Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/79befa65-2932-354e-aa3c-9d8fa2f95a14.roa
File:                     79befa65-2932-354e-aa3c-9d8fa2f95a14.roa (raw, json)
Hash identifier:          WJEuDjLXbqFa69YXgvr9DR7Cwc5PH4iD1EEW6Kn/zHA=
Subject key identifier:   4E:4F:F3:F4:15:CE:F3:17:39:57:00:4B:91:DC:5C:71:68:26:CC:CD
Certificate issuer:       /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Certificate serial:       010D0C9F4328584FA5933DB34EFCC80C8EEC6340
Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/79befa65-2932-354e-aa3c-9d8fa2f95a14.roa
Signing time:             Wed 28 Oct 2026 01:00:13 +0000
ROA not before:           Wed 28 Oct 2026 01:00:13 +0000
ROA not after:            Tue 26 Jan 2027 02:00:13 +0000
asID:                     8014
IP address blocks:        108.60.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a5:93:3d:b3:4e:fc:c8:0c:8e:ec:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
        Validity
            Not Before: Oct 28 01:00:13 2026 GMT
            Not After : Jan 26 02:00:13 2027 GMT
        Subject: CN=e6103106-f712-48e4-a518-dbe2796a2d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:79:b6:ab:fc:18:7a:bd:af:8e:28:ed:53:20:
                    79:a7:f1:5d:c1:62:56:55:57:4a:fe:92:22:29:dd:
                    ed:d8:87:5e:bc:23:a8:3d:1b:18:3f:10:c4:5e:fe:
                    f8:03:32:0b:4a:e6:25:01:22:a9:9f:7b:69:84:24:
                    dd:df:ba:14:d6:3a:88:33:6e:91:24:cd:de:ff:67:
                    b0:02:c2:6c:d0:a6:82:6c:4d:77:00:7e:68:06:8c:
                    65:27:26:05:63:87:ff:4c:96:7d:3d:bc:6e:56:dd:
                    8b:de:89:32:0b:1e:f0:fc:74:93:f2:80:04:1f:32:
                    c7:8b:a1:53:91:cb:9e:0f:6d:3b:48:d7:3e:3d:cf:
                    cf:3e:92:3e:cf:9f:c8:a6:bc:26:fd:f9:9d:b1:e4:
                    ca:89:cb:d8:aa:b6:d1:c1:97:d5:6f:87:cd:27:e1:
                    df:14:f7:62:00:a2:22:38:dc:d3:aa:5a:4f:76:a6:
                    9d:b4:56:e5:7b:b2:e6:19:e9:60:f1:52:23:57:c5:
                    6c:28:12:d7:37:e5:38:5a:77:93:8d:e1:17:ca:fc:
                    7c:ef:49:23:dd:63:b8:79:99:bf:eb:6a:6f:d7:70:
                    de:aa:ec:c1:3c:33:fd:cf:a6:6f:47:0f:d4:71:a4:
                    5d:73:0b:0c:a9:04:49:ec:ba:77:78:16:bd:0f:98:
                    45:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4F:F3:F4:15:CE:F3:17:39:57:00:4B:91:DC:5C:71:68:26:CC:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/79befa65-2932-354e-aa3c-9d8fa2f95a14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl

            X509v3 Authority Key Identifier:
                keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.60.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:91:f0:89:4a:5e:b2:7b:cc:f0:4f:62:0f:39:a3:17:7a:c1:
         c0:ee:ad:59:c2:59:04:61:64:18:94:d0:31:56:52:73:08:cb:
         ea:fc:9f:8c:58:be:8f:10:15:5d:d4:6f:10:b1:79:ed:74:15:
         70:a3:cb:73:30:8f:8e:04:df:15:ab:a4:ec:42:e9:7b:a1:e4:
         d3:7c:d4:44:79:39:94:c4:a7:b8:34:ff:ed:db:50:c8:25:e9:
         5d:ab:7d:23:83:9d:a6:93:c8:d4:2d:38:6b:91:51:32:1a:17:
         13:ea:27:2a:42:6e:37:74:9e:dc:59:13:be:28:3c:b1:e7:31:
         e1:a5:20:d3:a7:35:53:0c:01:89:07:f5:75:09:9c:1b:c8:bc:
         69:e1:b9:56:c8:8a:6c:85:40:8d:29:1e:b9:0c:2c:db:4c:86:
         b9:0d:2a:0a:b5:a7:be:d4:a9:9f:72:de:de:60:58:6a:17:ab:
         06:17:bc:db:35:07:01:03:60:e7:e3:8a:e2:22:c0:57:b8:65:
         7f:ab:32:be:c0:9c:1a:30:8e:aa:76:61:57:13:b3:de:18:25:
         e1:be:f8:41:20:b8:77:33:a3:ee:c3:1a:b5:18:39:e5:4e:a0:
         b4:8c:a8:c3:1a:b5:b3:19:15:36:ce:16:be:c4:6f:3c:e8:63:
         58:30:5d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:36:42 2026 by rpki-client