Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d9468ebb-f904-380b-b244-7419ffebb170.roa
File:                     d9468ebb-f904-380b-b244-7419ffebb170.roa (raw, json)
Hash identifier:          BiOABIETn8Wsd9jljbezINbGMzU0YKT6QYCUxPdyGiU=
Subject key identifier:   3B:BD:B1:31:44:53:24:22:C3:10:66:D3:9D:E6:F4:11:84:DD:FB:57
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584EE0C210F6EF6DFAE19051D6AA
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d9468ebb-f904-380b-b244-7419ffebb170.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     1651
IP address blocks:        24.244.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:10:f6:ef:6d:fa:e1:90:51:d6:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=cba9b427-f7ca-4ff1-8195-53cd361ba252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5b:a3:f9:41:b0:35:d8:2a:4e:8d:bf:3e:89:
                    11:8a:a7:1a:2d:5d:6c:43:5e:54:91:24:a7:46:bd:
                    64:f5:a5:06:f6:63:23:81:dd:70:7c:39:9a:5f:a4:
                    c5:57:bf:89:45:52:cb:1c:ad:de:db:f9:c4:d0:cf:
                    18:10:37:47:8d:35:09:d1:be:05:38:08:f0:fa:59:
                    b2:f4:df:58:60:78:aa:85:8c:0d:69:9f:9e:19:00:
                    50:64:b7:71:96:3c:a6:ec:49:f5:25:06:72:90:90:
                    51:b0:4c:ce:9d:4c:f0:ae:67:91:57:87:a2:05:ef:
                    4d:1d:9f:32:5b:0b:c9:7d:52:b8:01:47:6e:cf:a7:
                    c3:8a:35:81:e8:6b:6d:9b:db:4f:a6:ae:3e:82:a7:
                    ab:1d:c0:f5:12:60:5f:e5:68:26:7a:d7:02:82:1f:
                    ca:71:ff:d9:1f:1c:99:68:59:98:9e:a4:91:34:5f:
                    28:df:b1:76:56:cd:39:33:79:d1:6f:ce:e9:5d:53:
                    38:66:72:fe:c6:61:08:2e:e5:0a:9e:9d:2c:ea:03:
                    66:39:36:66:8a:3f:f0:52:4a:de:65:11:76:66:f7:
                    da:5e:66:e7:ee:45:0a:52:58:8d:29:02:ea:78:21:
                    6e:dd:d6:32:b4:6e:1b:d6:6f:d4:a6:05:90:b9:8f:
                    c1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BD:B1:31:44:53:24:22:C3:10:66:D3:9D:E6:F4:11:84:DD:FB:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/d9468ebb-f904-380b-b244-7419ffebb170.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.244.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:38:11:53:b8:88:15:ca:1a:e0:b6:7e:c6:fc:6b:47:10:5a:
         27:36:bb:06:25:1e:bd:ae:82:ec:91:3e:b8:82:ea:60:f9:bd:
         18:c5:1c:e7:45:0f:c8:84:a9:e3:7b:95:7d:ad:f6:88:52:86:
         5a:de:ba:15:25:39:3e:8a:ac:93:c3:ef:e3:d0:9b:d2:74:cd:
         3c:c9:fe:e6:a5:d4:f2:60:25:bc:bb:16:7f:b9:54:84:8b:c5:
         05:46:e5:75:0d:98:7c:5e:40:45:30:84:7d:c9:1c:45:4e:20:
         b0:8c:20:43:52:8d:fb:a4:2f:29:d2:40:71:36:50:24:84:6c:
         c6:14:fe:04:6f:4c:f6:3d:2e:08:48:16:46:ab:37:bd:73:2c:
         2b:e0:9d:24:97:ed:2a:26:e6:6c:e8:60:54:73:6a:4b:74:b0:
         e0:cf:11:d9:30:6e:f0:e8:c4:ac:53:01:77:75:85:50:b1:84:
         2a:90:9d:ab:e8:fe:88:a0:ca:dd:cc:12:4a:dd:68:37:86:91:
         ba:af:73:41:c5:18:d7:9b:19:0e:2b:cd:18:c2:f1:26:f1:ba:
         b6:f9:2d:91:7b:dc:92:c9:87:67:ce:87:e3:91:59:e2:0d:e7:
         13:53:33:4d:cc:76:dd:0d:30:94:51:a7:cd:2c:c4:f2:39:6e:
         48:54:53:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:16:43 2026 by rpki-client