Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/e34836d4-580e-36c8-af6d-82f3db2ea917.roa
File:                     e34836d4-580e-36c8-af6d-82f3db2ea917.roa (raw, json)
Hash identifier:          cfPv8B2TrhwQvtinCdAq8e3ejvmGHbTpll3MA1tGAqE=
Subject key identifier:   46:97:83:DE:C0:CF:6C:A3:F8:1A:91:B5:02:A6:EC:1E:19:DF:90:E9
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F4328584F480D37A85698BC398C5FC040
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/e34836d4-580e-36c8-af6d-82f3db2ea917.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     40793
IP address blocks:        108.174.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:37:a8:56:98:bc:39:8c:5f:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=72d23407-aad2-4f7e-bb99-18e293c8b213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:36:89:63:49:66:7a:0b:5d:b3:d8:44:a6:91:
                    ef:51:9c:d0:7a:f8:a0:73:b2:a9:55:f4:ad:77:ce:
                    ac:65:12:86:70:90:de:a4:ae:a4:29:48:f3:c2:4f:
                    bc:24:b5:ff:1b:db:8d:0f:ea:74:7d:0d:27:d6:40:
                    80:8d:32:8a:01:8d:43:da:00:0f:58:aa:fd:dd:10:
                    6d:ce:af:dd:54:3f:59:cd:8a:5e:49:03:43:f5:85:
                    ad:b8:6c:5c:4b:50:4d:ba:3a:9c:38:cf:f7:a0:04:
                    d8:2a:fd:64:51:4c:d1:24:19:fd:bc:9d:e2:bf:3e:
                    01:ea:74:87:b2:a8:d2:cd:f8:06:c0:6d:2f:c5:99:
                    22:8f:9e:91:95:d9:f2:d2:b7:6d:d9:c7:e9:62:d7:
                    7d:b1:61:83:db:50:ec:25:79:87:29:17:28:06:d1:
                    21:18:42:b2:8d:c1:7a:58:35:2b:75:b7:80:4c:00:
                    f6:6d:a3:47:8f:48:a1:bc:83:99:78:dd:1f:68:01:
                    7e:28:53:6a:72:c2:55:9a:21:55:a6:40:02:07:8d:
                    c5:b8:18:45:be:ac:6b:fa:64:b3:38:96:29:62:67:
                    51:57:22:99:11:13:23:d9:44:b3:d6:29:9d:5c:f8:
                    b0:a8:fc:7a:e2:56:9b:b5:36:75:5a:77:e3:e6:df:
                    34:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:97:83:DE:C0:CF:6C:A3:F8:1A:91:B5:02:A6:EC:1E:19:DF:90:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/e34836d4-580e-36c8-af6d-82f3db2ea917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.174.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:41:cf:06:5b:ba:cd:f0:c7:99:85:ac:e0:02:e9:1f:1d:1d:
         3f:30:d0:b6:83:1b:92:56:e2:a3:30:10:d5:07:54:f3:db:dc:
         3f:a1:b2:26:b4:ca:ab:21:fe:1c:88:3a:e4:23:d0:17:68:78:
         2a:cb:d9:09:98:e4:75:3a:47:48:0b:ff:63:c9:a8:e9:e9:e1:
         84:2e:fd:09:64:fb:26:89:5e:42:d5:e3:0e:34:89:ff:28:e2:
         8a:e9:81:49:a5:10:6b:10:be:26:dd:bf:10:78:50:f8:e1:7a:
         f5:61:b6:c2:f0:c3:5b:ed:04:19:9e:0a:58:d2:3c:77:39:12:
         88:60:8d:fb:4c:75:30:71:64:f1:e4:24:a8:52:ab:24:e3:38:
         e5:64:36:94:30:3c:da:01:49:57:ca:2b:b2:ac:71:97:25:7e:
         f6:48:9c:e7:73:c7:2d:ae:3f:66:73:b7:8c:60:79:c9:99:3c:
         99:72:19:54:58:e0:2d:1e:31:8f:27:39:87:6f:67:5a:46:ea:
         2c:19:e1:dc:21:43:a9:74:65:65:4b:c5:df:50:11:c2:34:95:
         a9:e9:71:c2:a2:57:f6:6e:89:d1:5c:cd:da:1b:7e:5e:95:97:
         ee:43:7f:1d:00:29:d5:12:ee:ae:0d:c2:5e:9b:a2:4b:66:e6:
         69:98:8d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:03:26 2026 by rpki-client