Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/2348c909-1ee0-373a-9045-b210f334fb48.roa
File:                     2348c909-1ee0-373a-9045-b210f334fb48.roa (raw, json)
Hash identifier:          yY2gopi4MLIEyzFwVL1w2uaf3ZdDiCkmisDIvbaTVxU=
Subject key identifier:   64:0F:6B:73:15:03:32:52:44:67:BB:E0:58:FE:D2:AD:07:3D:39:16
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F4328584EDC91FB43FFA438967D757100
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/2348c909-1ee0-373a-9045-b210f334fb48.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        206.108.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:fb:43:ff:a4:38:96:7d:75:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=25e5cf51-467a-46c3-b09a-341a0821733e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bf:84:29:d7:da:fe:4f:78:73:5e:8d:07:1d:
                    c9:6d:c6:0c:4e:9f:42:72:e5:aa:f3:6c:e4:c9:09:
                    5e:60:16:a3:2e:15:fe:39:77:cd:70:db:69:d8:1f:
                    d8:a4:e6:66:fd:61:7a:40:9e:e1:03:08:01:22:ad:
                    78:28:51:f3:1a:34:09:93:eb:ec:66:4e:d5:b0:76:
                    89:88:78:37:c5:ee:14:51:42:74:6b:75:1e:45:d7:
                    71:f3:62:32:18:96:57:86:31:95:0e:35:61:67:2d:
                    f9:a8:df:cc:00:3b:45:87:08:1e:88:47:ca:c7:13:
                    5f:13:48:bd:7f:84:87:01:cd:88:db:ae:e3:2b:7a:
                    c6:fa:d1:9a:f6:51:d6:8a:3a:37:cc:a5:a0:44:04:
                    f3:3e:e7:d7:6c:9e:5e:a4:a3:5c:db:47:c5:7f:9c:
                    a0:89:35:03:8e:cb:71:2f:cf:0e:35:72:92:39:f8:
                    8d:90:72:20:31:dc:7e:98:e4:72:e4:ee:5b:87:fd:
                    70:38:66:01:98:a5:ea:d0:46:c3:0c:12:36:51:2e:
                    56:6a:6e:71:46:8a:48:7a:56:c8:38:7c:e4:70:c7:
                    6b:c0:ae:b7:6e:f2:90:b0:52:95:ef:46:b8:98:a0:
                    e2:26:66:f3:77:23:3a:d8:c9:c7:0b:4d:e4:56:91:
                    fd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0F:6B:73:15:03:32:52:44:67:BB:E0:58:FE:D2:AD:07:3D:39:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/2348c909-1ee0-373a-9045-b210f334fb48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.108.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:37:fb:d7:d9:f1:c2:a0:78:db:51:b9:24:12:ed:ed:a5:28:
         4c:db:af:85:a6:f3:87:11:ac:04:6f:8e:a1:1e:ca:8f:05:01:
         7a:ee:c6:1c:a6:e5:c8:a7:30:32:ee:cd:0f:5a:cc:f6:d9:93:
         7a:78:73:84:89:fc:e2:f4:0c:6e:d4:7b:db:4f:b1:d1:cf:49:
         42:3f:75:eb:11:3e:88:bc:fd:4f:af:ff:25:17:3f:11:4b:0f:
         6a:e9:db:db:81:94:43:df:02:16:09:c5:e1:b7:30:13:e0:39:
         20:91:6a:31:a7:5a:e9:49:fd:52:66:ab:54:bf:78:bb:20:f9:
         2a:57:6d:32:8d:1a:a3:d4:df:d8:4d:e0:b9:ff:92:4a:e9:d1:
         20:28:2b:ff:c3:c4:2d:31:d5:09:ef:9a:df:ed:f0:85:f7:f3:
         8b:22:c4:3d:57:cb:fb:73:d2:62:8b:91:04:22:31:b9:85:78:
         7f:bc:71:39:e4:d6:6e:1e:a8:d2:d1:9a:51:d1:90:b3:42:26:
         55:6b:1f:ff:92:47:a2:47:e2:7e:9f:0a:99:aa:68:42:3e:b0:
         95:e6:cf:29:53:56:6b:b7:44:b6:c1:3f:61:57:1f:aa:1f:38:
         18:7f:eb:49:ec:d6:77:5c:2f:5a:7f:18:71:5e:2e:e8:75:73:
         09:29:81:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:44:47 2026 by rpki-client