Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/fb6cf083-e2a5-3b74-8781-f075b21e43ab.roa
File:                     fb6cf083-e2a5-3b74-8781-f075b21e43ab.roa (raw, json)
Hash identifier:          6lKnwZDuKS4d3/68zLmN4Y9bQYy2k+/Qpro9x7G6q8E=
Subject key identifier:   B9:C7:CB:3D:B4:61:22:BC:84:96:4A:EE:99:33:96:08:2D:DF:2D:C9
Certificate issuer:       /CN=f73a8827-1cd1-43b6-9070-d36d44304938
Certificate serial:       010D0C9F4328584F74EC2D46F762F2B54C2F7500
Authority key identifier: 1B:F6:B6:F7:15:67:32:97:8F:CE:8B:24:1C:BC:A6:6F:83:97:8A:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/fb6cf083-e2a5-3b74-8781-f075b21e43ab.roa
Signing time:             Sat 10 Oct 2026 14:45:05 +0000
ROA not before:           Sat 10 Oct 2026 14:45:05 +0000
ROA not after:            Fri 08 Jan 2027 15:45:05 +0000
asID:                     218648
IP address blocks:        108.175.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/f73a8827-1cd1-43b6-9070-d36d44304938.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/f73a8827-1cd1-43b6-9070-d36d44304938.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:74:ec:2d:46:f7:62:f2:b5:4c:2f:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f73a8827-1cd1-43b6-9070-d36d44304938
        Validity
            Not Before: Oct 10 14:45:05 2026 GMT
            Not After : Jan  8 15:45:05 2027 GMT
        Subject: CN=58dca65b-9654-4aca-b9b0-ba17fbc4e2d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:dd:df:86:15:ac:34:ac:2e:5a:04:f0:50:b9:
                    b1:8b:a5:ce:10:ba:a9:41:ab:c4:07:0f:78:57:1f:
                    ce:d0:af:e5:f3:e6:60:9f:91:0d:e9:55:72:74:c3:
                    78:39:a4:89:3e:c6:9b:b1:55:0d:29:e7:01:9c:49:
                    1d:50:a1:3e:8f:25:e6:64:94:cc:a9:32:6b:55:db:
                    4d:90:09:31:b1:92:f9:cf:5b:90:3c:ae:c4:5e:74:
                    b2:0e:35:ee:27:2c:b1:0a:50:2f:8a:1b:88:f4:29:
                    64:90:28:39:77:4e:8a:a4:0d:12:b0:bd:26:07:8a:
                    83:3b:40:bd:e6:06:fe:74:36:96:5b:98:21:3b:43:
                    95:ea:98:dc:e3:63:96:ca:0d:cf:e9:91:75:dd:6b:
                    e8:f8:89:36:c8:ab:01:9f:5e:0c:87:20:eb:70:d9:
                    99:20:3f:09:a4:eb:ca:7a:b6:56:c7:81:25:59:e1:
                    48:15:44:9b:a2:3b:0d:0f:e0:14:8e:c5:a8:d7:18:
                    93:d6:a1:e9:29:81:2e:fd:ac:88:f6:04:f8:d9:3e:
                    07:6a:ee:f5:da:da:af:e4:3a:b0:9a:53:a6:ac:01:
                    84:97:6a:b9:85:5f:04:76:17:2e:70:24:4f:b8:5d:
                    02:ee:b9:84:e4:b6:60:e2:69:47:df:2b:09:52:69:
                    84:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C7:CB:3D:B4:61:22:BC:84:96:4A:EE:99:33:96:08:2D:DF:2D:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/fb6cf083-e2a5-3b74-8781-f075b21e43ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938/f73a8827-1cd1-43b6-9070-d36d44304938.crl

            X509v3 Authority Key Identifier:
                keyid:1B:F6:B6:F7:15:67:32:97:8F:CE:8B:24:1C:BC:A6:6F:83:97:8A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f73a8827-1cd1-43b6-9070-d36d44304938.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.175.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:66:08:35:cd:7c:7c:f6:8b:67:17:50:34:24:24:96:71:47:
         69:10:fb:08:e7:65:3a:b9:e3:d0:e0:a1:38:83:50:e4:64:4c:
         05:0a:94:0e:aa:7e:fa:c3:df:b2:fc:b9:4f:63:42:2a:c0:7d:
         5b:0f:70:69:2b:8e:4a:56:7b:0e:7b:82:d0:29:ef:06:c0:c6:
         b8:3b:09:3c:bb:cf:21:a5:80:8c:1e:17:a9:0d:97:b5:a6:1b:
         82:4a:ce:d2:1e:b5:58:bf:af:d4:77:88:c9:32:b3:d2:86:6a:
         00:30:84:24:85:8d:e9:dd:74:f2:8f:b3:2d:9e:72:31:90:8a:
         97:76:97:bd:e6:ac:78:74:7c:a1:c6:d1:1d:eb:91:97:56:b7:
         ab:bf:39:a4:9f:ce:50:28:e8:24:61:3b:98:32:fa:11:96:88:
         f8:bf:7e:15:1f:8d:92:27:f1:52:df:c2:7b:e9:8f:bc:e1:6a:
         53:f2:44:14:c8:d2:e9:3f:ce:91:64:ef:eb:5e:2e:6b:73:58:
         13:06:74:27:b8:13:55:6d:0e:65:1c:bc:56:e6:13:66:cc:ce:
         44:61:02:6e:37:dd:70:1e:f8:fa:69:1b:aa:35:82:27:4c:70:
         ee:09:8f:b5:a7:dd:28:51:85:c9:cf:56:81:04:eb:d2:35:88:
         c2:90:f0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:12:38 2026 by rpki-client