Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ad917844-6dd3-31a2-bfbf-cbab9c36c02e.roa
File:                     ad917844-6dd3-31a2-bfbf-cbab9c36c02e.roa (raw, json)
Hash identifier:          rakPVJFjLfsSe4dCCRczgq2YlpUEuf3Uade6tus2Gsg=
Subject key identifier:   A3:2D:2B:FD:BE:5F:2B:B2:4F:79:64:FC:D4:7B:F5:70:D0:AC:4A:1C
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584C8046CE491BB428866F0073E0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ad917844-6dd3-31a2-bfbf-cbab9c36c02e.roa
Signing time:             Mon 12 Jan 2026 14:00:40 +0000
ROA not before:           Mon 12 Jan 2026 14:00:40 +0000
ROA not after:            Sun 12 Apr 2026 13:00:40 +0000
asID:                     32431
IP address blocks:        108.179.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:80:46:ce:49:1b:b4:28:86:6f:00:73:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Jan 12 14:00:40 2026 GMT
            Not After : Apr 12 13:00:40 2026 GMT
        Subject: CN=2c9e786e-bea2-4a75-bc6d-3b44b50c3d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:ab:cd:ba:78:46:ec:dd:c2:d8:55:c1:35:
                    86:44:10:65:5b:f1:8f:30:ed:62:41:13:4a:61:62:
                    38:6c:54:9b:73:2f:ee:fb:b6:e0:40:0f:25:14:33:
                    bd:b9:ad:db:a8:34:79:d3:b0:a0:0e:19:78:28:6d:
                    5e:99:9c:3b:fa:f9:82:c9:91:42:d8:4e:e0:52:0d:
                    d4:91:d5:73:48:8a:22:ac:1d:76:60:61:20:b2:04:
                    1f:f5:78:c0:06:c8:b8:d2:61:f9:bc:63:64:e6:fb:
                    13:4e:ea:82:f0:f5:4b:62:ff:26:5d:d5:03:80:98:
                    98:77:0b:c6:90:a3:12:3a:7a:ab:fc:87:f0:f5:13:
                    8a:0a:8f:9c:a4:4d:96:c4:d2:d6:01:40:05:7a:77:
                    b5:a3:f1:c8:f5:ad:61:71:8c:7b:24:ae:5b:aa:d7:
                    74:6e:ae:17:17:44:f4:bc:06:1b:a7:be:e0:d2:e5:
                    52:7a:33:26:a4:39:18:37:af:75:75:7e:3d:4a:62:
                    6f:2a:76:87:11:19:05:17:2e:78:cc:52:f5:ae:3e:
                    7e:ae:c2:9e:0f:68:2e:7f:e6:e8:f9:98:cd:d4:08:
                    27:fa:df:4a:7f:4f:fd:1e:c9:7b:78:8a:5c:a5:14:
                    7e:1f:10:c6:56:ca:b6:84:13:38:30:2e:1a:e9:0b:
                    7e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2D:2B:FD:BE:5F:2B:B2:4F:79:64:FC:D4:7B:F5:70:D0:AC:4A:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ad917844-6dd3-31a2-bfbf-cbab9c36c02e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.179.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:1c:e7:79:fc:8c:9c:4c:a3:ff:7b:8d:a4:f7:77:e4:e1:ad:
         8a:d0:ec:8e:f2:e5:60:a6:5f:65:41:c1:06:98:0f:11:fb:a4:
         3b:0e:c3:8a:9c:5d:2d:c1:04:e6:7b:17:7a:a2:1a:ba:55:76:
         b9:95:69:20:b7:22:2c:d8:52:02:07:7f:e6:83:bf:6c:c1:32:
         2f:1e:ea:38:91:65:3a:e0:85:6a:42:78:8b:e6:58:98:42:3c:
         da:04:01:45:a3:96:2f:d7:3a:f6:93:44:f7:18:d2:d3:47:7e:
         5b:fa:c8:0a:89:38:50:16:9e:3e:60:0b:88:ad:0d:37:d6:4f:
         17:88:c3:f2:4d:78:5c:d9:35:1d:19:29:03:d6:9e:cb:b2:22:
         c7:40:3b:d1:57:25:21:2b:f7:0f:24:49:dc:13:0c:ec:44:6f:
         6c:e7:a5:0f:7d:14:53:50:9d:e1:80:bd:32:10:5e:43:24:b8:
         f1:47:80:fd:a9:a5:54:3e:0c:6f:87:04:dc:05:af:5f:04:ab:
         72:c2:ce:5b:0c:a9:f8:36:af:01:e8:81:8a:d2:f8:ae:18:d8:
         ee:0a:d9:a7:b2:47:5d:3c:6f:e4:fa:36:5a:c3:e0:43:15:69:
         d8:95:3d:79:7c:fb:f1:95:4f:8c:16:26:ff:3a:4e:bb:30:21:
         f0:bf:19:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 15:01:23 2026 by rpki-client