Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ad917844-6dd3-31a2-bfbf-cbab9c36c02e.roa
File:                     ad917844-6dd3-31a2-bfbf-cbab9c36c02e.roa (raw, json)
Hash identifier:          gQfone2Kj6CCebAJljBk/jlyIAS4QfBy41gy87lEc0U=
Subject key identifier:   EE:D4:89:72:FE:55:0B:41:B5:D4:86:DB:2E:76:C2:35:B9:D9:BE:BD
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584E4129CB510E6119C198AE7380
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ad917844-6dd3-31a2-bfbf-cbab9c36c02e.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     32431
IP address blocks:        108.179.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:cb:51:0e:61:19:c1:98:ae:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=ba03e269-6780-4261-a70c-7f4456aa4be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:c1:22:64:60:12:ff:9c:03:06:67:9f:7f:
                    e1:54:59:23:5b:39:b4:8d:d5:20:12:d8:ca:b5:e9:
                    61:48:02:12:12:38:95:c4:a9:69:56:92:e1:5d:a0:
                    9f:7f:f6:e7:84:f5:1a:06:0f:35:7e:55:ca:ae:3e:
                    09:d7:a2:90:17:2f:f5:c0:fc:f6:bf:55:00:6d:52:
                    cf:2d:4a:2c:c9:14:cf:88:b2:71:c2:1e:24:86:3e:
                    2d:b2:6d:3d:77:2a:3e:71:10:fd:35:3e:0e:e7:e7:
                    b8:72:33:7d:6e:67:cd:2a:8c:7a:5b:84:26:d3:8b:
                    bc:2b:8e:46:98:0e:7c:87:77:73:69:1b:d6:07:08:
                    24:5b:58:24:48:05:1c:7f:1c:a6:99:6a:48:60:46:
                    4a:18:1d:e6:71:59:0f:88:c1:30:7f:87:5b:8e:ea:
                    b6:59:38:55:ca:0b:03:4d:02:f2:ee:a2:b1:78:ea:
                    26:37:34:19:a4:af:74:f5:d5:a8:fc:25:3a:5c:5b:
                    92:5f:6c:98:dc:9d:8c:1d:d1:e8:33:4d:f0:69:23:
                    4d:fc:62:d3:0e:71:b4:57:d4:3c:d8:b6:d6:52:6f:
                    c7:c6:4e:42:ac:d6:df:9d:e3:00:27:92:82:cf:92:
                    f9:56:f0:96:91:71:84:76:76:b0:4c:24:26:92:9e:
                    a8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D4:89:72:FE:55:0B:41:B5:D4:86:DB:2E:76:C2:35:B9:D9:BE:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ad917844-6dd3-31a2-bfbf-cbab9c36c02e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.179.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:6e:4a:e8:af:43:df:89:63:ea:d5:d8:b1:a1:f7:75:6d:d8:
         d2:53:8a:ff:22:e4:d7:e2:72:af:7a:ef:cc:58:d7:ee:78:39:
         2f:09:b4:6c:08:50:bb:96:46:5e:00:f4:4a:d3:3d:93:1c:2b:
         72:88:91:1c:2e:33:10:d8:10:25:71:8f:47:5a:1e:6e:85:c0:
         c6:32:0a:81:b6:72:50:ae:8b:e2:5d:da:22:99:75:06:03:c8:
         aa:87:92:48:88:7d:8b:8b:bf:46:36:89:5c:e0:54:b5:dc:50:
         56:29:2e:90:b9:6b:5f:76:12:88:70:1b:38:a8:06:42:78:74:
         76:4e:a2:57:20:9d:c0:80:b0:4b:41:69:1c:6b:4e:fc:bf:44:
         90:04:c8:d8:6f:30:da:42:00:a3:d3:c2:d1:04:39:b3:c5:ad:
         d2:89:b6:1e:fb:ef:98:49:56:b7:6f:b3:d8:3e:ac:b2:75:09:
         58:08:da:30:c3:d0:3e:6c:dc:10:d6:b0:35:7c:59:64:a7:8a:
         0a:75:8c:3b:dd:e7:b9:c5:bb:7b:d0:1e:d7:95:fd:08:7f:92:
         e9:f8:e5:30:9e:9a:e0:03:05:03:10:fe:a6:c4:04:b5:0b:37:
         96:91:9d:25:77:d9:51:63:b9:7a:7b:57:27:b0:1e:01:5d:8e:
         f2:b1:2f:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKctRDmEZwZiuc4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk
YmEwM2UyNjktNjc4MC00MjYxLWE3MGMtN2Y0NDU2YWE0YmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSvBImRgEv+cAwZnn3/hVFkjWzm0jdUgEtjK
telhSAISEjiVxKlpVpLhXaCff/bnhPUaBg81flXKrj4J16KQFy/1wPz2v1UAbVLP
LUosyRTPiLJxwh4khj4tsm09dyo+cRD9NT4O5+e4cjN9bmfNKox6W4Qm04u8K45G
mA58h3dzaRvWBwgkW1gkSAUcfxymmWpIYEZKGB3mcVkPiMEwf4dbjuq2WThVygsD
TQLy7qKxeOomNzQZpK909dWo/CU6XFuSX2yY3J2MHdHoM03waSNN/GLTDnG0V9Q8
2LbWUm/Hxk5CrNbfneMAJ5KCz5L5VvCWkXGEdnawTCQmkp6oVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO7UiXL+VQtBtdSG2y52wjW52b69MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvYWQ5MTc4NDQtNmRkMy0z
MWEyLWJmYmYtY2JhYjljMzZjMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLMBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMVuSuivQ9+JY+rV2LGh93Vt2NJTiv8i5Nficq9678xY1+54OS8JtGwI
ULuWRl4A9ErTPZMcK3KIkRwuMxDYECVxj0daHm6FwMYyCoG2clCui+Jd2iKZdQYD
yKqHkkiIfYuLv0Y2iVzgVLXcUFYpLpC5a192EohwGzioBkJ4dHZOolcgncCAsEtB
aRxrTvy/RJAEyNhvMNpCAKPTwtEEObPFrdKJth7775hJVrdvs9g+rLJ1CVgI2jDD
0D5s3BDWsDV8WWSnigp1jDvd57nFu3vQHteV/Qh/kun45TCemuADBQMQ/qbEBLUL
N5aRnSV32VFjuXp7VyewHgFdjvKxL/M=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:34:26 2026 by rpki-client