827-1cd1-43b6-9070-d36d44304938.crl

            X509v3 Authority Key Identifier:
                keyid:1B:F6:B6:F7:15:67:32:97:8F:CE:8B:24:1C:BC:A6:6F:83:97:8A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.175.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:3a:3b:5e:73:8c:6f:70:2e:69:01:0d:85:52:25:71:b7:05:
         be:cb:ed:42:0d:b2:46:b0:34:61:33:be:03:e2:ed:e0:2d:f9:
         0d:0f:fa:7d:24:82:c7:a1:29:fb:f9:85:24:0e:77:19:0d:83:
         56:e0:d0:30:74:0d:78:d7:12:71:bf:22:8d:fe:f7:5e:06:4f:
         72:c2:e4:fa:4d:10:a2:2f:bd:92:58:b9:c8:42:de:1c:d7:b6:
         f3:b5:56:95:f3:3a:b4:35:f9:80:1d:ec:44:93:51:32:5f:f5:
         dc:cb:75:e1:56:e3:84:01:1e:71:52:45:6c:54:b0:0a:46:17:
         f8:ea:5f:3a:b3:da:d1:88:ab:23:46:31:01:59:c1:a6:cc:f3:
         51:93:9d:c5:3b:ee:4f:e0:fb:82:67:ef:66:37:d2:a8:77:44:
         94:5f:c2:06:3a:11:3d:44:4b:b9:cb:38:e5:e2:c7:6e:4a:25:
         da:4a:b8:12:ee:0c:63:b9:ea:f7:61:14:f6:4d:ac:7b:cd:fb:
         92:28:09:55:db:4f:0d:a2:d5:f9:72:91:cc:e8:b3:1e:2e:57:
         91:65:99:bd:2c:3d:d3:99:4a:18:a4:07:e9:ea:5a:3e:23:5b:
         06:a7:73:0c:51:9f:b7:04:2a:66:93:29:72:a7:90:74:f8:bc:
         71:3c:83:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:36:54 2026 by rpki-client