Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/6cceee4d-2d2e-3ca8-8722-690c995dafdc.roa
File:                     6cceee4d-2d2e-3ca8-8722-690c995dafdc.roa (raw, json)
Hash identifier:          03G4Zu0t9keE06i8XCo2QwUqOQz2z9W087vrFIJjC7o=
Subject key identifier:   FD:81:B4:C3:EC:08:85:1B:52:A1:04:0B:5D:52:BA:84:E8:0F:3A:4A
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584EF2E75D0F3D39D95142716C40
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/6cceee4d-2d2e-3ca8-8722-690c995dafdc.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     13807
IP address blocks:        97.107.196.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:5d:0f:3d:39:d9:51:42:71:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=b0d278b8-82f0-407f-954d-ced050fd5b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:37:d4:70:b5:95:ed:39:93:23:60:76:cf:05:
                    dc:95:5f:03:c1:fe:21:59:dd:8f:6e:92:77:f0:19:
                    fd:49:c5:e0:6f:ae:14:9c:03:12:e8:3c:e2:92:72:
                    b4:cf:0c:7b:97:bd:d0:7d:1b:74:b6:91:1f:c1:5e:
                    40:d6:28:96:4d:52:25:6f:f9:53:3e:44:e7:16:be:
                    66:3e:61:fa:11:0a:6f:5a:a1:3b:41:9f:25:95:bb:
                    51:c0:55:90:21:c0:ce:05:d1:06:fc:d3:b7:74:bf:
                    78:d3:5c:38:98:a3:c1:a7:a4:4e:b6:d9:47:50:b8:
                    d5:80:42:98:e8:aa:20:69:f3:20:be:b8:0e:77:da:
                    10:7e:ab:e4:4c:bc:b9:0d:66:62:2d:fe:91:b3:b4:
                    1a:08:80:6b:af:48:b7:b5:a3:3d:31:ff:12:e9:b1:
                    be:83:90:3e:9d:17:20:ec:4d:6d:24:ae:ff:c2:73:
                    48:54:93:d6:c4:98:d8:3c:3b:bb:8d:5f:0b:d6:2c:
                    8a:88:f2:87:64:8b:00:f1:51:68:12:2b:9f:24:d7:
                    12:18:66:ea:c1:80:cf:15:3c:ff:16:80:1e:b8:70:
                    f4:e3:4a:9b:28:6d:fc:18:ba:7e:d2:28:a8:83:50:
                    74:c3:a6:80:38:03:4d:ed:4e:16:da:5c:15:b8:73:
                    98:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:81:B4:C3:EC:08:85:1B:52:A1:04:0B:5D:52:BA:84:E8:0F:3A:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/6cceee4d-2d2e-3ca8-8722-690c995dafdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.107.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:dd:28:0f:d1:6a:fd:aa:60:33:62:c1:45:1d:67:f8:db:b7:
         fb:78:67:30:fd:3a:9e:54:bf:f5:42:8e:2d:2d:30:37:67:f0:
         f4:21:71:5c:ae:58:29:b6:78:89:a3:3d:6f:15:0e:21:9e:35:
         43:87:4e:8a:f6:7e:06:de:64:89:3a:12:99:5d:e0:51:b7:f8:
         e6:93:71:62:88:8e:1d:41:19:b1:d7:6d:63:ca:e2:ee:cf:a0:
         e1:69:e6:a6:68:da:8d:d9:ba:97:38:8f:34:ef:42:5e:1e:1d:
         96:31:27:97:94:42:bb:f8:e9:44:9e:71:60:4e:03:90:7e:ea:
         03:29:51:d0:54:f5:e7:78:98:df:71:64:f2:ef:9d:de:3a:ba:
         65:4b:fd:98:ae:b7:03:a5:f3:c5:e6:fe:54:58:f8:0b:15:2a:
         ac:28:79:10:42:e6:93:5e:a0:21:1d:2d:80:4e:77:1c:17:b1:
         fe:10:1a:a7:65:fa:3a:9d:44:11:f8:5d:67:bc:8a:40:e8:c9:
         62:50:d4:0a:40:be:8b:7b:2c:f5:64:7c:28:b3:fc:30:b6:1f:
         84:64:8e:c5:88:af:0d:8e:53:f0:21:4c:8f:9d:69:4c:13:6e:
         00:95:f5:80:aa:3b:03:60:83:f8:26:d4:2b:95:7c:39:22:4f:
         4f:b3:4c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:23:53 2026 by rpki-client