Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/97424350-496c-3039-8021-28cda3631346.roa
File:                     97424350-496c-3039-8021-28cda3631346.roa (raw, json)
Hash identifier:          67V8xK6yWTjS17k4Jkcg5Qlb4+hZ3KTldiLYTCIxi+w=
Subject key identifier:   F0:E7:E3:A4:25:17:CB:C1:7B:D1:BA:52:C8:0C:56:14:4F:C4:E7:01
Certificate issuer:       /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
Certificate serial:       010D0C9F4328584D19B4B2A7186878A0FAA6D980
Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/97424350-496c-3039-8021-28cda3631346.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     21581
IP address blocks:        108.161.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:b2:a7:18:68:78:a0:fa:a6:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=6a737131-25f0-4556-a3c8-c082035f8f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ce:09:9f:e0:74:3e:64:77:fb:67:d6:e5:ef:
                    9c:8d:1b:61:56:49:8f:da:cd:a3:10:c5:77:9a:d0:
                    ea:6c:92:3c:d4:27:1a:ec:3c:54:1d:f1:b8:2d:3d:
                    ca:63:6e:6d:c1:73:73:b9:36:30:02:15:f8:0c:0d:
                    5a:e7:ce:d7:fa:ed:90:ae:78:82:21:53:ce:49:5f:
                    d4:3e:99:c7:aa:cd:60:9f:99:96:c6:34:cc:cb:f4:
                    7a:d5:15:39:71:b3:3e:8e:eb:07:cd:c0:e0:d8:68:
                    ae:24:e8:7f:8c:62:03:52:11:92:fc:59:9e:2a:df:
                    93:3c:88:5d:14:4b:f0:52:23:d5:97:f9:6b:ba:43:
                    65:53:35:2a:6f:16:b7:8f:68:d6:19:b8:cf:b2:d9:
                    a3:2e:8a:ed:49:31:b8:4e:61:93:54:ba:a0:0f:56:
                    6d:0f:43:bd:6e:19:c2:f2:05:31:d0:6f:dc:fe:fb:
                    95:03:53:93:80:fe:d4:22:39:29:65:ad:3b:56:c3:
                    1b:83:74:74:23:9f:ec:0e:4a:bc:ab:0a:96:c9:30:
                    ac:78:64:03:64:38:a4:22:f4:3e:33:d5:15:6c:ce:
                    10:1b:ae:a8:16:15:46:23:ba:63:1a:84:fb:e4:20:
                    c5:35:b2:31:8b:e6:e9:58:02:22:c7:26:3c:d5:7d:
                    70:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E7:E3:A4:25:17:CB:C1:7B:D1:BA:52:C8:0C:56:14:4F:C4:E7:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/97424350-496c-3039-8021-28cda3631346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl

            X509v3 Authority Key Identifier:
                keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:43:fe:f5:1e:8d:3a:3f:a9:01:45:e1:dc:ff:7b:2d:18:fd:
         50:db:6b:c0:a1:2e:fb:97:a0:49:b9:5d:89:80:47:09:b9:77:
         93:e1:c9:2b:e1:c7:10:ed:36:e7:fb:3b:e0:3f:3b:f7:9e:22:
         e4:a5:25:22:52:de:c5:3b:33:e8:04:10:38:0f:d4:d5:fe:57:
         8e:6f:8f:32:9f:d4:81:38:15:78:11:c4:9f:b5:c9:27:4f:6d:
         2c:13:ff:6e:13:bc:7f:38:08:00:eb:ee:47:47:73:e4:8b:44:
         50:e1:60:81:4f:97:de:00:f7:20:fa:ec:19:f2:5b:72:14:c0:
         37:c9:f9:61:1a:19:c6:98:29:cc:ca:c5:70:4e:17:85:01:0b:
         cc:63:75:00:a8:c9:26:2f:f9:72:e5:8e:6a:5a:3e:3c:8f:52:
         dd:3e:5b:53:fa:31:5b:b6:7e:11:a8:a8:d1:bf:2e:f0:8f:86:
         71:17:89:5e:ac:45:44:43:b6:83:a0:81:fa:b0:12:20:f2:6f:
         6f:ac:3a:2e:22:ee:1a:06:8b:48:69:bf:8f:76:7f:98:d6:18:
         3c:dc:36:e4:c0:85:e1:97:c0:94:ad:22:3f:04:a6:6f:93:1b:
         32:5a:de:8a:ab:53:e0:15:0d:9f:09:b5:64:e4:4b:1e:63:7e:
         24:aa:d2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:34:43 2026 by rpki-client