Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e4217924-b89f-3a6b-b726-c4acf11988c3.roa
File:                     e4217924-b89f-3a6b-b726-c4acf11988c3.roa (raw, json)
Hash identifier:          Iye2BlTheZcXSOVBMaEnQniKpRQAd2xRJDjCHHp+KK0=
Subject key identifier:   FD:7E:A4:22:F7:C2:10:DE:45:52:D0:85:42:5B:54:D7:AC:CE:22:75
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D0EA7D2833B0BA35B4CE5F280
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e4217924-b89f-3a6b-b726-c4acf11988c3.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     206728
IP address blocks:        108.171.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:d2:83:3b:0b:a3:5b:4c:e5:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=b1f864c4-7c0e-4e28-a67d-9e2e58178e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:35:13:94:c9:bf:76:04:46:3c:ac:91:5d:d1:
                    68:a0:96:47:41:2f:ad:f2:3d:8b:58:5d:fe:3e:7b:
                    d8:e2:0c:f4:c4:99:29:5e:bc:a3:e4:a6:0b:aa:d6:
                    32:1c:6d:13:18:b3:1a:4e:47:2c:41:be:43:c0:97:
                    78:33:26:a7:30:fe:97:8f:19:6b:dc:c5:b6:39:f7:
                    a1:aa:e6:0b:f6:31:f8:03:76:fb:1e:c2:de:98:84:
                    cd:f3:f6:68:c4:ee:6f:1a:96:61:fe:2b:df:5f:0c:
                    a5:60:c5:59:7a:73:0c:8a:65:ca:07:36:64:88:f4:
                    6a:8a:93:d5:4f:82:98:fe:82:9b:05:2f:bb:90:97:
                    c8:e5:0e:ca:c0:bc:5d:0e:d1:14:07:d7:76:a1:85:
                    00:65:78:5a:88:e2:f9:bc:c7:2e:c9:60:48:95:34:
                    a9:f3:38:52:c4:cb:ce:4b:37:26:6a:af:28:ea:36:
                    52:3d:ce:b0:3d:4e:09:5c:27:6b:99:4f:c4:c3:71:
                    04:f8:8b:59:0b:7c:d2:23:53:e7:3b:2b:80:29:8b:
                    08:dd:c4:19:e0:56:1b:96:02:ae:72:7a:06:b1:3f:
                    34:af:32:de:73:cd:0f:dd:5e:5c:24:86:27:ca:ff:
                    ce:13:69:72:62:5a:65:75:2a:8b:95:d6:9f:b2:92:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7E:A4:22:F7:C2:10:DE:45:52:D0:85:42:5B:54:D7:AC:CE:22:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e4217924-b89f-3a6b-b726-c4acf11988c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.171.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ac:ec:03:58:9d:64:ce:67:fe:20:ba:9a:d7:ad:47:f9:44:
         3a:43:5a:c2:83:71:81:5a:db:dd:02:99:27:84:b4:c2:b7:b8:
         b4:21:94:83:16:81:f3:2d:48:56:b8:80:0a:87:58:0e:d1:b5:
         f8:fd:67:b9:62:51:4f:35:1c:21:aa:79:36:e0:aa:f9:f5:81:
         32:9d:97:fe:53:e8:9d:8d:5c:2b:42:a8:fb:82:7b:d8:b4:69:
         ca:52:37:6f:a1:0d:f3:c3:33:53:60:6a:63:81:bf:fb:13:a9:
         df:82:d0:88:c7:90:1d:fc:9c:40:b1:c4:e5:31:e3:ce:d3:e5:
         9c:fd:ac:03:72:0c:76:27:e1:bf:f6:b8:05:f5:a3:25:62:86:
         d6:4d:f7:17:44:e5:3c:76:cb:1e:34:9a:27:4d:d8:7a:04:7f:
         5a:05:bd:55:95:dd:2b:28:98:41:b3:b1:1a:cf:1c:52:ca:01:
         21:5d:e6:cc:38:c1:2e:58:96:8c:5a:f6:07:32:17:ad:ef:4f:
         29:1a:04:d1:f5:80:db:dc:b7:cf:79:e9:ac:a9:db:03:3f:e2:
         d5:65:11:ed:71:cf:0b:b3:6b:6d:96:79:a9:91:4c:b7:a8:6a:
         f0:50:5b:b5:ff:31:ae:91:20:ca:89:a7:28:90:aa:61:84:0d:
         b7:13:a1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:35 2026 by rpki-client