Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/464585ef-1b73-32f1-bad0-905fc6e0d876.roa
File:                     464585ef-1b73-32f1-bad0-905fc6e0d876.roa (raw, json)
Hash identifier:          WGIluCOMV180by0aCw8axRDm98khLWC5fcVUJrZ1hV0=
Subject key identifier:   51:1D:55:89:9B:BC:33:C5:B0:93:64:21:85:56:7C:E8:DA:7E:5B:0B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F49890110E6D1D3D4ACF65B80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/464585ef-1b73-32f1-bad0-905fc6e0d876.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        108.188.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:01:10:e6:d1:d3:d4:ac:f6:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f93e24a8-64e1-42c1-b5e8-14c4496d66f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:ea:b5:69:c2:81:f4:63:c1:a7:02:83:8c:
                    3f:f0:87:bf:6e:ae:4d:5c:e9:ea:9a:89:ef:f8:50:
                    82:2f:33:d3:5e:8e:2d:d7:50:59:dd:d6:24:3b:d4:
                    6a:2b:4e:8f:a5:94:7f:ff:e2:25:3f:c5:a9:0b:7a:
                    72:5b:4d:7c:60:ca:3c:83:59:c8:6a:c7:df:77:e3:
                    9e:f8:4f:ab:fc:50:ca:4f:98:a5:87:37:c4:a9:99:
                    a8:cc:83:d7:19:7f:ba:5c:e7:9c:69:1b:44:aa:0d:
                    82:6c:b0:3e:15:09:7f:2c:e2:ce:75:bf:c9:c6:31:
                    22:79:a5:be:94:cc:03:f4:f0:a4:cc:d3:5f:b8:ed:
                    3e:e9:fa:b3:8e:8e:26:1f:86:5f:16:a8:62:f3:b0:
                    45:17:53:31:2e:81:49:03:20:6b:67:fd:9e:fd:f3:
                    2e:aa:20:80:79:7a:6e:de:88:39:2d:b4:cd:f9:97:
                    07:1b:0a:e7:2a:25:6d:17:a9:04:cb:d2:06:e1:04:
                    0a:8b:27:10:47:75:ce:76:72:d5:0a:12:ff:07:7b:
                    ef:44:a7:8f:73:bc:e5:22:e4:bb:b7:85:e9:ca:6d:
                    53:7e:43:a9:1a:e0:9a:c0:c8:be:1e:c0:17:59:e9:
                    b8:de:b2:9c:e5:cf:1e:f9:c3:5b:f9:8b:8b:1a:6a:
                    bd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1D:55:89:9B:BC:33:C5:B0:93:64:21:85:56:7C:E8:DA:7E:5B:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/464585ef-1b73-32f1-bad0-905fc6e0d876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.188.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:91:08:e7:0a:cd:92:a7:21:fb:c7:25:b4:42:5c:91:a9:ce:
         00:dc:31:17:b2:37:30:bb:9c:bc:d6:7c:a7:7c:6f:06:2b:c7:
         10:04:5b:41:c7:b8:ff:d3:6d:9c:ca:11:df:c2:41:e2:91:55:
         a5:56:9a:c9:71:66:35:96:31:e5:37:ab:09:a8:43:3d:e5:48:
         ea:cf:ee:db:16:82:60:7b:ba:9d:4e:b8:a5:75:71:ff:3c:a2:
         b9:22:a9:92:cd:f7:e9:81:6b:7c:47:34:a3:8e:49:a4:30:a8:
         6b:27:a4:1f:f1:0c:91:2e:6c:3f:1d:bd:f1:f5:7a:4e:9b:c1:
         30:41:3d:15:b1:43:f4:10:20:65:10:78:50:48:34:f4:b1:3d:
         68:27:31:2b:2f:06:3d:c6:d3:3c:9f:81:3b:0f:36:f7:e9:d8:
         3d:41:73:e9:04:98:bd:06:ac:30:9d:b7:a1:ab:5e:46:45:38:
         fc:06:71:f9:1d:95:8f:f8:06:73:b2:e7:be:83:00:61:ae:33:
         ae:cf:7c:87:71:a2:aa:5c:e3:fa:de:f5:5b:62:5b:2d:e9:1a:
         3c:ba:0a:63:7b:b1:19:6e:55:73:9b:81:6e:7d:25:2b:6b:35:
         4b:99:e6:55:76:a2:e3:b5:b5:6b:ae:33:9a:53:b0:51:d1:e2:
         05:aa:b7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:03:17 2026 by rpki-client