Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/32420d78-119d-3d94-bfd4-6b05204f496f.roa
File:                     32420d78-119d-3d94-bfd4-6b05204f496f.roa (raw, json)
Hash identifier:          B41Fmt2YPaPG8JtIbtm+gQg+Vmkow4zJwRiXFz3dK7U=
Subject key identifier:   63:6C:30:67:6D:E7:CE:84:06:14:A8:BB:4C:A4:CC:8D:F8:4E:0D:57
Certificate issuer:       /CN=4d9dc039-b411-4feb-8901-e0f700ab5da0
Certificate serial:       010D0C9F4328584F7D2A720769C5C8C9A93CAE00
Authority key identifier: E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/32420d78-119d-3d94-bfd4-6b05204f496f.roa
Signing time:             Tue 13 Oct 2026 13:37:01 +0000
ROA not before:           Tue 13 Oct 2026 13:37:01 +0000
ROA not after:            Mon 11 Jan 2027 14:37:01 +0000
asID:                     26337
IP address blocks:        108.175.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7d:2a:72:07:69:c5:c8:c9:a9:3c:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d9dc039-b411-4feb-8901-e0f700ab5da0
        Validity
            Not Before: Oct 13 13:37:01 2026 GMT
            Not After : Jan 11 14:37:01 2027 GMT
        Subject: CN=c3ef3fa9-6da8-4fc3-9a49-5ee07d7c8d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6b:77:08:1c:c2:87:71:ba:9b:a2:8b:b0:3c:
                    87:37:b0:50:7a:a5:2d:bd:6e:b6:13:83:70:f7:c3:
                    80:d6:99:91:79:cd:8d:3b:76:85:af:31:a8:d9:4a:
                    3b:6a:8b:80:66:04:03:35:10:bf:cb:94:83:c9:34:
                    de:06:f8:fe:8a:20:b0:7b:72:c9:e3:00:79:b8:4a:
                    43:08:ec:86:0c:29:12:33:38:6c:80:6b:89:a8:ad:
                    26:20:85:58:ea:ef:d0:66:a9:c1:9b:10:a8:83:d6:
                    91:84:ac:0b:86:65:ad:36:09:40:44:91:66:4d:fb:
                    fd:e0:f7:5f:a7:4b:2c:ab:51:31:46:99:42:68:c1:
                    35:dc:70:45:43:f5:16:00:45:19:95:49:1d:4a:ce:
                    1c:b5:0d:93:af:99:ea:61:a4:4a:4e:83:1b:2b:6c:
                    40:6c:fa:33:03:fa:1d:33:58:69:78:3c:fe:39:d9:
                    84:9a:ee:4e:3d:a3:35:25:02:c2:a2:4e:97:e5:01:
                    04:10:b0:a4:3f:7f:56:59:ae:f6:7b:eb:04:ed:95:
                    09:ac:da:74:fc:0e:03:2b:92:8b:f3:50:62:78:fd:
                    15:8d:2b:10:cc:56:fb:67:d7:9e:4b:f3:02:96:5b:
                    e4:b7:8b:8b:1e:b2:54:67:2a:6c:ab:2a:f8:47:5e:
                    84:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6C:30:67:6D:E7:CE:84:06:14:A8:BB:4C:A4:CC:8D:F8:4E:0D:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/32420d78-119d-3d94-bfd4-6b05204f496f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl

            X509v3 Authority Key Identifier:
                keyid:E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.175.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:96:0e:55:0f:60:b3:94:5b:a6:9e:a2:49:82:4b:0d:4c:84:
         35:8c:48:95:01:a3:6d:12:63:bd:13:48:ba:ce:23:4e:be:7c:
         8b:67:2f:01:05:80:d2:f7:26:d8:3e:32:e2:3f:f7:23:b1:6d:
         ca:85:2d:27:37:0b:5d:4a:de:60:d7:19:75:12:07:83:68:92:
         4d:59:79:99:4f:44:4a:25:d4:69:23:3e:8c:4e:b0:89:7b:96:
         d1:8a:3f:26:b4:25:68:c0:72:06:63:bf:eb:e4:75:0f:d9:bd:
         04:76:ae:9c:98:49:6e:2a:68:f2:d9:7d:0b:ff:88:27:34:37:
         78:80:96:67:54:17:73:57:f9:cd:9e:88:ab:bd:e8:27:aa:51:
         db:c6:f9:9f:6b:d3:57:40:71:e6:97:a4:f8:47:b5:f3:63:c2:
         0d:96:1f:2f:96:02:ad:56:26:78:1d:59:dd:39:89:0b:0d:49:
         62:1a:c5:02:d4:6a:44:43:a2:b8:b3:f6:76:79:4b:73:30:20:
         00:9e:5a:57:f3:a9:39:00:f8:1e:3f:e5:25:e5:59:73:83:ee:
         a1:b8:0f:a8:d1:2c:83:1c:0b:a4:89:49:cf:c8:5b:e9:d3:b8:
         8b:9f:72:71:80:83:60:03:bc:3e:41:3a:16:0a:b9:60:66:79:
         04:c4:6c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:17 2026 by rpki-client