Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/3d9757cb-e9d7-3ebd-bebc-5e8858e6fee9.roa
File:                     3d9757cb-e9d7-3ebd-bebc-5e8858e6fee9.roa (raw, json)
Hash identifier:          Xy/fojEuAg1XjWwe6O33FPZg/wEHfUert2TcuK63FVo=
Subject key identifier:   BB:C3:B7:9A:4E:67:E5:4F:50:BF:D1:FF:2D:A1:4D:CD:C4:35:8B:75
Certificate issuer:       /CN=8a13f263-84fb-4a2b-b136-d447ecc21508
Certificate serial:       010D0C9F4328584F498C1136011874F1E7688B40
Authority key identifier: C8:37:D2:6F:C6:51:9C:EF:BC:41:B2:83:91:2E:73:69:A3:B3:BE:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/3d9757cb-e9d7-3ebd-bebc-5e8858e6fee9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     32475
IP address blocks:        107.6.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/8a13f263-84fb-4a2b-b136-d447ecc21508.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/8a13f263-84fb-4a2b-b136-d447ecc21508.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8c:11:36:01:18:74:f1:e7:68:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a13f263-84fb-4a2b-b136-d447ecc21508
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fbc1208a-bffe-4353-959b-31263922e46a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:04:ad:29:fb:34:de:33:b9:a1:6b:4c:78:33:
                    96:ae:4d:76:e2:75:42:e0:57:de:a5:72:b7:d0:6d:
                    92:4a:9f:80:2e:06:50:36:a4:b6:57:41:91:3f:42:
                    58:f7:0a:59:8b:b0:c8:33:ea:e3:3b:92:0c:d8:06:
                    92:1e:63:99:7e:26:1e:32:79:2c:1c:4c:f6:cd:a4:
                    da:82:05:41:76:1a:de:f3:55:3b:6f:15:c2:55:73:
                    79:07:b2:18:ea:b1:24:25:a3:fd:37:a4:a1:07:56:
                    b7:42:31:1b:f5:1d:42:73:a4:cc:7a:ab:00:6e:cd:
                    49:ca:39:d8:36:62:6c:a3:b2:91:08:06:00:d6:bb:
                    48:00:21:26:91:1f:0c:4f:71:81:44:c1:7d:10:95:
                    2d:96:1a:be:83:2e:22:ec:7e:09:9f:42:33:4a:f4:
                    cf:0d:26:30:1b:ce:38:da:54:82:9d:d9:8c:56:f5:
                    7c:91:bb:b1:81:ea:aa:70:ef:ca:11:2c:0c:3c:7e:
                    89:36:1a:76:ae:3e:98:06:b1:7c:92:de:07:4b:30:
                    8d:c1:29:08:a1:b9:ac:c6:c5:c7:3b:8e:a0:80:f5:
                    87:72:49:89:c3:c8:12:b6:29:ec:a9:27:16:33:f3:
                    f0:f2:29:91:df:5f:7c:0e:8b:c7:2c:15:4e:9e:cb:
                    66:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C3:B7:9A:4E:67:E5:4F:50:BF:D1:FF:2D:A1:4D:CD:C4:35:8B:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/3d9757cb-e9d7-3ebd-bebc-5e8858e6fee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508/8a13f263-84fb-4a2b-b136-d447ecc21508.crl

            X509v3 Authority Key Identifier:
                keyid:C8:37:D2:6F:C6:51:9C:EF:BC:41:B2:83:91:2E:73:69:A3:B3:BE:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a13f263-84fb-4a2b-b136-d447ecc21508.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.6.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:71:c4:a7:b1:3e:36:79:b2:c2:9a:6e:5e:c1:98:17:a9:40:
         21:1d:7a:cc:db:55:c1:0b:da:1f:b2:42:98:86:0f:3b:9e:34:
         82:1a:e8:c6:a9:47:49:88:1b:4e:8f:23:41:5e:a2:8d:c6:22:
         2d:98:ee:31:5f:08:4d:36:00:96:28:33:b7:3f:e0:20:95:00:
         93:8c:d9:8c:33:e7:bc:aa:52:b9:13:9c:98:78:73:0e:9c:f0:
         15:03:dd:c9:5f:cc:49:05:50:e5:11:fb:07:44:ac:36:f6:c3:
         6f:25:21:ff:f9:41:c4:dd:53:c9:e5:d8:3b:4c:83:54:b0:bc:
         27:e8:79:79:5f:62:24:7a:00:ca:7f:39:f4:a3:bc:8e:20:82:
         c5:95:29:c5:3a:bd:dd:bd:43:fc:85:42:56:80:ec:49:41:56:
         42:06:23:af:1f:24:9c:d1:d2:9e:0b:8f:40:54:eb:2a:82:06:
         81:07:70:31:66:03:be:e1:10:6e:2c:62:16:0e:c2:26:95:b6:
         91:af:a8:ee:36:f4:18:76:93:4d:cd:fd:eb:ec:9b:03:34:50:
         82:0d:a8:3a:3f:70:99:6e:b3:1a:f7:26:d9:99:74:10:08:67:
         17:6d:f1:dd:61:0c:50:ce:44:26:ae:49:18:a1:4c:54:eb:4a:
         0b:b0:8c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:36:56 2026 by rpki-client