Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/14bb2815-17b3-36ca-b86b-40cc4786f2b9.roa
File:                     14bb2815-17b3-36ca-b86b-40cc4786f2b9.roa (raw, json)
Hash identifier:          0YPS3F54QQu2t2ug0Y+OEerM36LpN0yOxLTD+9jP/sQ=
Subject key identifier:   B1:41:18:6F:09:B3:03:A7:6F:F7:26:4B:CF:EF:31:C7:C9:42:54:33
Certificate issuer:       /CN=4d4940f4-61c2-4251-acdb-36be83cdc744
Certificate serial:       010D0C9F4328584F4989ACADDEE62916EA85E800
Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/14bb2815-17b3-36ca-b86b-40cc4786f2b9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6407
IP address blocks:        108.63.18.0/23 maxlen: 24
                          108.63.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:ac:ad:de:e6:29:16:ea:85:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=eeac04b1-c4e7-4d5e-944b-ac737d35d59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ac:3a:83:8a:cf:df:b0:03:e3:ff:61:2e:8a:
                    ff:e7:29:05:0a:6d:ad:fb:95:b5:7e:ee:9b:db:86:
                    20:4b:3a:d8:49:e5:c8:3c:75:63:0d:91:25:02:15:
                    ba:bb:f7:1e:63:af:a6:e5:cb:20:41:ac:c4:0a:24:
                    88:be:83:82:49:e9:95:92:4f:55:30:22:0f:b1:81:
                    0a:44:4e:06:96:31:88:0a:c6:d6:bc:cd:49:80:8e:
                    be:cd:15:e4:0e:90:69:d1:06:1a:99:1f:c7:11:7b:
                    75:9c:4c:4f:07:94:4d:fd:79:a2:7e:eb:17:59:20:
                    e7:b1:cb:10:b2:2b:4d:7b:f7:c9:68:02:3a:82:66:
                    95:74:67:9a:bf:a7:17:ad:6a:d3:27:59:5a:8e:32:
                    73:07:47:88:5f:e5:33:1f:ee:91:e8:c7:af:33:d6:
                    73:5f:e7:7b:3f:ed:08:7f:2c:45:d5:0b:4e:94:a1:
                    c1:b9:b0:61:3d:f6:39:1f:46:9c:71:7a:1a:bc:67:
                    cc:28:90:1e:f0:75:0d:d9:c4:7d:1c:52:db:2e:fd:
                    7f:0c:dd:7d:75:4c:0e:7c:53:1c:75:ee:bb:e1:a7:
                    d4:69:35:78:7e:d3:c4:18:2e:cd:21:55:1c:bd:e8:
                    44:0e:94:f4:e2:f8:d0:01:dc:50:2a:24:8a:f8:98:
                    53:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:41:18:6F:09:B3:03:A7:6F:F7:26:4B:CF:EF:31:C7:C9:42:54:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/14bb2815-17b3-36ca-b86b-40cc4786f2b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl

            X509v3 Authority Key Identifier:
                keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.63.18.0-108.63.21.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:05:23:59:d1:49:d0:8b:75:e7:bb:e4:e1:39:20:23:d5:d0:
         f8:ca:d8:d7:18:53:6d:30:55:a6:a5:0f:7a:22:c7:d8:37:09:
         d3:57:ac:6d:e9:2b:53:50:ac:6d:fe:7d:c3:a2:9f:0b:db:f7:
         22:83:ef:38:af:40:58:50:86:35:4e:55:53:c3:d8:d9:5a:c9:
         32:cb:00:5a:2e:17:80:76:39:5b:ba:0d:9f:ce:f0:70:11:25:
         e9:7a:d8:e0:f2:0d:3a:26:7a:80:6c:3a:77:a0:e9:83:b3:e6:
         ee:5c:32:9b:34:e9:f2:a5:86:c5:16:8c:2e:e4:a5:60:3d:cd:
         dd:da:c4:e6:02:72:8f:b5:0b:c8:5a:d5:ba:18:4c:34:75:de:
         b5:90:d0:6d:07:0e:ae:93:bc:0a:31:b2:95:93:30:95:ef:36:
         9d:60:51:3e:60:fe:b7:a6:aa:a1:01:f1:8d:72:f2:7e:58:53:
         a3:b6:e0:b1:39:e8:c3:d4:80:94:55:b7:c3:f3:5e:55:59:99:
         59:17:2c:56:5d:6d:fa:47:48:0b:9c:f9:48:bc:fc:9a:c6:d7:
         e6:1f:97:23:2a:c3:8e:6e:5f:bc:90:e6:3c:78:94:9d:80:39:
         ca:63:27:32:4e:15:65:7d:42:eb:78:4e:f4:f4:85:6b:ff:f3:
         01:85:24:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:13:54 2026 by rpki-client