Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7106c59c-b107-4b62-809b-7ed3c693098c/46a5815b-1945-38a0-93f8-7b0ea28f2f04.roa
File:                     46a5815b-1945-38a0-93f8-7b0ea28f2f04.roa (raw, json)
Hash identifier:          lBEMyMzondzb0B7ioevyAIMfS8yABRtc01FdvrBEKQE=
Subject key identifier:   BE:A6:FC:C2:95:19:D2:2F:01:D4:20:B0:61:44:13:6C:B4:FE:3F:E0
Certificate issuer:       /CN=7106c59c-b107-4b62-809b-7ed3c693098c
Certificate serial:       010D0C9F4328584F86DDA2C8B770E7108E886180
Authority key identifier: 67:81:3D:89:8E:31:BE:DC:79:6B:15:40:FA:CE:66:D8:95:4C:97:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7106c59c-b107-4b62-809b-7ed3c693098c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7106c59c-b107-4b62-809b-7ed3c693098c/46a5815b-1945-38a0-93f8-7b0ea28f2f04.roa
Signing time:             Sat 17 Oct 2026 01:00:13 +0000
ROA not before:           Sat 17 Oct 2026 01:00:13 +0000
ROA not after:            Fri 15 Jan 2027 02:00:13 +0000
asID:                     15297
IP address blocks:        108.174.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7106c59c-b107-4b62-809b-7ed3c693098c/7106c59c-b107-4b62-809b-7ed3c693098c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7106c59c-b107-4b62-809b-7ed3c693098c/7106c59c-b107-4b62-809b-7ed3c693098c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7106c59c-b107-4b62-809b-7ed3c693098c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:86:dd:a2:c8:b7:70:e7:10:8e:88:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7106c59c-b107-4b62-809b-7ed3c693098c
        Validity
            Not Before: Oct 17 01:00:13 2026 GMT
            Not After : Jan 15 02:00:13 2027 GMT
        Subject: CN=227ecb3a-060e-4842-9f30-ce2724a51441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4e:8a:91:3c:e9:a3:a7:e0:c0:39:2c:82:ba:
                    41:3c:63:2c:35:2f:75:5c:d0:29:2d:46:d5:33:5f:
                    c8:6d:d4:5f:ca:d3:c0:9e:85:d3:ab:c3:c1:87:73:
                    1b:43:98:28:fe:01:cb:6b:a6:61:31:ab:77:2c:1b:
                    c7:6b:62:25:7d:ba:2f:0e:64:6b:b9:5e:95:5a:f7:
                    ec:40:ff:07:d8:9e:ce:f2:1d:7c:b4:00:40:91:2f:
                    52:bb:2a:97:64:7f:54:d6:97:fc:29:f5:6d:c7:54:
                    2d:31:96:26:ed:fc:ef:38:af:20:19:b9:b3:20:41:
                    a8:9b:77:a0:c4:5e:91:19:06:2e:e4:91:88:68:e6:
                    33:e7:30:f5:ca:12:6a:bd:cf:17:b2:f8:58:1e:a9:
                    da:a3:10:18:7e:e5:1a:88:2f:74:f3:d8:de:19:08:
                    13:e0:ba:e2:92:1b:39:41:a9:a8:cf:34:0b:9e:86:
                    64:b2:df:c3:a0:f5:87:0f:5d:c0:cf:fa:11:d7:28:
                    11:ae:67:e7:8d:12:35:e1:ed:76:c7:d4:ea:a8:19:
                    69:83:92:46:ed:bb:72:71:c5:65:3c:c8:59:6b:cc:
                    b9:92:4c:6f:c6:9d:d0:64:7e:76:f5:e7:bb:9f:00:
                    da:c4:ed:3c:d8:50:69:d7:bc:3b:f8:dd:e0:ee:92:
                    ae:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A6:FC:C2:95:19:D2:2F:01:D4:20:B0:61:44:13:6C:B4:FE:3F:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7106c59c-b107-4b62-809b-7ed3c693098c/46a5815b-1945-38a0-93f8-7b0ea28f2f04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7106c59c-b107-4b62-809b-7ed3c693098c/7106c59c-b107-4b62-809b-7ed3c693098c.crl

            X509v3 Authority Key Identifier:
                keyid:67:81:3D:89:8E:31:BE:DC:79:6B:15:40:FA:CE:66:D8:95:4C:97:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7106c59c-b107-4b62-809b-7ed3c693098c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.174.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c1:99:35:33:db:93:af:57:df:a3:28:2d:d0:13:8e:d2:2e:
         f6:e1:9d:f2:31:06:30:49:a8:e9:4e:6e:6e:9c:08:9c:dd:c3:
         ab:13:a1:cf:ca:fb:58:c2:c2:c5:f1:8d:1c:b0:f5:51:e0:a4:
         b4:0f:54:19:9c:c8:ed:39:a5:87:a9:47:96:0e:8c:73:a0:ef:
         0d:72:17:1a:63:25:60:ee:f6:26:7e:c6:88:3f:d1:ab:13:0d:
         c4:c3:17:d5:ee:34:29:c2:77:f7:a6:3f:b9:66:93:1e:fd:33:
         17:67:35:83:66:f1:b4:74:08:2a:1f:a0:db:50:30:77:bb:ff:
         e6:24:dd:5b:b0:c1:87:46:19:cd:04:a6:b1:30:5d:b7:66:7e:
         e9:58:30:81:26:ce:58:e9:63:3e:56:e4:97:8b:3e:0a:96:20:
         3a:73:43:22:d4:5d:da:cb:22:ac:e1:64:62:7c:f8:3d:d0:09:
         2e:de:67:3d:ca:ec:99:f8:6d:6f:b2:c1:9c:ba:93:f1:bf:72:
         4c:c7:13:c5:93:eb:e3:81:2d:a6:f1:8d:60:d9:06:16:ff:e4:
         6a:3d:bc:24:db:a6:f2:74:1c:29:36:a0:1c:01:a9:f4:b4:7f:
         88:33:e2:2c:af:ff:32:e0:13:54:48:48:b1:1e:5e:96:b0:1f:
         72:8c:2a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:26:57 2026 by rpki-client