Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/971d87c0-f9b6-332d-91fd-25349ddb466b.roa
File:                     971d87c0-f9b6-332d-91fd-25349ddb466b.roa (raw, json)
Hash identifier:          57vGIdo+FeRzEgZDI6YktdhLRZxaGz82bbJLkT5t/NU=
Subject key identifier:   47:48:98:E3:88:E9:E6:A3:C4:95:4D:DD:1F:D4:18:5E:19:EE:57:D7
Certificate issuer:       /CN=9af44307-21f9-411b-ba04-dedf105fd206
Certificate serial:       010D0C9F4328584E43F475A4ADC256FBD8E6B400
Authority key identifier: 73:39:24:7A:51:CC:FB:32:E2:8F:DB:CD:D0:3D:8E:32:83:F7:E9:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/971d87c0-f9b6-332d-91fd-25349ddb466b.roa
Signing time:             Tue 23 Jun 2026 09:00:12 +0000
ROA not before:           Tue 23 Jun 2026 09:00:12 +0000
ROA not after:            Mon 21 Sep 2026 09:00:12 +0000
asID:                     13335
IP address blocks:        155.103.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:43:f4:75:a4:ad:c2:56:fb:d8:e6:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af44307-21f9-411b-ba04-dedf105fd206
        Validity
            Not Before: Jun 23 09:00:12 2026 GMT
            Not After : Sep 21 09:00:12 2026 GMT
        Subject: CN=eab6131d-c94b-44f2-8e82-8b1da93b9985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0c:d6:77:75:4e:75:49:b7:2c:cd:2e:55:07:
                    fa:69:11:79:63:06:85:43:90:72:d1:2e:69:68:90:
                    13:b1:09:2f:b1:5f:5e:be:c6:b7:22:3e:c8:3f:6d:
                    34:1c:f0:7b:e2:7d:df:9a:ee:39:5c:dd:ce:72:50:
                    01:10:0f:03:e9:c7:7f:48:e1:31:03:06:c4:2b:15:
                    f3:80:ed:f9:9e:81:f5:a7:a7:66:da:3d:9c:2a:64:
                    99:5b:87:2d:84:41:eb:b7:7b:16:ac:9f:d5:a4:b9:
                    7d:c1:52:f9:45:33:b1:ac:e0:df:80:c6:0b:94:b0:
                    e7:ee:77:36:2e:0a:71:fa:6d:2e:ff:72:d0:b4:0e:
                    a8:9e:02:ce:0f:4b:4d:78:69:32:3a:c6:8e:54:f8:
                    31:f2:51:eb:5d:c4:7c:d6:50:ae:13:76:b6:b4:7d:
                    64:c1:64:37:c1:0f:90:47:f0:b3:ca:8e:9c:9f:4c:
                    2b:8e:a4:b3:01:22:e5:55:3c:1c:5b:8d:c8:e9:20:
                    98:b8:ad:c7:83:38:06:65:bb:51:70:b7:0a:8d:1e:
                    22:80:65:86:4b:c8:23:63:91:51:62:d5:57:c4:66:
                    90:5a:b1:3b:af:ae:56:31:df:24:90:b2:bf:fd:30:
                    01:df:71:4e:6f:ac:58:c0:d6:18:3d:cb:a0:24:8f:
                    0a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:48:98:E3:88:E9:E6:A3:C4:95:4D:DD:1F:D4:18:5E:19:EE:57:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/971d87c0-f9b6-332d-91fd-25349ddb466b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.crl

            X509v3 Authority Key Identifier:
                keyid:73:39:24:7A:51:CC:FB:32:E2:8F:DB:CD:D0:3D:8E:32:83:F7:E9:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:11:8a:ff:74:67:ec:fc:3e:ec:27:95:9d:06:53:64:1c:46:
         f8:64:86:87:37:49:3d:fb:37:8e:59:19:03:ad:8c:a5:21:74:
         3a:f1:2d:50:18:34:72:47:3f:50:e4:91:2b:d6:00:16:4b:7e:
         cc:27:b7:2d:99:de:42:ac:8d:79:e7:d2:da:20:ad:6e:9a:8d:
         f0:92:80:dd:22:39:4c:3b:ec:9e:89:e2:d0:e2:be:f9:42:20:
         65:fe:01:23:75:17:ef:f7:06:87:98:cf:2b:2a:cf:46:f0:ac:
         54:cb:23:08:ee:e4:b0:26:6f:5a:0f:62:04:03:4a:d1:e7:28:
         23:ae:f4:08:5b:4c:01:9c:3a:be:4d:6e:dc:ba:3b:c0:e7:da:
         88:31:a9:2d:3c:5c:92:3e:e2:0d:e5:84:e9:bf:a5:7a:1b:db:
         15:49:14:02:82:6a:dc:92:cb:75:7a:2d:9e:6e:9e:7f:4c:5a:
         da:bc:f0:6c:30:35:cc:77:34:1c:7a:af:fb:af:a2:31:0b:df:
         be:76:fd:15:92:97:97:77:f2:83:ee:cd:35:80:a5:30:79:08:
         de:b5:f7:36:f6:79:09:ef:e0:b9:39:e1:b2:57:4e:08:21:64:
         a8:6e:68:02:58:c0:ed:d9:f2:62:26:d3:ee:55:cf:cc:2d:91:
         c7:64:39:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:51:51 2026 by rpki-client