Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c0ac42f4-59a3-36bb-865a-97825dab4c11.roa
File:                     c0ac42f4-59a3-36bb-865a-97825dab4c11.roa (raw, json)
Hash identifier:          eNpaeYbgpapqJpZb5rB5nRFyQMN/JK3oiue7T1DceVY=
Subject key identifier:   31:A4:C3:E7:C6:3B:23:65:5A:7F:7F:69:8C:FA:F4:DF:BA:50:7E:32
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F629307107947431988AAA380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c0ac42f4-59a3-36bb-865a-97825dab4c11.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     15169
IP address blocks:        108.177.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:07:10:79:47:43:19:88:aa:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=53886b8d-829b-45ce-8f01-a0681f2c2429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:50:e7:59:df:a7:de:15:71:4a:57:fc:96:31:
                    7c:e7:77:98:92:f4:dd:25:d1:2b:03:aa:94:20:5e:
                    13:7f:f1:85:2f:8f:f1:55:ee:8b:c7:77:66:b8:c1:
                    ec:71:06:38:13:65:a0:d0:f4:78:e2:0e:40:e7:29:
                    05:08:5d:40:6b:3f:70:27:6b:1a:86:3a:6a:52:4f:
                    53:ad:30:56:30:8f:0c:b1:e7:6e:4f:70:3d:b2:3b:
                    d0:d1:0b:34:09:df:64:6c:c1:82:74:6d:d0:f1:e6:
                    fa:47:fd:95:da:25:90:b4:2b:90:1b:4c:9f:17:3b:
                    76:09:b0:5e:57:96:4f:46:2e:68:68:4f:72:00:1a:
                    df:32:aa:03:b6:bd:85:74:40:90:93:0f:29:c4:1c:
                    84:c2:7a:9d:d4:b5:b0:38:1d:55:b7:c0:ac:2f:89:
                    a0:c1:de:b4:07:ef:52:9e:81:22:0d:a2:a4:37:32:
                    89:40:81:b0:6f:c7:10:64:47:ea:74:24:90:54:c0:
                    b3:70:a1:42:d2:9b:a2:cb:f2:fb:21:49:a7:61:8f:
                    42:29:60:96:b6:4d:0c:ca:50:1b:86:d6:df:43:36:
                    fb:07:57:49:ed:90:8e:51:8b:98:dc:60:e2:c5:6d:
                    bb:72:c4:da:df:53:78:a0:7a:63:45:4d:4e:2d:4e:
                    d7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A4:C3:E7:C6:3B:23:65:5A:7F:7F:69:8C:FA:F4:DF:BA:50:7E:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c0ac42f4-59a3-36bb-865a-97825dab4c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:15:48:cd:b7:2a:1b:79:85:3d:e2:a6:3a:63:f3:5c:3a:60:
         6e:ba:22:82:39:ce:e2:71:f9:1c:d5:a6:42:29:93:40:e2:22:
         ff:a3:d8:e2:b2:4e:78:35:6e:75:86:ed:af:f2:cb:cf:f1:d5:
         b1:83:ef:69:43:17:2f:03:84:52:76:56:82:3c:52:94:ab:f4:
         93:45:be:36:b7:ee:c9:cb:4b:35:9d:ff:a6:21:84:de:13:d0:
         3d:88:3f:38:57:52:21:3e:a5:bb:04:4f:52:23:48:8f:3c:42:
         f1:5d:7c:dd:8a:3b:ad:45:0e:5d:ad:5e:54:ae:59:9c:fe:c0:
         73:7d:c2:90:b0:41:2a:02:8c:fe:30:7d:73:5f:95:55:c1:9d:
         2a:06:a4:f8:5d:c9:da:ff:31:cd:e9:57:51:52:f8:36:81:2b:
         3e:45:26:49:9b:1c:4c:3d:ba:72:fe:10:61:5e:30:e5:70:77:
         cb:29:4a:d8:1d:4a:0e:b7:7c:78:62:28:fc:ea:ca:69:50:cc:
         2d:85:b7:b4:96:2b:77:a5:03:fc:7e:5e:46:ed:4d:e7:e2:ea:
         e1:5e:b2:81:77:8d:66:51:b8:45:4e:f1:71:71:53:a3:22:a6:
         d2:0b:86:9b:1b:47:72:10:f1:48:d7:f3:09:87:39:93:93:c7:
         d5:76:66:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:04:59 2026 by rpki-client