Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/98bde158-b1d7-365d-ae30-4ecd92327008.roa
File:                     98bde158-b1d7-365d-ae30-4ecd92327008.roa (raw, json)
Hash identifier:          fZk20P1X/RHv4aP/U52b2w1ER7hq6dyak6pgnkvItZ4=
Subject key identifier:   93:9B:D6:C6:5A:94:80:A7:0E:DC:24:9D:14:6D:AA:30:4F:C5:4D:AA
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F4328584DCAFAFCEBE00DBD91839D35A0
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/98bde158-b1d7-365d-ae30-4ecd92327008.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     14413
IP address blocks:        108.174.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:fc:eb:e0:0d:bd:91:83:9d:35:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=710b2f94-323e-4113-897e-9fb6614db1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f7:cb:44:85:fb:aa:9b:e9:55:54:8b:8f:09:
                    f9:01:62:6b:f6:69:cd:81:d8:ca:51:1b:24:84:47:
                    18:d3:ac:63:1f:b7:72:4d:dd:df:9a:a2:13:c6:77:
                    ee:12:ab:ed:2e:13:e0:c2:ea:74:c3:9e:ec:e9:07:
                    1b:13:f0:2e:ea:38:4a:d9:a8:66:e8:be:f0:46:06:
                    c5:38:04:22:df:c3:fb:8b:a0:05:1d:ac:98:cd:84:
                    4b:5b:bc:3e:39:c2:33:f6:51:f3:67:0e:3b:9e:f9:
                    a0:4a:14:46:fa:95:df:dd:55:ea:a1:d6:11:1c:75:
                    c2:29:47:af:10:c9:55:de:bd:78:a3:a7:fd:31:13:
                    ae:da:9c:ae:4c:97:3a:27:1f:64:42:a9:c2:68:22:
                    55:0d:e2:cb:fb:fb:e0:19:d8:66:34:1a:3a:5c:9a:
                    fe:e5:49:1a:7c:5c:e1:af:cb:65:dc:a8:98:bb:47:
                    7b:85:fc:d7:17:be:22:15:5d:f1:b3:22:de:c6:2a:
                    c0:fc:c0:fd:63:c1:75:4a:e4:4c:fa:7b:1b:81:71:
                    f6:23:fb:2d:bc:60:72:56:82:c0:65:8c:ba:94:9d:
                    43:81:b6:b9:de:bf:f2:76:b1:0c:88:5e:0c:86:63:
                    88:17:f5:90:63:ea:c0:e9:00:dd:d8:e2:2a:7b:49:
                    6e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9B:D6:C6:5A:94:80:A7:0E:DC:24:9D:14:6D:AA:30:4F:C5:4D:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/98bde158-b1d7-365d-ae30-4ecd92327008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.174.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:b3:5c:2b:94:f7:21:f4:1c:0c:61:6c:3d:93:ab:c6:3d:81:
         58:f1:86:b6:62:13:5d:92:6b:6b:b3:57:35:6d:da:54:10:9c:
         c7:1c:09:ea:c1:e8:c9:5b:a3:c0:6c:6c:ff:73:70:71:eb:93:
         99:b9:8b:d3:5a:70:ec:dc:2e:bf:a0:e7:5d:2f:19:b5:e4:4a:
         f6:e2:5a:94:ed:1f:0e:46:fe:8a:3c:2f:23:eb:25:d1:bb:5f:
         30:c5:ff:18:61:9f:ff:45:5c:5a:8f:ab:57:13:33:86:dc:2c:
         b4:a4:6a:78:b7:44:48:28:55:94:1a:ee:09:72:30:07:bf:de:
         66:99:af:6e:ef:e4:29:2b:91:af:22:1e:5c:05:99:7d:dd:b5:
         ce:2c:07:54:37:d5:96:24:6d:b6:29:8c:a9:ac:0b:dc:02:fb:
         30:3c:cc:2f:1b:27:7b:07:ed:97:b0:33:77:b5:a6:3a:8a:1c:
         17:4e:57:87:d5:64:66:46:68:fe:b3:9b:8c:11:c5:b2:88:62:
         cf:36:96:4d:c6:39:88:1d:7d:f4:c6:7d:21:88:5d:74:aa:f1:
         e1:b1:5f:98:fb:db:49:73:f8:3a:be:eb:9a:9d:14:be:82:6e:
         14:85:d5:74:0b:a2:8f:89:28:d1:ab:9f:08:12:ac:03:d8:5e:
         f1:97:46:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:42:14 2026 by rpki-client