Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/14bb2815-17b3-36ca-b86b-40cc4786f2b9.roa
File:                     14bb2815-17b3-36ca-b86b-40cc4786f2b9.roa (raw, json)
Hash identifier:          goAhFcfpSWK9luL86btsO7EOilkSCva77yqs75+Sjnw=
Subject key identifier:   FF:D9:E6:EC:F9:5F:BF:75:1A:BB:AA:0C:84:4A:38:7F:E6:9A:C8:90
Certificate issuer:       /CN=4d4940f4-61c2-4251-acdb-36be83cdc744
Certificate serial:       010D0C9F4328584EA788B56F3F5C6737ED114360
Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/14bb2815-17b3-36ca-b86b-40cc4786f2b9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6407
IP address blocks:        108.63.18.0/23 maxlen: 24
                          108.63.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:b5:6f:3f:5c:67:37:ed:11:43:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b99187b6-0d58-41c2-b56e-48a73f8191d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:3f:72:77:ec:6b:0f:cd:bd:1e:0a:64:1b:
                    7b:b8:d4:62:1e:58:b1:61:f5:67:0e:ed:c4:f1:74:
                    64:a5:37:5d:74:1d:e9:5d:6c:59:ad:61:71:86:bb:
                    00:f1:4d:9f:54:98:bc:7a:e1:e8:49:0f:73:fe:ba:
                    8f:69:36:94:17:e1:df:70:ca:10:84:7a:f5:b6:b0:
                    aa:73:e6:ef:c1:70:a6:03:0e:23:3a:30:db:96:e9:
                    bc:f7:89:f6:28:51:6c:ae:40:39:75:64:4c:29:80:
                    85:9f:b3:e5:3e:42:b3:a8:0f:20:21:8f:d3:06:6c:
                    15:b9:29:b5:96:eb:57:19:2a:28:94:9c:67:4f:8f:
                    8a:91:c1:2b:b8:58:ef:22:ea:b9:fb:f5:cd:30:38:
                    38:32:7b:09:55:ba:ba:62:eb:0c:37:48:e6:19:12:
                    a6:53:4b:8a:04:4d:4f:ac:c0:8c:58:58:9c:b7:83:
                    f0:c6:8e:ff:03:62:64:69:ad:65:be:ab:f3:b4:3f:
                    e5:71:ab:67:22:b4:5a:66:a5:21:2d:85:1e:ed:64:
                    44:3b:32:6c:1e:33:54:17:b7:85:df:5c:4a:0b:dd:
                    31:34:fe:f3:70:3c:5d:ec:2f:d9:61:1b:ee:9b:32:
                    e8:58:63:85:b6:69:1a:48:93:7b:04:5e:f0:ec:f0:
                    d2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D9:E6:EC:F9:5F:BF:75:1A:BB:AA:0C:84:4A:38:7F:E6:9A:C8:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/14bb2815-17b3-36ca-b86b-40cc4786f2b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl

            X509v3 Authority Key Identifier:
                keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.63.18.0-108.63.21.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:1c:c1:87:22:9e:3c:fe:49:3e:b3:98:cf:da:9d:81:e1:76:
         3e:40:82:5d:9e:ca:80:e2:65:d3:64:d4:a4:c5:df:76:5f:31:
         c6:21:23:66:91:4a:f4:45:6d:47:74:3b:1b:b4:a6:55:0c:07:
         57:84:00:8b:ca:8e:06:6b:a0:a6:5a:b8:07:65:45:ce:62:f1:
         c2:bd:4d:54:a6:3a:de:a0:53:d8:3e:15:cf:8d:db:b3:fc:2f:
         89:75:c9:0a:16:c3:3b:6e:92:65:d5:1e:3d:9e:9a:13:79:66:
         53:80:88:06:61:bb:c3:18:62:08:36:94:a3:10:ff:1f:47:c6:
         4f:3d:e0:6b:26:e8:8c:73:b6:7f:4d:ce:0e:72:2f:73:0a:d7:
         10:3d:f3:96:a0:40:06:fd:7c:a6:b5:50:ef:0c:65:f8:9f:82:
         ad:a9:57:e9:e9:fd:2c:3d:14:6d:5e:2e:7c:3f:95:ef:b4:88:
         72:0d:ea:da:fa:94:54:83:81:d5:c5:02:36:41:d0:e7:a6:39:
         cf:91:74:9c:45:5f:03:3a:4e:bb:f5:6d:0a:aa:63:a9:16:ff:
         1e:ea:80:23:86:11:df:36:db:ee:01:d9:c3:dd:d8:e8:30:35:
         54:bf:32:af:41:fe:f5:46:5b:35:01:11:83:2b:12:74:92:3a:
         6a:fb:05:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:05:51 2026 by rpki-client