Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/313c088d-dab3-3856-9376-903f80132488.roa
File:                     313c088d-dab3-3856-9376-903f80132488.roa (raw, json)
Hash identifier:          Yi+tycWLxkQSOJn80i+F7neHHSMj8xRKvE+/O+TItLg=
Subject key identifier:   E9:87:8E:EA:90:B3:7C:CC:E9:AF:A9:34:9D:6E:1E:DD:27:92:93:B4
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973C833F99CAA6F83517B40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/313c088d-dab3-3856-9376-903f80132488.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        108.172.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:c8:33:f9:9c:aa:6f:83:51:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ed6c10d3-924a-41b3-994a-1a0ce788453d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b4:8c:ce:6f:b5:cd:92:37:51:60:9a:cc:9a:
                    c0:d9:64:79:67:f5:37:fc:e3:4d:69:33:99:1d:e1:
                    c4:d0:8e:c3:60:49:3c:c4:5a:0b:08:2d:fe:35:fb:
                    5d:ab:da:2a:85:2e:d9:f5:c9:c3:64:d0:13:d1:2d:
                    93:1d:53:75:fa:16:f3:30:c5:f1:49:70:e3:51:75:
                    03:fb:89:e6:0f:e3:93:ed:98:71:f4:10:35:38:ae:
                    ae:89:f7:b4:90:c1:6e:10:2c:85:1d:c9:f0:37:0b:
                    46:8d:0e:5e:57:92:11:22:31:cb:04:6f:16:cf:aa:
                    f8:de:90:e8:3b:f3:08:b2:5f:39:34:4d:3d:1c:db:
                    70:2c:cd:96:b8:18:c4:97:7d:0c:56:ff:87:42:a4:
                    2d:23:e5:e0:7e:9a:da:24:b7:9a:af:c2:15:10:cf:
                    72:e7:4b:ab:f7:1c:bd:b5:b6:2b:76:3d:1f:7d:9b:
                    9e:e9:f7:21:62:a5:08:35:96:3e:95:b4:27:40:cf:
                    37:c1:34:df:c5:35:27:76:31:ba:c1:4c:11:08:db:
                    62:2d:6a:95:47:79:fc:7b:d2:a4:7e:9e:ff:a0:f3:
                    53:6d:3b:90:6e:c8:7e:6f:b6:c0:94:c1:86:3b:cc:
                    77:12:62:ab:d8:6c:ac:6a:e6:88:2e:d0:da:cd:c6:
                    a0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:87:8E:EA:90:B3:7C:CC:E9:AF:A9:34:9D:6E:1E:DD:27:92:93:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/313c088d-dab3-3856-9376-903f80132488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.172.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:14:73:d1:d5:7b:53:05:48:18:d1:f2:9c:b0:9d:51:04:db:
         44:21:14:3b:c4:0e:96:28:78:b8:ac:e8:d0:d5:ff:4f:de:5a:
         f0:fd:1e:27:c7:47:c9:96:91:c7:0c:c3:12:cd:d6:4a:5c:8b:
         d7:91:07:74:4c:85:f7:21:08:a0:94:58:fa:82:4b:3c:29:dc:
         09:42:e5:3c:d7:44:f6:2a:98:25:06:21:0d:6b:93:4b:56:62:
         ff:2d:51:59:b2:ee:05:d7:4f:21:af:b3:ed:08:b7:0f:89:14:
         31:60:ae:46:9b:62:bc:09:c9:16:22:6d:0d:47:64:79:3b:25:
         40:00:98:86:ee:c1:a7:d9:8e:c5:88:7c:27:40:e9:e0:aa:0b:
         95:6e:5a:49:bd:29:c5:4a:88:3c:f8:d1:18:8a:8e:ed:5d:5f:
         83:57:7c:40:68:7d:a2:ae:22:cb:d2:6c:a3:92:0d:9b:64:1e:
         bb:53:5a:4e:19:38:11:72:a3:b6:2a:ad:dd:f1:c2:56:ad:93:
         fa:4b:31:cc:d1:35:82:cc:28:e4:83:81:c2:56:36:2f:37:ac:
         18:48:a3:82:64:c8:2b:dd:9a:31:3e:d8:49:24:4d:eb:09:4f:
         5e:7b:6d:38:9b:a5:a8:0b:59:21:22:8f:c4:0f:92:03:c0:36:
         39:2e:eb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:49:10 2026 by rpki-client