Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/93299ca5-ca5c-3291-b0e2-7c2b216e0112.roa
File:                     93299ca5-ca5c-3291-b0e2-7c2b216e0112.roa (raw, json)
Hash identifier:          H9IPQxJzmI5gJPFKEUWZPERC0KBFK/P+WY2VeZbZUqk=
Subject key identifier:   EA:79:A0:B0:46:D5:49:6B:EF:17:F5:5D:29:85:08:3C:33:C0:9F:62
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F612D7146D3EE8920E8E33380
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/93299ca5-ca5c-3291-b0e2-7c2b216e0112.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     396362
IP address blocks:        108.62.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:71:46:d3:ee:89:20:e8:e3:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=597f3523-fb49-4d9c-bd5d-2635dd03caa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:85:00:e5:98:74:48:da:4d:d2:ae:90:91:70:
                    47:10:97:78:aa:00:dc:fa:97:4c:bb:8d:a7:e0:56:
                    0a:f4:f3:0f:69:59:04:97:2f:1d:17:35:f4:ec:de:
                    4b:b9:52:55:27:c0:d5:44:47:7a:62:09:6c:e6:4e:
                    e9:86:8a:c7:be:76:b1:4c:66:13:4d:9c:23:45:59:
                    4b:9d:df:9e:2c:52:bb:6d:2b:6e:d8:71:0f:9b:76:
                    d1:15:47:eb:73:24:6e:16:d1:e3:b2:77:cc:b4:c7:
                    71:4f:0a:e1:26:15:13:90:16:37:b3:a3:ec:ab:79:
                    c6:41:7b:75:5e:dd:d6:6c:27:b8:ad:c5:93:9a:70:
                    1a:03:d6:9c:d2:de:cf:10:19:ec:58:1c:37:23:5f:
                    fe:a0:20:fa:72:1b:f0:9d:a3:23:81:2a:6c:80:43:
                    d1:99:20:d4:e4:7e:a8:ed:f9:55:a5:3d:32:34:2d:
                    19:fc:ec:98:ff:08:2d:e2:bb:d2:4d:e2:eb:d2:12:
                    1b:35:82:18:d3:e9:ad:55:48:e4:24:c0:1b:15:1f:
                    80:83:c9:d2:81:4c:bb:31:4a:f0:1e:f7:53:0d:7f:
                    3a:5c:0b:1b:55:4a:17:f6:08:ee:1f:c9:89:af:3d:
                    d0:7c:e7:8e:d5:99:5c:21:c0:86:b3:1a:56:08:61:
                    be:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:79:A0:B0:46:D5:49:6B:EF:17:F5:5D:29:85:08:3C:33:C0:9F:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/93299ca5-ca5c-3291-b0e2-7c2b216e0112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.62.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:6b:30:94:a5:aa:ae:c5:52:b4:d6:5f:0f:6c:66:ac:4b:54:
         05:e3:8d:02:a6:5a:f3:ce:c2:0a:e4:c2:03:87:21:47:a4:07:
         d6:fa:5f:59:4c:ca:bd:ea:4b:ae:9f:e1:f8:44:b8:d5:b7:c2:
         c5:c3:74:b3:7c:17:44:19:0b:f2:a9:c3:58:fd:22:18:34:b2:
         46:5a:a7:74:42:c5:fd:44:bf:d6:91:c8:40:29:71:49:4a:7c:
         cb:83:6a:4f:a3:2f:f7:76:39:0e:87:2b:da:a3:f7:d4:c7:bb:
         26:e9:1a:5f:1d:4b:86:5a:e7:ce:68:17:68:22:8a:91:00:49:
         30:f2:8c:d4:0f:ce:f6:4f:61:8c:0f:e3:d9:36:bc:0d:a4:17:
         ca:cf:be:b7:14:f1:9a:3d:8a:6f:29:77:3b:5f:31:8f:8b:30:
         2e:cf:1e:df:c6:7d:c8:6a:02:d0:c2:1b:6b:62:4a:1d:f0:5c:
         67:ec:e4:db:38:15:bb:06:43:3e:92:d2:e3:68:1f:ec:24:ae:
         90:fe:e7:8f:0b:06:50:32:bc:66:bb:1b:3b:14:d5:60:da:f1:
         16:30:2c:77:1d:4b:eb:29:c9:90:af:fc:63:87:c4:8b:10:8a:
         a5:54:c1:ae:dc:97:d1:55:fb:b5:7e:d0:f2:1f:e3:e4:81:6f:
         9d:d3:33:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:46:03 2026 by rpki-client