Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/9b8c76d9-5d47-3f0c-82d1-a4b1b929c669.roa
File:                     9b8c76d9-5d47-3f0c-82d1-a4b1b929c669.roa (raw, json)
Hash identifier:          cUfqe9le5r1ZM3KMu6My3lJ1dtEiF4DRovP4GzDxn7w=
Subject key identifier:   F4:8E:D2:2A:A8:99:73:31:89:03:35:65:A5:D2:5C:22:92:DE:7A:92
Certificate issuer:       /CN=f73a8827-1cd1-43b6-9070-d36d44304938
Certificate serial:       010D0C9F4328584F5EC1AF4CD840BADE208C7A40
Authority key identifier: 1B:F6:B6:F7:15:67:32:97:8F:CE:8B:24:1C:BC:A6:6F:83:97:8A:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/9b8c76d9-5d47-3f0c-82d1-a4b1b929c669.roa
Signing time:             Fri 02 Oct 2026 16:11:41 +0000
ROA not before:           Fri 02 Oct 2026 16:11:41 +0000
ROA not after:            Thu 31 Dec 2026 17:11:41 +0000
asID:                     174
IP address blocks:        108.175.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/f73a8827-1cd1-43b6-9070-d36d44304938.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/f73a8827-1cd1-43b6-9070-d36d44304938.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:c1:af:4c:d8:40:ba:de:20:8c:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f73a8827-1cd1-43b6-9070-d36d44304938
        Validity
            Not Before: Oct  2 16:11:41 2026 GMT
            Not After : Dec 31 17:11:41 2026 GMT
        Subject: CN=9adbac27-2ede-4737-91c1-a55a5cd1bcd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fa:e2:e7:1d:2b:31:48:03:d3:2c:13:6d:05:
                    17:b5:c4:0d:4b:3c:4c:bb:1f:12:f8:c5:d6:3e:14:
                    97:c6:84:ef:04:51:ed:6e:72:95:e6:1d:66:2f:9e:
                    f3:46:1c:73:cc:eb:53:ed:d8:8f:67:c8:a7:87:e7:
                    18:a8:10:42:96:20:be:12:0a:e5:f9:f9:b8:5f:f9:
                    e4:cf:e8:81:da:f8:50:69:eb:bc:58:9a:f3:58:5d:
                    f7:f9:a4:23:8e:f7:76:d9:8a:11:8e:76:d3:b9:21:
                    3d:15:b3:6d:f7:6f:b7:78:31:52:b4:f6:76:50:40:
                    8a:e3:78:a3:94:1b:3e:8a:45:be:c9:f4:f9:b5:e7:
                    1e:dc:af:14:ae:40:61:c5:09:47:ff:ad:15:3f:32:
                    97:4d:09:ab:0a:4a:fe:01:9b:11:ce:09:e8:5e:9f:
                    92:8a:65:a8:aa:f6:f4:75:5b:78:42:a6:fa:ca:1e:
                    0b:36:ec:16:72:59:57:61:44:c7:7f:87:87:4f:de:
                    e1:f7:ea:70:2b:81:ab:ee:2e:47:17:eb:d5:4a:24:
                    5a:98:95:0e:da:fd:33:85:ff:70:c6:45:f2:82:6a:
                    a4:ff:14:dd:3a:a1:c7:ce:3c:82:7f:9e:f6:7b:0f:
                    61:df:0d:fa:64:b4:ed:fd:be:64:7a:3b:bf:34:ea:
                    63:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8E:D2:2A:A8:99:73:31:89:03:35:65:A5:D2:5C:22:92:DE:7A:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/9b8c76d9-5d47-3f0c-82d1-a4b1b929c669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/f73a8827-1cd1-43b6-9070-d36d44304938.crl

            X509v3 Authority Key Identifier:
                keyid:1B:F6:B6:F7:15:67:32:97:8F:CE:8B:24:1C:BC:A6:6F:83:97:8A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.175.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:0f:43:e1:08:a6:0d:06:e6:74:4b:7c:2f:03:00:30:dc:7a:
         2f:77:62:81:a7:be:6c:6b:b4:5a:3b:cc:94:8e:9c:bb:9b:37:
         96:07:b8:85:90:95:49:0b:8c:8e:8d:ad:d5:fe:f4:a1:55:e8:
         5c:aa:5a:8c:c9:5b:cc:5c:7a:29:9c:d0:81:f1:f6:c0:dd:4d:
         da:a5:7e:57:cf:54:cc:9b:aa:a6:60:4d:d7:88:ec:29:8f:0d:
         be:b0:2e:e7:de:71:bc:d2:24:e2:34:f3:9c:a6:f9:3a:71:80:
         00:35:e9:cf:9c:98:83:84:de:d8:25:fc:80:56:35:96:34:33:
         69:9f:d0:bc:7a:40:58:7b:24:9f:d1:b1:ea:b8:49:d7:31:ae:
         61:ce:98:7a:24:89:19:f2:38:73:f6:6e:50:de:4e:29:e6:a5:
         99:61:af:10:24:1c:8b:b2:9c:91:bb:e2:8c:8d:b5:fe:d4:1e:
         51:71:76:2a:e8:1e:b0:a1:73:3a:36:c4:a0:ea:10:ac:70:0e:
         91:1f:ab:e0:9b:92:ca:4c:3a:85:79:76:61:b3:20:58:3d:98:
         2c:a2:1f:3f:2e:b1:39:df:79:dd:1f:ef:3a:2b:53:02:5d:34:
         1a:49:43:57:0e:a3:95:f0:2b:b4:a0:2d:fa:57:d4:6c:34:96:
         af:c6:dc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:12:45 2026 by rpki-client