Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/c8644689-8483-3661-835b-4a4203dfe29a.roa
File:                     c8644689-8483-3661-835b-4a4203dfe29a.roa (raw, json)
Hash identifier:          pVsQW2IIZgmOGTkdGjPfxC4QqcCjT8nbuWHyyqJ3+Ng=
Subject key identifier:   52:EA:0C:36:AA:87:74:CC:8E:08:15:42:F7:10:03:7E:EA:E1:F0:73
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584F093CDC5038652E37235E4D60
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/c8644689-8483-3661-835b-4a4203dfe29a.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     16504
IP address blocks:        156.70.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:dc:50:38:65:2e:37:23:5e:4d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=38842814-3423-4dbd-94a9-a5370b78c800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d3:78:1b:db:c1:9e:55:c9:a4:af:b4:cb:95:
                    16:01:68:84:19:3d:d0:0b:ea:06:fe:bc:b2:ea:97:
                    6f:c4:68:d5:ba:22:4d:d3:55:13:70:97:d2:59:e3:
                    58:b3:bd:6d:21:01:7c:d9:0b:24:c3:49:b9:80:b3:
                    0a:69:f3:d4:80:74:a0:ad:ba:25:78:04:89:5e:f9:
                    c7:e6:15:5f:1d:a0:0c:03:1c:75:ae:28:28:0b:6d:
                    7c:5d:79:10:de:29:3a:06:95:95:6b:e8:8e:2d:21:
                    f4:0c:58:27:cd:e7:44:be:a8:de:9b:78:65:3f:aa:
                    57:c3:da:15:a2:fc:2c:2a:b6:88:64:cd:ca:e8:94:
                    c1:ea:e5:cf:1e:13:6e:af:e6:a5:9e:bf:98:d3:7e:
                    b4:2b:95:e6:03:81:78:c1:53:17:78:7b:0b:ec:cb:
                    5e:03:5c:9b:40:00:ac:e0:f5:82:08:40:35:95:7c:
                    80:72:38:06:f4:51:37:06:2f:79:e4:33:be:47:58:
                    a2:48:c4:97:78:cd:8a:26:6e:48:79:06:be:e2:f8:
                    0b:08:ac:4b:12:fe:1d:aa:25:61:7c:e8:21:ab:c0:
                    8e:24:d3:41:30:4a:97:30:f3:4d:46:9d:cd:ae:8d:
                    83:b2:1b:14:7f:fe:52:d4:0d:9a:63:3a:17:37:d1:
                    c3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EA:0C:36:AA:87:74:CC:8E:08:15:42:F7:10:03:7E:EA:E1:F0:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/c8644689-8483-3661-835b-4a4203dfe29a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.70.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:2f:ca:e1:2c:f5:83:f6:24:54:72:9d:28:d3:59:65:f9:6d:
         aa:f3:e7:dc:7c:4b:96:34:b2:ac:36:e1:14:49:4d:d1:3c:7d:
         9e:1e:bf:7f:9a:e6:10:19:06:ac:47:18:6f:4c:77:85:2d:12:
         4f:eb:36:e2:eb:f7:74:dd:64:c0:70:4c:81:a1:00:49:50:94:
         cc:ae:0e:0c:d0:68:ab:4b:a0:c5:cc:64:35:39:bd:90:9c:84:
         5f:04:22:e1:61:28:01:56:66:8d:55:28:06:21:f9:f9:7f:57:
         67:28:6e:10:74:04:0b:ce:f8:74:bd:a9:af:f4:35:c9:98:69:
         67:b5:a4:76:30:40:b2:f5:46:2e:84:08:a0:ec:78:b1:ad:88:
         03:44:c3:10:bf:41:44:fb:a4:85:01:f9:f7:2b:79:b0:c0:f9:
         8b:70:4d:a3:ec:4e:35:6b:f1:04:51:ad:65:b5:2d:3e:53:bb:
         4f:f0:5d:e0:87:bf:52:af:4f:e1:fc:f5:61:11:32:20:38:eb:
         61:d8:29:6f:37:35:26:ee:87:6c:1b:03:cd:b2:2a:a5:5e:50:
         09:32:cb:2b:31:2a:2d:bb:c2:55:8d:86:f5:76:84:d1:e9:44:
         80:74:bb:52:5e:af:1a:f2:3b:5d:e9:b3:53:02:0b:c8:0e:2e:
         15:51:f2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:29:53 2026 by rpki-client