Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/9c71798d-a9e5-3fc4-8ef0-26d8b1790b40.roa
File:                     9c71798d-a9e5-3fc4-8ef0-26d8b1790b40.roa (raw, json)
Hash identifier:          emVFQxMww06lYpQEd+mfVzEBE+PniHFogOrZyOkxG/s=
Subject key identifier:   8F:AD:B4:2D:51:36:AE:17:D9:43:1F:A5:94:D0:F7:CE:8D:CD:45:8E
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584F85785BB0A00E1F5DF91CBF40
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/9c71798d-a9e5-3fc4-8ef0-26d8b1790b40.roa
Signing time:             Fri 16 Oct 2026 13:00:12 +0000
ROA not before:           Fri 16 Oct 2026 13:00:12 +0000
ROA not after:            Thu 14 Jan 2027 14:00:12 +0000
asID:                     14315
IP address blocks:        107.182.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:78:5b:b0:a0:0e:1f:5d:f9:1c:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Oct 16 13:00:12 2026 GMT
            Not After : Jan 14 14:00:12 2027 GMT
        Subject: CN=578d4cf2-1846-40ea-9fa3-6ab76acb0ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2b:3a:7a:48:43:25:a4:b7:80:82:4d:bb:35:
                    83:f9:ef:57:32:7e:86:5c:14:b8:eb:13:81:b6:81:
                    22:65:ee:43:04:10:3f:50:60:09:4c:e9:7d:41:9f:
                    a7:f4:a5:cb:5c:d2:c8:f7:66:0f:23:0c:94:c5:0b:
                    f0:43:ae:13:4b:4a:d3:4c:dc:a3:82:c8:d2:f0:d7:
                    5f:92:5a:f4:b6:ee:17:39:ce:59:a0:3d:00:07:49:
                    9e:49:16:bb:52:ef:58:86:5a:61:5c:1e:e8:93:3a:
                    e0:bc:71:ff:03:a0:e3:fe:75:90:8b:f2:5f:bd:e3:
                    ef:84:b6:f1:cf:b7:98:16:81:bd:c7:7c:be:e9:10:
                    13:f1:e0:d6:d4:13:e8:57:f7:c4:e7:43:62:4c:a3:
                    33:89:21:a3:54:04:5c:b4:d6:b6:df:62:fe:29:0c:
                    78:87:60:5a:52:d7:8c:c4:7a:04:ab:55:7c:16:60:
                    46:51:c5:f5:e9:23:2a:47:06:c2:d1:1b:a0:7b:0e:
                    3c:04:84:30:04:da:97:f6:f0:c6:2d:d8:eb:2c:00:
                    9d:ff:46:7f:6a:1b:4c:5a:f3:43:17:35:e6:fa:36:
                    ba:fb:38:a3:6c:62:81:fa:42:8a:fc:06:0e:45:36:
                    86:96:74:02:c4:e1:d7:01:63:b1:36:92:87:57:83:
                    f0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AD:B4:2D:51:36:AE:17:D9:43:1F:A5:94:D0:F7:CE:8D:CD:45:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/9c71798d-a9e5-3fc4-8ef0-26d8b1790b40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:dd:89:ae:15:6b:47:8c:f4:c2:75:5d:d2:b0:74:6b:d0:1e:
         af:e4:b6:c5:81:98:0e:81:1b:a1:ad:d2:91:09:ae:d6:db:ec:
         4d:ae:2d:03:aa:51:44:fb:84:f5:c0:56:27:aa:b5:9a:ae:ed:
         91:c7:bd:96:cf:88:32:3e:dd:e9:10:6f:37:c7:1f:32:d7:da:
         44:b4:9d:bf:75:c4:bb:39:82:9c:1c:d6:42:87:4a:95:b1:a4:
         50:10:b4:01:78:f5:5b:c9:16:54:e9:99:a7:c5:1f:ba:c8:e3:
         2b:af:c7:2a:2a:c5:67:41:d2:37:2c:76:6b:00:20:55:43:b8:
         2d:df:9a:e4:1b:52:fb:4f:01:4a:8a:1e:fb:1b:bf:74:f6:8f:
         fc:8a:a3:c4:0c:bd:10:38:9e:d9:e7:c5:f2:a4:67:ef:bb:71:
         14:44:b6:07:c4:84:11:52:8e:3b:c1:0e:8c:dd:7b:e1:ef:65:
         94:99:54:5d:40:e1:1f:d0:49:d5:bd:64:3a:61:af:11:78:2b:
         ee:f4:99:cf:11:b1:3c:b4:31:9b:1a:12:f8:6b:65:6e:1e:5e:
         6f:06:a7:ef:18:58:69:75:04:c5:6b:d4:af:77:70:9f:07:fc:
         f4:bd:35:70:7d:7c:ad:3e:3c:31:0a:66:0a:c6:f1:6a:24:db:
         a4:b1:be:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:35:22 2026 by rpki-client