Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d04e1e15-8183-3774-baf6-eca731f43d19.roa
File:                     d04e1e15-8183-3774-baf6-eca731f43d19.roa (raw, json)
Hash identifier:          fhB6pHPOl3Jg3hCv/lqObKGtoPMV++RDj0WIfU7axtw=
Subject key identifier:   6C:97:D9:83:4D:8B:C6:9C:C1:9C:80:D9:BB:E5:16:31:1E:00:E6:C5
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584EA792607BE849C484F48AA580
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d04e1e15-8183-3774-baf6-eca731f43d19.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19871
IP address blocks:        50.116.114.0/23 maxlen: 23
                          108.167.161.0/24 maxlen: 24
                          108.167.172.0/23 maxlen: 23
                          108.167.180.0/22 maxlen: 22
                          108.167.189.0/24 maxlen: 24
                          108.179.232.0/23 maxlen: 23
                          108.179.234.0/23 maxlen: 23
                          216.172.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:60:7b:e8:49:c4:84:f4:8a:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=646e6694-78be-45c7-bc40-7011de3e2a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bc:03:c6:e5:68:2c:6a:8c:6b:76:89:c8:eb:
                    6a:91:df:ef:17:a8:ca:f5:2e:c1:5a:d4:6e:6c:58:
                    af:07:9c:63:28:b3:23:d5:1d:95:e0:16:2a:43:b0:
                    fd:32:bc:a9:6e:c6:ec:1a:67:82:9a:78:ad:ed:ce:
                    8f:12:ec:80:99:79:dd:42:fe:00:ea:f9:6d:fc:bc:
                    2b:3f:c2:2a:6a:01:60:f0:11:f3:0b:fd:77:ac:66:
                    b9:7e:e7:89:ba:0e:ff:f1:61:3a:f0:24:15:50:90:
                    f6:a7:69:a6:37:48:55:a3:57:14:20:33:12:4d:b9:
                    22:7d:1e:a1:e1:d3:11:09:fb:c9:6e:dd:ee:91:c5:
                    b7:62:61:ea:3b:bc:b7:ff:0f:90:22:43:9c:1b:ff:
                    9f:62:00:b6:d4:f7:da:ab:a8:e3:d3:97:11:f1:0e:
                    c4:43:54:d3:a4:fc:8a:0e:5e:f1:ce:77:98:bd:6e:
                    a5:ab:29:79:76:ce:23:57:e6:c2:d5:54:b3:e8:3b:
                    70:c2:ba:93:c9:31:25:9c:d8:41:b7:18:66:98:54:
                    0b:19:05:e3:db:ca:65:72:58:bd:db:b4:8a:96:75:
                    c3:9d:33:31:5a:d7:f3:0b:b2:87:c0:c1:9d:7f:5f:
                    84:05:09:79:ac:d4:ce:ed:ae:67:f1:a1:76:6e:81:
                    7a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:97:D9:83:4D:8B:C6:9C:C1:9C:80:D9:BB:E5:16:31:1E:00:E6:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d04e1e15-8183-3774-baf6-eca731f43d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.114.0/23
                  108.167.161.0/24
                  108.167.172.0/23
                  108.167.180.0/22
                  108.167.189.0/24
                  108.179.232.0/22
                  216.172.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ec:ac:cf:c6:63:d6:0c:7f:b4:fa:fb:ae:51:c4:2c:3c:4f:
         82:92:dc:cc:c6:2c:34:4d:7f:7b:92:41:99:17:a9:1e:66:dd:
         e8:50:97:34:37:c8:27:ac:95:9f:a6:d8:06:a8:86:7a:2f:4d:
         a2:ed:45:61:4b:f2:b9:fc:eb:ea:19:bf:29:20:93:e8:af:a6:
         29:22:24:be:8b:7d:35:93:bd:21:48:59:e4:b5:07:06:17:07:
         e7:12:b9:cf:67:8e:de:0b:ae:94:72:68:39:74:24:48:2b:01:
         b8:f1:de:be:0a:71:77:50:0f:e2:cc:d7:3e:2a:6e:c1:ac:91:
         c2:c4:a7:92:a6:70:cc:fc:3d:a0:52:7b:59:33:fd:df:25:4d:
         24:bb:04:0d:6f:5f:05:a2:e0:37:93:1e:f9:06:1a:13:7f:3e:
         f3:f9:7c:13:32:f0:6c:37:ad:be:c0:ab:7c:d7:74:6c:4c:f1:
         0d:04:63:7a:54:9c:24:18:57:46:7e:43:ed:b3:f8:71:9c:4a:
         75:8a:df:cc:72:94:c9:6d:cb:4a:7d:62:e7:73:cc:c6:d7:ea:
         92:43:2c:15:86:90:b9:4a:4e:0a:8e:77:b1:67:72:63:c7:ed:
         79:06:c5:b1:20:ad:25:b7:20:03:83:2c:8e:bd:a5:b4:18:e0:
         59:6e:6a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:07:10 2026 by rpki-client