Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/929617e4-1b30-3b14-aae8-b2ad86e85dc8.roa
File:                     929617e4-1b30-3b14-aae8-b2ad86e85dc8.roa (raw, json)
Hash identifier:          QW3aEnCBirrr9BfKs0532nxE6dh2RGzDH6nYELZOj7U=
Subject key identifier:   89:3D:4C:BA:6A:2E:89:A2:96:90:89:AE:3E:FA:5E:4D:7E:21:6C:39
Certificate issuer:       /CN=f73a8827-1cd1-43b6-9070-d36d44304938
Certificate serial:       010D0C9F4328584F74DC0CDA7F13EFC633514380
Authority key identifier: 1B:F6:B6:F7:15:67:32:97:8F:CE:8B:24:1C:BC:A6:6F:83:97:8A:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/929617e4-1b30-3b14-aae8-b2ad86e85dc8.roa
Signing time:             Sat 10 Oct 2026 14:12:36 +0000
ROA not before:           Sat 10 Oct 2026 14:12:36 +0000
ROA not after:            Fri 08 Jan 2027 15:12:36 +0000
asID:                     218648
IP address blocks:        108.175.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/f73a8827-1cd1-43b6-9070-d36d44304938.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/f73a8827-1cd1-43b6-9070-d36d44304938.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:74:dc:0c:da:7f:13:ef:c6:33:51:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f73a8827-1cd1-43b6-9070-d36d44304938
        Validity
            Not Before: Oct 10 14:12:36 2026 GMT
            Not After : Jan  8 15:12:36 2027 GMT
        Subject: CN=bb20bfe0-41f3-4d6c-9f88-fb7969f3c05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:18:8e:41:86:90:25:fb:62:c3:d7:0a:a4:
                    25:0a:5c:51:d4:8e:69:34:8e:4c:61:af:a6:61:53:
                    86:9e:92:f7:0e:39:f3:ce:0b:69:9c:95:59:04:a5:
                    2c:b4:89:08:3e:0f:d4:93:91:3f:5a:62:36:f6:32:
                    be:b1:07:83:ca:09:9e:68:cf:c2:c9:b8:6f:c4:ef:
                    1f:a8:9b:03:cd:56:65:95:a4:8e:25:26:4b:d5:1e:
                    59:4c:9b:dc:ed:d2:75:23:7f:b4:78:8f:ce:5c:d2:
                    f2:46:92:15:c9:0c:03:57:c5:ab:5e:a1:5a:06:86:
                    d1:51:bd:03:19:a9:61:e7:0e:29:25:3e:0f:89:14:
                    ed:13:ae:c6:4e:12:5c:c1:6e:05:60:d3:4d:bd:80:
                    96:4f:ea:d2:b0:bd:62:45:48:f1:ed:3b:55:83:76:
                    ba:3b:5e:06:c7:61:7b:ea:a5:ba:11:38:6f:f3:25:
                    0d:04:c7:9b:39:81:fc:0e:93:95:72:10:90:b8:50:
                    af:28:4c:09:3c:82:0f:ed:25:33:c4:d0:ac:87:2a:
                    c6:69:0e:c3:d7:ce:25:ef:24:0f:8b:38:41:e7:ed:
                    6c:3a:b1:9f:5d:17:ee:02:dc:b1:f3:cc:1c:67:c0:
                    06:fd:86:90:c8:25:6a:cd:e4:f6:5c:4b:c5:a4:a3:
                    bf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3D:4C:BA:6A:2E:89:A2:96:90:89:AE:3E:FA:5E:4D:7E:21:6C:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/929617e4-1b30-3b14-aae8-b2ad86e85dc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/f73a8827-1cd1-43b6-9070-d36d44304938.crl

            X509v3 Authority Key Identifier:
                keyid:1B:F6:B6:F7:15:67:32:97:8F:CE:8B:24:1C:BC:A6:6F:83:97:8A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.175.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:53:57:3b:a1:10:ce:60:94:30:01:9a:e4:eb:81:9e:34:54:
         39:ae:b7:4b:88:ec:35:58:7d:bc:ae:10:79:2e:8e:2d:9d:86:
         ea:99:9f:6a:66:ff:cb:94:ab:ea:5e:11:4b:5b:be:da:09:99:
         c6:20:88:6e:41:46:03:19:b9:bd:e0:58:13:6e:93:f9:8f:08:
         e9:a5:ce:8d:02:96:18:c6:f7:d3:51:0b:79:0a:70:66:e1:19:
         51:fc:00:e4:f8:9b:cb:cc:af:09:06:64:a5:5d:e5:dc:97:dd:
         b7:7a:56:54:5b:96:3e:13:a8:53:84:45:5f:6d:84:dc:56:2f:
         98:6d:78:07:cb:88:62:17:99:c6:53:73:c9:da:a8:f6:24:27:
         18:25:ab:13:51:c1:29:63:1d:d9:da:a7:01:55:e1:3c:1a:a8:
         f3:73:1a:fd:25:dc:21:00:c0:c1:7a:fe:3b:7b:df:d3:04:39:
         f9:e9:26:c0:1a:e8:23:d7:9b:d0:6e:aa:ec:a5:8f:62:c1:b4:
         1f:1d:29:5d:45:eb:e8:36:e5:27:a4:d2:b7:68:66:de:f1:15:
         fe:b1:a4:d9:05:37:29:82:6b:92:e3:ec:54:8b:91:10:d1:71:
         1e:fb:44:4d:d3:32:4b:65:04:22:5d:e3:24:29:f2:91:86:99:
         72:d7:6d:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE903AzafxPvxjNRQ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjczYTg4MjctMWNkMS00M2I2LTkwNzAtZDM2ZDQ0MzA0
OTM4MB4XDTI2MTAxMDE0MTIzNloXDTI3MDEwODE1MTIzNlowLzEtMCsGA1UEAxMk
YmIyMGJmZTAtNDFmMy00ZDZjLTlmODgtZmI3OTY5ZjNjMDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJkYjkGGkCX7YsPXCqQlClxR1I5pNI5MYa+m
YVOGnpL3DjnzzgtpnJVZBKUstIkIPg/Uk5E/WmI29jK+sQeDygmeaM/CybhvxO8f
qJsDzVZllaSOJSZL1R5ZTJvc7dJ1I3+0eI/OXNLyRpIVyQwDV8WrXqFaBobRUb0D
Galh5w4pJT4PiRTtE67GThJcwW4FYNNNvYCWT+rSsL1iRUjx7TtVg3a6O14Gx2F7
6qW6EThv8yUNBMebOYH8DpOVchCQuFCvKEwJPIIP7SUzxNCshyrGaQ7D184l7yQP
izhB5+1sOrGfXRfuAtyx88wcZ8AG/YaQyCVqzeT2XEvFpKO/DQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIk9TLpqLomilpCJrj76Xk1+IWw5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9mNzNh
ODgyNy0xY2QxLTQzYjYtOTA3MC1kMzZkNDQzMDQ5MzgvOTI5NjE3ZTQtMWIzMC0z
YjE0LWFhZTgtYjJhZDg2ZTg1ZGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvZjczYTg4MjctMWNkMS00M2I2LTkw
NzAtZDM2ZDQ0MzA0OTM4L2Y3M2E4ODI3LTFjZDEtNDNiNi05MDcwLWQzNmQ0NDMw
NDkzOC5jcmwwHwYDVR0jBBgwFoAUG/a29xVnMpePzoskHLymb4OXiocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS9mNzNhODgyNy0xY2QxLTQzYjYtOTA3MC1kMzZk
NDQzMDQ5MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbK9nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABdTVzuhEM5glDABmuTrgZ40VDmut0uI7DVYfbyuEHkuji2dhuqZn2pm
/8uUq+peEUtbvtoJmcYgiG5BRgMZub3gWBNuk/mPCOmlzo0ClhjG99NRC3kKcGbh
GVH8AOT4m8vMrwkGZKVd5dyX3bd6VlRblj4TqFOERV9thNxWL5hteAfLiGIXmcZT
c8naqPYkJxglqxNRwSljHdnapwFV4TwaqPNzGv0l3CEAwMF6/jt739MEOfnpJsAa
6CPXm9Buquylj2LBtB8dKV1F6+g25Sek0rdoZt7xFf6xpNkFNymCa5Lj7FSLkRDR
cR77RE3TMktlBCJd4yQp8pGGmXLXbZw=
-----END CERTIFICATE-----
Generated at Sun Oct 11 16:49:40 2026 by rpki-client