Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2/58323c8b-51f5-37b7-9faf-0f697e70a5d8.roa
File:                     58323c8b-51f5-37b7-9faf-0f697e70a5d8.roa (raw, json)
Hash identifier:          k0krFqoRvdbLo/vVjZEKmDaDu23TjcdSsPqSySrz0CM=
Subject key identifier:   95:5C:F7:36:74:97:58:B7:76:C9:11:14:9D:16:F6:C3:79:8B:9C:08
Certificate issuer:       /CN=9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2
Certificate serial:       010D0C9F4328584F093CF07BC0057CF629808980
Authority key identifier: 4A:38:38:DF:52:41:07:15:90:3F:23:02:23:C6:22:6A:B6:9D:AF:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2/58323c8b-51f5-37b7-9faf-0f697e70a5d8.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     31844
IP address blocks:        97.107.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:f0:7b:c0:05:7c:f6:29:80:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=b29f1273-01f8-4804-840a-d483a19b8df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:97:f4:a5:f5:b5:01:99:2a:5a:45:e0:0b:
                    f8:62:24:71:eb:d7:a0:ea:92:b2:e8:4b:40:1c:20:
                    b4:12:6e:99:d0:df:3e:d9:51:10:3d:ec:72:4f:d7:
                    19:59:f8:bf:fc:63:83:87:b6:92:7d:39:2d:c4:e8:
                    54:11:01:86:7e:0e:ae:83:aa:40:dd:c1:db:3f:df:
                    73:b7:3f:d7:18:e2:81:51:b1:16:f8:0f:ca:18:17:
                    d5:dc:70:50:d7:39:13:a2:bb:6e:42:50:ae:07:71:
                    f0:fe:24:f0:74:23:38:da:4d:58:40:3e:14:38:0a:
                    3c:95:fe:16:6c:59:c3:b3:64:fc:51:72:63:5e:89:
                    e0:5a:03:d2:10:d5:62:1c:a5:34:66:65:ea:67:99:
                    39:f6:45:f7:30:95:8d:3d:68:98:0f:0c:a2:a1:af:
                    29:f2:16:4b:6e:8c:20:ab:00:91:10:a4:c7:c8:f7:
                    28:7a:34:8b:87:13:7b:a9:1d:98:a9:9c:63:f6:62:
                    3f:b6:c9:5c:af:76:41:5e:4f:8e:b8:44:49:da:3c:
                    38:cc:09:f2:e2:52:26:91:83:0f:66:a9:78:81:00:
                    b3:03:4f:99:3c:0a:3d:ed:af:0e:4f:d9:f4:08:28:
                    8b:71:d9:e4:2d:db:6a:6f:9d:c8:95:4b:57:09:f5:
                    31:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5C:F7:36:74:97:58:B7:76:C9:11:14:9D:16:F6:C3:79:8B:9C:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2/58323c8b-51f5-37b7-9faf-0f697e70a5d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2.crl

            X509v3 Authority Key Identifier:
                keyid:4A:38:38:DF:52:41:07:15:90:3F:23:02:23:C6:22:6A:B6:9D:AF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9300aba0-d56a-44ba-8ff2-6c4ae2b22bb2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.107.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:6b:92:62:a1:ba:f4:78:3b:91:1f:18:96:a1:64:e7:54:65:
         f4:ff:d3:26:e9:6f:d0:95:4b:8d:e8:b8:8b:a1:c5:5b:4f:f9:
         9a:ac:1f:4a:73:ac:fc:3b:55:08:18:2b:e4:4c:0f:d4:57:5f:
         95:5a:da:9f:fb:53:65:ec:1e:5d:e4:81:3f:44:0a:51:2c:14:
         b2:bd:b6:1c:fb:f1:06:83:fc:23:2f:45:28:c5:0a:d5:7b:e8:
         78:9a:00:7c:1f:88:be:9c:c0:e6:c7:57:2e:23:a5:07:29:0a:
         bc:37:b1:f7:40:20:7e:a5:fe:74:9f:82:9d:4a:53:b3:b7:3b:
         50:4e:6d:af:9e:7d:89:6d:e8:df:c0:ff:43:d2:dd:df:66:8f:
         ba:c0:b4:d9:49:fb:27:7b:ef:89:32:fa:45:c9:db:c9:22:39:
         08:2b:a4:a2:aa:ed:f5:c6:6b:dd:38:14:a1:1b:6c:11:64:07:
         3b:37:0c:1e:1d:93:8a:81:47:02:cb:71:5d:c3:6c:4c:7c:32:
         ad:86:fb:fc:c1:c3:0c:19:90:f3:45:9b:5f:eb:41:96:f6:a7:
         77:dc:59:1b:6e:18:e1:ba:76:40:c8:49:a7:75:7c:8b:b6:e0:
         f8:bd:ec:f5:a9:a5:e9:15:24:64:7b:eb:41:dd:b8:8d:64:3f:
         7c:41:72:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:52:18 2026 by rpki-client