Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/f441c09f-0eea-375c-b13f-bceb660b2cd7.roa
File:                     f441c09f-0eea-375c-b13f-bceb660b2cd7.roa (raw, json)
Hash identifier:          vtxvxHtuVv2zkpEDEiJ/SD05UsSxd9wJ26yAnvOTOpg=
Subject key identifier:   A9:3D:CD:DB:DF:01:A9:23:17:03:54:3F:2D:90:2A:F3:A5:63:66:91
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F4328584F51D2C5529EC9C1D38B8940C0
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/f441c09f-0eea-375c-b13f-bceb660b2cd7.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     18934
IP address blocks:        162.208.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:c5:52:9e:c9:c1:d3:8b:89:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=e7598a12-6d80-41b0-8b23-981ffecf9eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7a:98:df:43:40:d8:3e:43:80:98:df:c8:2f:
                    39:39:c5:fa:1f:81:03:c5:73:a3:8b:56:38:f0:19:
                    c9:16:96:03:03:53:21:0e:74:0b:ac:85:31:0a:ad:
                    fa:55:6e:72:7f:92:a2:bc:ad:68:79:c7:65:8f:1d:
                    42:af:26:e6:b4:ac:29:b3:66:2b:69:48:63:1b:a6:
                    82:b9:bf:48:b2:48:a5:b9:cb:37:12:93:81:87:54:
                    89:6a:55:1c:0b:c9:9f:e8:c4:25:32:6f:38:db:af:
                    67:7b:2f:61:34:89:d9:df:f6:e5:73:01:52:ea:0c:
                    8d:6e:87:9b:ae:0f:de:43:f0:5c:64:7b:1e:cf:28:
                    04:3d:fb:b8:77:9f:ba:5b:41:f0:c8:e3:26:3a:43:
                    8e:3a:2e:ee:9f:4c:bf:2a:7e:c7:67:96:e1:c6:e8:
                    da:b1:a3:08:42:13:df:76:a8:3b:db:1c:3e:bf:c8:
                    cd:c6:90:d9:92:d0:1f:46:30:bd:a7:69:3e:ad:0e:
                    2b:42:e1:b5:69:d6:15:e7:4c:c0:c0:e0:1b:d1:2f:
                    f2:81:0f:c4:78:73:52:da:47:f2:46:94:da:34:11:
                    c3:85:e9:e0:de:4f:85:cc:2d:0f:32:86:80:f8:ec:
                    58:ed:63:c8:83:43:1a:36:c1:a1:19:0e:db:d0:f8:
                    de:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3D:CD:DB:DF:01:A9:23:17:03:54:3F:2D:90:2A:F3:A5:63:66:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/f441c09f-0eea-375c-b13f-bceb660b2cd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:1f:bd:91:be:e1:11:97:24:16:6b:7d:84:ee:7c:b2:7f:cb:
         e8:85:9a:27:98:e8:83:29:52:b3:cf:7a:88:4e:61:89:ff:59:
         ee:b7:a1:62:ee:c7:0e:5b:75:f0:a1:b0:c8:0e:06:1f:a7:ea:
         7d:f5:30:7b:a3:e2:29:eb:8d:af:0f:1e:78:83:57:af:34:8b:
         76:2f:9c:f3:fe:77:4a:57:a2:2e:74:4e:4c:87:84:99:d1:cb:
         cf:dd:f5:7a:e7:da:f8:92:7f:60:9d:9c:4d:a5:65:8f:67:65:
         f7:10:5c:1e:d6:4a:30:11:24:16:71:f9:cc:bc:ee:b9:9e:c5:
         f1:09:6b:97:9e:d1:3f:ef:f9:51:9e:e5:14:db:af:42:7d:d3:
         fd:04:f6:85:ae:0f:f4:b4:0d:fc:66:07:d7:36:4f:16:f0:06:
         c6:64:00:7a:2d:27:03:b7:3c:7f:35:6f:06:0e:52:9b:b4:95:
         9e:1d:3a:a7:2e:dd:c6:91:17:d5:16:9f:33:8f:91:96:bc:e4:
         ec:92:9d:81:a4:5a:6c:60:1b:c8:35:30:d2:77:d1:5a:03:6b:
         8f:f0:5d:b0:56:75:32:6a:1d:4a:f2:02:5e:af:87:7c:17:b5:
         65:2f:97:ed:ac:f4:af:95:2a:47:2d:d5:0a:22:11:67:ca:ad:
         b7:e0:b3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:12:56 2026 by rpki-client