Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/0799c6c3-fa33-38b0-85b7-253ce955c08d.roa
File:                     0799c6c3-fa33-38b0-85b7-253ce955c08d.roa (raw, json)
Hash identifier:          FrResyipj0o339P0G2Vay8WFAPWyJhT9Ja3oVy8EOW4=
Subject key identifier:   91:1A:93:70:A6:8F:89:26:0D:9B:71:62:81:6B:19:0F:2C:65:B9:81
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584EF2E7598D8CEE2AA700DBCA80
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/0799c6c3-fa33-38b0-85b7-253ce955c08d.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     13807
IP address blocks:        97.107.198.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:59:8d:8c:ee:2a:a7:00:db:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=b0849417-51f5-438b-be5b-c604035a374a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:cd:6c:2b:10:91:c6:6a:b0:fc:0f:dd:e6:
                    e7:b6:d6:94:ea:e5:bc:6e:53:63:9c:9c:1c:3b:6c:
                    6b:b2:0b:d7:62:5a:85:36:72:9b:b9:8a:09:17:bf:
                    13:24:41:26:5f:e3:a5:4e:f9:a5:48:85:28:0d:15:
                    0d:e5:db:c2:6c:18:5c:dc:1b:43:e8:04:ae:7a:f0:
                    d6:64:35:d6:d4:f0:a2:20:c2:82:a8:df:17:77:4a:
                    49:af:49:15:9e:b6:19:eb:47:a1:ef:73:7d:00:cb:
                    18:43:bf:23:cc:a4:2b:6e:99:e3:58:d9:48:90:23:
                    d3:fc:de:4d:4b:23:eb:29:4e:c2:4c:ef:21:73:86:
                    48:2c:8f:52:87:4d:1f:66:82:c2:fd:28:b9:b6:fb:
                    65:91:5d:0e:4d:dc:36:16:c4:75:ae:9c:e9:b0:c6:
                    f7:84:07:a5:ef:45:e9:c4:c4:58:87:f3:92:b4:c6:
                    69:73:0d:8c:78:0c:97:73:6d:85:01:5c:d0:b4:2b:
                    6c:d9:3e:34:1a:3e:31:82:30:18:c4:e5:d3:ac:4a:
                    e5:2b:4b:e9:5e:7d:0d:12:b9:92:ac:75:ac:e1:87:
                    dc:57:a4:36:77:d5:84:e8:00:e9:6e:d2:05:a3:c3:
                    bf:a6:ea:bd:3a:6c:e6:d1:af:c8:e4:69:79:aa:47:
                    67:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1A:93:70:A6:8F:89:26:0D:9B:71:62:81:6B:19:0F:2C:65:B9:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/0799c6c3-fa33-38b0-85b7-253ce955c08d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.107.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:85:cf:42:86:f5:99:0d:52:64:07:61:30:37:db:71:ba:ec:
         9c:b3:b9:60:7b:2c:7b:97:a2:a1:88:d0:47:5e:d9:17:89:6a:
         03:a6:7c:93:1f:0d:11:9d:c0:f5:db:a8:96:4c:10:9c:18:3f:
         06:ba:6c:29:3e:c0:19:3c:8e:38:36:b0:ed:d8:00:6d:17:20:
         74:63:3a:ae:aa:94:cc:01:af:78:5b:1f:97:1d:90:b7:03:a0:
         f8:98:c6:f4:69:0d:f8:42:36:2e:8d:04:dc:a6:d5:ba:d1:68:
         81:e9:9d:e5:72:d3:db:c7:29:f9:19:64:d9:2f:1d:11:90:6d:
         80:15:5b:4b:cc:17:75:de:a9:a1:6a:7d:3b:37:f6:da:54:7d:
         e7:cf:25:d9:6e:f3:4d:1b:b2:ab:ca:6d:98:70:f4:8b:5e:4b:
         5c:0b:0e:cc:88:6d:c9:64:d9:41:b4:ef:83:46:79:a9:d3:a6:
         3a:1c:5d:db:d8:4f:68:c3:31:56:86:d6:c3:08:20:6f:be:56:
         aa:49:04:08:fb:ca:14:a4:f6:87:84:b1:f2:bb:7d:2e:99:7b:
         ef:04:9c:ac:12:62:fa:8f:28:06:f0:a8:ad:e9:ee:eb:9f:cd:
         8c:0a:85:ce:a8:3c:e5:ed:8d:61:7a:74:b5:d2:5a:6d:ae:42:
         50:11:87:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:24:23 2026 by rpki-client