Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/01ca8178-7ad1-3594-b8fb-3c3ba0eef2f5.roa
File:                     01ca8178-7ad1-3594-b8fb-3c3ba0eef2f5.roa (raw, json)
Hash identifier:          8MIRPxpK9pRUiqxwPCjUpLegis7Fd5Gy3Tblf1VDZl8=
Subject key identifier:   FB:47:0C:5E:BB:C6:08:DF:70:79:26:28:D8:3A:04:02:78:FD:1E:22
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F498B97E0B09352967BB1DC80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/01ca8178-7ad1-3594-b8fb-3c3ba0eef2f5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        104.145.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:97:e0:b0:93:52:96:7b:b1:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3d9ea324-04b6-482d-b0cd-81407d638a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bd:ff:55:42:89:74:b9:f3:da:17:5f:b4:07:
                    84:16:b2:f5:a8:a2:b5:18:f3:66:66:8e:5c:36:cf:
                    98:ad:d9:f2:53:2e:0e:b1:01:8c:e1:70:ef:3a:39:
                    b5:3c:5b:e5:ef:63:8e:45:9a:d4:15:f4:3a:f5:5a:
                    80:39:fe:c4:b9:93:c0:df:f9:4c:1c:05:f1:7e:54:
                    b0:da:8a:b6:e8:42:7f:5d:1f:6e:d2:21:96:5d:df:
                    1f:fb:66:cf:7d:ef:70:75:46:c1:f2:c1:d3:77:55:
                    e0:fd:4a:97:ff:f8:b0:3e:f9:c5:52:8b:9e:92:39:
                    c9:77:86:18:0c:77:93:fb:a1:2f:1f:15:cd:e1:e9:
                    38:7a:71:c4:d3:a0:fa:66:1c:74:d6:f0:22:44:af:
                    fb:66:d8:b1:71:97:c1:31:0e:da:05:f7:44:51:7b:
                    5d:c9:71:74:bc:18:aa:47:92:1a:e8:cd:6b:d8:9a:
                    21:8b:b7:ff:ea:bb:f9:c6:3f:a2:45:fe:65:a4:89:
                    b9:11:84:75:a7:d2:d7:90:b0:e5:f7:f4:d3:d6:0b:
                    a9:57:47:85:4d:90:79:68:5b:48:d6:1b:4d:0e:8c:
                    97:40:c3:05:fc:80:33:25:2b:2e:4e:47:18:63:85:
                    ea:d0:6c:53:f5:01:80:f9:34:c4:62:13:d2:59:08:
                    32:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:47:0C:5E:BB:C6:08:DF:70:79:26:28:D8:3A:04:02:78:FD:1E:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/01ca8178-7ad1-3594-b8fb-3c3ba0eef2f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:41:86:18:6f:88:8a:d7:40:55:b2:44:98:29:5d:52:38:ca:
         e9:5b:90:41:36:55:c9:51:2b:66:e7:48:85:de:37:2d:cb:45:
         83:69:6f:32:7b:7f:7c:cc:36:a2:8b:6f:63:c1:71:be:01:ca:
         a2:0c:31:29:8d:d4:5d:33:b0:58:0b:5d:fe:7b:36:da:b1:fc:
         a3:b3:2c:5c:27:49:f3:f2:7f:2d:b5:fd:c1:77:4e:7f:72:94:
         9f:0e:3c:35:ae:90:b6:3b:50:be:69:22:42:bc:01:30:c8:7c:
         3c:de:96:36:e4:26:39:3a:af:bf:53:af:00:dd:ce:d1:d9:f1:
         84:e6:94:06:a5:b5:4f:a3:79:ed:0d:b3:fa:8e:15:8f:61:5b:
         67:0e:91:8a:7b:91:f1:dd:e1:3b:90:3f:4b:f0:9f:bf:69:85:
         b8:ab:96:a0:61:05:46:1a:8f:fd:a4:f7:e7:15:70:ae:de:e6:
         1d:f0:88:a6:d4:a3:a0:02:57:1c:fc:2f:29:cf:98:1c:e5:b2:
         b4:e8:e8:0f:94:b5:5c:9a:cd:9b:61:a2:f3:96:04:f2:3b:25:
         f8:05:8b:5a:c4:06:cf:7a:0d:51:50:53:fe:f3:bc:7a:2b:f1:
         e6:41:0c:3b:fd:ea:b6:15:a7:5a:3b:e8:1f:3d:9c:c6:cc:4f:
         8c:dc:ab:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:38:40 2026 by rpki-client