Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/837e7fe2-dc91-3fae-ab4e-cc3a88b2fb16.roa
File:                     837e7fe2-dc91-3fae-ab4e-cc3a88b2fb16.roa (raw, json)
Hash identifier:          KKiGmBhx9MrY8uJGcklAGQy5lsPI8UDkFnOcrgyjKkU=
Subject key identifier:   97:57:F5:33:BB:8E:4B:B0:A8:1A:5C:21:57:40:A8:68:D4:45:6C:BE
Certificate issuer:       /CN=9af44307-21f9-411b-ba04-dedf105fd206
Certificate serial:       010D0C9F4328584F89A84D0ECCD9BBFAC630A080
Authority key identifier: 73:39:24:7A:51:CC:FB:32:E2:8F:DB:CD:D0:3D:8E:32:83:F7:E9:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/837e7fe2-dc91-3fae-ab4e-cc3a88b2fb16.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     54365
IP address blocks:        155.103.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:4d:0e:cc:d9:bb:fa:c6:30:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af44307-21f9-411b-ba04-dedf105fd206
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=2dc5b1c0-1bf5-4cb8-b5fa-d19c569abbb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:59:ec:b5:53:b7:28:2b:d0:dd:05:f8:5e:fa:
                    c4:a7:cf:06:26:af:39:80:68:d8:e0:3e:3c:58:d7:
                    7f:a4:1b:85:17:58:1e:f2:f6:85:2f:a3:dc:ed:01:
                    77:b3:17:ab:36:57:a5:cc:a3:bd:63:a0:cb:79:88:
                    12:6f:9c:4e:54:82:24:20:68:b2:67:7d:a2:47:8b:
                    a6:e4:05:29:25:69:14:de:f1:e3:0d:e1:03:61:f8:
                    93:f0:a9:85:cf:c9:bc:88:22:5e:db:a8:b5:a4:cf:
                    d4:58:0b:3d:22:26:de:55:8b:93:0e:6e:69:db:8a:
                    87:c3:b7:24:a9:c2:86:3e:9b:40:77:86:d4:a2:cd:
                    79:00:6c:6c:5f:c6:24:64:a3:56:e5:ef:23:04:1d:
                    d2:34:8c:30:5e:b1:9a:b5:11:0b:39:92:44:6d:f6:
                    6f:92:77:1b:5a:02:2b:2e:23:1b:09:17:45:36:0e:
                    3a:67:be:34:bb:dc:b4:a9:15:f3:65:5a:93:f8:f5:
                    d7:56:cf:e4:af:da:37:c8:7c:e0:53:35:5b:38:c5:
                    67:79:b0:4d:b1:d0:fd:9f:bc:f3:f3:f5:f9:0f:32:
                    e9:22:2d:2e:77:b0:76:54:3c:48:aa:d6:bb:52:0d:
                    cf:29:37:b7:d9:5a:9b:24:7d:c0:38:63:0c:9d:36:
                    48:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:57:F5:33:BB:8E:4B:B0:A8:1A:5C:21:57:40:A8:68:D4:45:6C:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/837e7fe2-dc91-3fae-ab4e-cc3a88b2fb16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.crl

            X509v3 Authority Key Identifier:
                keyid:73:39:24:7A:51:CC:FB:32:E2:8F:DB:CD:D0:3D:8E:32:83:F7:E9:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:d9:6f:35:b3:8b:07:78:1c:37:bb:b4:84:26:89:92:a7:fb:
         d1:5f:1c:52:7f:2b:97:39:f0:4e:dc:a7:74:f8:76:36:d7:2a:
         c4:e3:b3:07:f8:ae:f4:02:21:4f:a5:61:fe:01:01:a8:db:64:
         90:99:7b:d6:3e:1c:36:57:10:ff:88:93:42:c5:9d:da:18:38:
         20:40:17:c9:8e:7c:9f:d4:3d:29:33:8a:27:da:6b:24:ae:86:
         e2:b1:5a:71:89:a1:2c:e5:56:ca:bd:af:44:0f:51:50:cc:f3:
         a6:a7:2e:63:ef:48:8f:80:1c:c6:da:a5:53:67:cb:2f:a9:08:
         36:10:6b:c9:ae:58:90:b8:3c:e1:09:94:4e:c3:79:b1:91:d0:
         7c:2c:0d:4c:f5:5e:33:2b:be:86:27:38:8d:cd:00:1c:d4:7a:
         4c:03:45:d3:34:d6:f0:ba:cf:db:c9:df:83:9c:69:19:48:7d:
         3f:73:59:2f:09:36:2a:85:bd:75:b6:3d:b1:90:02:f1:84:96:
         90:65:bb:db:e3:bc:94:84:7b:d9:c7:12:2e:80:ad:ab:50:28:
         df:32:42:95:20:19:8c:9b:39:6a:09:d5:30:53:2e:2f:92:c4:
         17:3c:33:99:72:94:b1:0b:24:9b:b7:fd:0f:6c:ee:40:85:b1:
         7b:18:18:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:47:30 2026 by rpki-client