Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/79befa65-2932-354e-aa3c-9d8fa2f95a14.roa
File:                     79befa65-2932-354e-aa3c-9d8fa2f95a14.roa (raw, json)
Hash identifier:          hnsTwnQYygYosWt41dpiCzU8CeQju7+8xYXnXnk0OF4=
Subject key identifier:   A5:24:C8:56:06:A6:28:1A:50:8D:F8:BB:86:85:3D:F3:9F:0B:1B:47
Certificate issuer:       /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Certificate serial:       010D0C9F4328584E6144B443AAA228ABD4504600
Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/79befa65-2932-354e-aa3c-9d8fa2f95a14.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     8014
IP address blocks:        108.60.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:b4:43:aa:a2:28:ab:d4:50:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=289d46f5-045e-400c-a100-95d2d587a415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4c:2d:c2:ae:3d:99:d5:f8:7f:d6:be:de:1d:
                    15:99:1b:2a:4e:ad:09:c8:74:84:99:85:67:63:41:
                    f0:fd:bf:36:b1:1f:db:42:32:01:8e:31:2f:5f:f4:
                    fc:39:a3:73:44:76:ee:d5:4c:18:54:ca:ab:dc:a2:
                    d1:29:ef:2a:a9:6f:93:89:dc:10:74:e1:04:8c:d1:
                    13:97:05:7e:a9:84:1c:c2:02:78:6a:2e:55:52:cd:
                    a9:1b:be:78:ab:46:d1:cc:bd:26:fd:57:d4:e1:43:
                    cd:3a:83:18:aa:bc:ee:70:5b:a8:fb:78:7f:63:6b:
                    3b:05:4a:2b:14:9b:66:3d:e2:e3:9e:da:db:de:06:
                    c1:31:f8:06:8e:e1:f9:2a:fb:93:e5:ad:09:d2:c8:
                    60:34:31:5a:67:a9:02:42:45:b2:cb:e8:2b:2c:8d:
                    6a:e8:94:fd:ae:d0:e2:eb:4b:43:6b:2f:87:19:4d:
                    9a:48:08:b1:fc:a3:ca:41:4e:63:1b:ae:76:6e:2a:
                    57:7c:19:7a:db:a0:a8:62:05:be:79:51:11:d3:fd:
                    60:fa:b1:83:0f:71:ee:e6:83:fc:ff:de:3f:e7:cb:
                    f1:57:74:d6:62:2d:45:82:b6:8b:3c:6a:09:9e:c4:
                    4b:99:19:69:6e:18:9d:8e:7a:9b:e3:08:65:04:c7:
                    b6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:24:C8:56:06:A6:28:1A:50:8D:F8:BB:86:85:3D:F3:9F:0B:1B:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/79befa65-2932-354e-aa3c-9d8fa2f95a14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl

            X509v3 Authority Key Identifier:
                keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.60.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d9:5c:cd:f7:0b:55:f3:fa:d3:65:44:b7:3c:eb:f6:70:2d:
         5a:77:ea:4f:84:e7:1d:22:e1:d7:7a:30:81:18:30:9c:47:db:
         7e:0b:20:ef:94:04:ed:b6:bf:0d:d7:35:50:6c:13:b1:36:3e:
         2e:d8:44:2a:7a:dd:5d:02:d2:47:3d:70:d8:38:7b:94:e8:eb:
         e0:ca:e8:62:3d:f2:12:d8:e8:18:74:cb:32:1c:98:e2:cc:37:
         51:a1:5e:dc:0a:56:e3:fa:95:a7:12:36:06:7a:be:26:b1:1c:
         ae:3c:45:40:99:a1:62:73:33:fc:23:01:4f:e8:5f:21:c7:65:
         ba:95:ee:b6:51:e6:03:e2:0c:c6:e2:99:fd:99:e5:47:34:bb:
         6b:34:ec:7c:fc:d8:32:9b:32:f8:8e:ac:ad:10:cc:a2:f4:3e:
         ea:2e:48:5a:6f:9d:d7:8b:e0:28:91:06:eb:14:52:87:8b:f6:
         23:77:2d:df:36:2e:ab:91:fe:db:19:15:e9:dd:36:77:da:a8:
         14:63:a4:bf:10:45:b4:bb:54:fa:30:64:f9:72:8a:e5:cb:31:
         7f:88:97:5b:5f:1f:69:b3:1a:fe:63:4c:e4:bd:4f:92:e2:91:
         06:c0:47:74:af:dc:1f:69:b5:ec:a6:fd:81:87:4f:55:c1:9e:
         e1:2c:4b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:25:32 2026 by rpki-client