Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e28dc1da-cf85-3290-ba33-6973d3a63483.roa
File:                     e28dc1da-cf85-3290-ba33-6973d3a63483.roa (raw, json)
Hash identifier:          zO4DSPpTiGaI9igKme5dpE8Ue3pkslzaxohf7IHOKBM=
Subject key identifier:   05:CA:61:45:A1:C8:CB:35:E9:F0:04:3C:ED:16:8B:77:2E:F2:2E:A7
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584F7A4D98587D5FB9101275FF00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e28dc1da-cf85-3290-ba33-6973d3a63483.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     62651
IP address blocks:        108.171.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:98:58:7d:5f:b9:10:12:75:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=4b146892-3697-4d79-bad3-93510978fc3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:db:2f:80:51:b1:53:24:4e:bd:a1:a8:f8:
                    a5:c6:a6:2c:a2:9a:cb:7f:1b:58:34:24:4d:94:37:
                    0e:79:b1:c1:e8:44:f8:09:44:ea:52:db:ce:10:47:
                    3f:ad:67:ca:66:b3:55:50:fc:d7:a6:69:fc:fd:27:
                    51:4c:0b:80:d2:46:29:6e:91:a1:b6:ab:50:f3:26:
                    32:a1:78:ad:5f:71:ea:95:19:a6:b9:ed:7b:8b:c7:
                    ef:6d:cb:7e:4a:ac:7f:55:80:b7:0e:e0:74:ed:a3:
                    fb:b6:cd:fb:13:cf:7a:42:cd:de:bf:db:cf:84:82:
                    32:67:73:20:e7:69:c7:7f:39:44:df:81:3b:a3:15:
                    22:7b:ec:c8:98:84:4a:2e:3a:2f:36:82:3b:84:f9:
                    b2:1d:dd:91:25:76:64:05:4d:ca:f0:c6:ab:90:5b:
                    10:da:03:bd:7b:a2:c4:2b:b8:4d:bc:7f:04:7b:10:
                    21:99:e2:91:9c:79:54:60:a1:b8:23:4e:03:db:58:
                    55:0e:df:5e:08:4c:2f:15:21:fa:b0:5a:18:dd:24:
                    da:76:55:de:78:32:20:d9:26:6e:20:76:c9:a4:52:
                    43:01:2a:8d:ad:4a:c8:6f:ed:40:30:de:d3:36:17:
                    db:08:62:28:57:e5:65:68:09:8f:7a:cc:09:85:4d:
                    2f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CA:61:45:A1:C8:CB:35:E9:F0:04:3C:ED:16:8B:77:2E:F2:2E:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e28dc1da-cf85-3290-ba33-6973d3a63483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.171.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:8c:50:9e:bb:cb:f9:85:b4:16:b5:99:a4:8d:95:1d:ee:24:
         68:95:3e:e0:1e:1a:30:62:cc:1a:6f:8a:d1:10:f9:c8:5f:57:
         4b:77:74:6f:a2:26:aa:1b:78:67:03:22:ca:62:8f:37:b1:f6:
         c4:21:a0:5f:ca:65:f8:25:50:d2:89:89:1f:9c:e7:7c:41:73:
         04:b7:b9:47:0e:b2:9d:33:a7:09:4a:60:07:d2:8f:01:11:d7:
         9c:3d:60:a8:d5:0c:66:8e:87:e9:25:60:84:cb:22:e9:75:78:
         46:68:97:9d:da:4d:78:73:51:cc:67:69:3c:5e:d5:cc:bd:fa:
         a3:4e:cb:7c:e4:94:76:ee:76:ce:7b:49:52:70:82:22:45:f5:
         63:34:13:ed:ed:84:6c:dc:ca:35:b5:56:f5:4e:4e:3d:76:c2:
         7d:99:94:86:0c:62:c4:59:21:df:11:e0:7d:7a:e4:24:15:07:
         6a:1b:46:4e:45:78:dc:1a:2f:60:18:e8:09:65:98:d0:2e:0e:
         09:89:69:22:99:87:67:b7:56:c8:bb:37:2f:59:01:89:3b:e9:
         28:c5:a4:e9:95:1e:19:12:06:09:4b:4e:1a:46:7f:d0:fc:f1:
         0b:fa:0b:6b:f7:60:e7:4e:d8:a4:23:09:7c:6e:13:0e:ba:ee:
         6f:23:c1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:37:31 2026 by rpki-client