Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ce34d613-0e63-32d4-a6da-2fe230b7706f.roa
File:                     ce34d613-0e63-32d4-a6da-2fe230b7706f.roa (raw, json)
Hash identifier:          cDGMR+j/roMC1iXCBZtllf+BqTzJcR/55K75LHR/N80=
Subject key identifier:   D9:13:FD:C4:34:74:F6:07:6B:B7:23:6D:26:5C:E4:4B:12:7B:EA:C4
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F58CD4CC3388CF32E8A3BD080
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ce34d613-0e63-32d4-a6da-2fe230b7706f.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     7203
IP address blocks:        108.177.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:4c:c3:38:8c:f3:2e:8a:3b:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=2dff97d1-307c-44d4-a12b-f70b83e29e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:04:92:4b:7d:ca:93:aa:1f:d1:75:b8:18:16:
                    06:bf:59:26:6d:14:d6:21:c5:51:0c:a6:f0:b0:ae:
                    30:58:b8:74:60:ea:6a:33:39:e7:56:32:d1:87:ca:
                    6a:a4:c9:01:84:16:97:bb:c0:11:18:d9:d8:8a:c8:
                    ed:2d:da:0b:68:e4:69:42:aa:a9:7e:64:b2:0b:92:
                    75:c4:37:7b:c4:a2:39:f1:12:11:26:2b:95:c7:b6:
                    87:25:88:a9:cd:25:bc:32:13:36:e3:6a:4e:ab:fc:
                    c8:60:14:82:50:01:d6:f7:de:22:73:ce:30:dd:05:
                    12:73:0b:5f:39:8e:e4:05:32:99:33:1f:0a:74:5c:
                    74:16:c3:f4:2b:ee:55:0f:79:58:8e:52:2f:b9:11:
                    76:5a:f2:ed:60:84:89:a0:50:70:d5:50:8a:f6:b7:
                    73:41:04:3a:69:94:be:7e:b8:bf:72:f3:d1:9b:58:
                    7d:39:5b:04:51:32:57:13:d8:f5:0b:2c:0a:66:9d:
                    94:c7:da:01:5d:9b:d3:da:1f:aa:07:ca:a6:63:ba:
                    42:61:6f:20:0b:2b:39:59:a0:a2:d3:09:eb:28:d0:
                    40:71:06:fa:13:c5:bc:d6:96:8a:10:af:0a:76:84:
                    9b:43:79:26:34:48:ee:46:59:a2:c9:01:ab:68:c4:
                    0c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:13:FD:C4:34:74:F6:07:6B:B7:23:6D:26:5C:E4:4B:12:7B:EA:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ce34d613-0e63-32d4-a6da-2fe230b7706f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:56:83:e0:69:dc:b4:0e:c1:36:db:da:2c:51:50:c2:91:d0:
         02:04:bf:53:a8:6e:ec:9f:3b:9c:59:94:2b:09:57:bb:63:0e:
         ba:c2:26:ee:75:25:66:90:3f:3e:b8:7d:c6:79:b2:e3:00:b3:
         0c:47:af:ef:ae:01:a8:e1:6e:8f:a3:83:ab:3d:04:ec:3b:7f:
         aa:35:b0:19:40:d4:a0:8b:6b:0f:df:71:35:69:b0:a6:0b:43:
         68:af:2e:c3:d1:a0:99:a2:67:a7:99:05:f4:bf:b3:81:61:d8:
         c5:c8:e6:49:c9:5c:b7:f4:a1:dc:00:62:9d:3e:04:8b:0b:1b:
         6d:f2:f9:4a:ad:5d:4c:9e:c8:40:ed:96:3b:5f:4f:98:18:51:
         0d:74:23:eb:64:53:0b:b0:4f:1c:98:63:25:5c:b8:a9:db:e3:
         bd:cc:b5:06:38:a3:41:82:e4:a0:70:4e:67:29:cc:fc:b8:74:
         d5:e7:71:12:aa:35:35:1d:67:60:ee:23:fd:ab:e8:ac:1c:76:
         c7:80:8c:d5:cb:8f:cd:02:f8:24:89:0f:58:e9:ba:55:80:26:
         8f:d5:f6:2f:84:32:a4:db:14:42:34:12:85:6c:3c:f1:27:28:
         8c:7c:af:40:22:e8:76:bc:72:4c:0f:f9:f7:b4:69:24:00:43:
         81:c6:b3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:08:06 2026 by rpki-client