Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/311fb489-48a2-3f99-a66f-a535414c6417.roa
File:                     311fb489-48a2-3f99-a66f-a535414c6417.roa (raw, json)
Hash identifier:          u0IcMgjINyzdVwJtlm+wg5JSS+jwOYUAt/zfN2g5vAs=
Subject key identifier:   8F:66:0A:C2:C6:C6:26:F3:CB:F1:EC:7A:CD:2D:66:FE:C1:AE:0D:87
Certificate issuer:       /CN=0153231e-bade-4c05-b3fd-55b65671daae
Certificate serial:       010D0C9F4328584EB8471FF69B1842047022FE80
Authority key identifier: B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/311fb489-48a2-3f99-a66f-a535414c6417.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     395153
IP address blocks:        107.182.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:1f:f6:9b:18:42:04:70:22:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0153231e-bade-4c05-b3fd-55b65671daae
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=a067b6bd-cc70-4293-b8bf-091bb462b985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bd:1d:66:6a:ce:df:88:7a:f5:29:70:b4:09:
                    33:f0:36:27:72:7d:48:e3:89:12:4a:05:ca:6e:16:
                    d5:18:66:09:fe:0f:ef:07:2f:77:a2:47:3e:fa:29:
                    e2:3a:e6:41:85:71:52:60:6c:62:bf:a2:46:d7:22:
                    9d:17:6f:32:71:6c:ff:34:c7:0d:8f:b2:0a:5b:d0:
                    e9:c1:64:11:d7:04:39:9d:75:6d:06:15:58:a1:3e:
                    d9:b5:46:22:d3:59:38:cd:a9:08:e9:25:6c:72:80:
                    60:9b:31:8a:06:8b:c2:14:a8:b2:82:a8:fd:82:ec:
                    24:4f:91:c5:9d:f4:29:c4:3f:60:a7:1f:ba:b0:72:
                    fb:3d:3e:36:01:b4:c7:b4:4d:21:84:74:3d:27:44:
                    c5:ea:ac:dd:b4:aa:0a:9a:ee:98:9c:72:a7:38:60:
                    41:22:5e:4c:88:3f:11:44:47:45:3f:d9:3d:3e:ba:
                    ee:77:d3:49:e8:f9:3f:3a:5d:ee:21:66:dd:11:dd:
                    0a:9e:de:8d:3a:10:e3:54:2a:23:3b:fb:90:ae:b1:
                    fd:3d:e4:ef:45:7a:3a:cc:da:6f:ac:60:35:05:ad:
                    e5:4e:3c:a6:2c:7d:48:cc:44:5e:2b:45:56:2f:9f:
                    17:34:51:e0:08:dd:41:e2:d9:24:8b:ef:df:1f:ab:
                    dd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:66:0A:C2:C6:C6:26:F3:CB:F1:EC:7A:CD:2D:66:FE:C1:AE:0D:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/311fb489-48a2-3f99-a66f-a535414c6417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:24:44:b1:53:4e:04:9e:1c:fd:22:20:48:1a:83:53:b5:78:
         5a:5c:49:2e:bc:cd:19:13:1d:44:65:49:c3:2a:12:99:3a:20:
         fd:c9:44:cf:5b:c3:03:ed:14:c2:e4:da:b9:af:cb:ed:01:7a:
         66:98:c2:4b:ef:dd:61:0d:71:c6:2d:c5:09:38:bc:88:cb:96:
         f0:ad:79:60:03:b8:f7:c7:4a:f2:21:de:19:70:ca:d1:2f:66:
         7d:0f:47:5f:f8:98:6f:82:f6:c2:e5:d3:3f:aa:09:6f:9a:3b:
         8c:32:71:a8:74:79:af:d5:0e:5f:c1:23:99:63:0b:06:bd:5e:
         30:72:43:6e:0c:25:4d:78:6b:a7:79:32:d0:91:7c:d5:91:3d:
         a8:12:e6:05:ef:f5:09:80:64:c8:9e:37:9b:c7:b6:b9:76:d3:
         20:1f:aa:46:05:9a:3f:63:6d:75:a1:8b:b7:f8:3e:58:9d:74:
         07:c3:cb:f4:5f:6a:1a:43:56:4e:95:03:49:52:52:bb:5f:d5:
         64:fd:a1:23:bd:73:a7:42:e8:09:fa:6a:25:23:fb:3a:c3:22:
         36:55:c8:56:fc:9c:9c:2b:fe:5d:6b:22:ea:a2:4f:59:a7:a1:
         a7:f1:e2:32:8e:50:02:04:ad:52:67:8a:48:61:be:36:5d:d5:
         4c:c7:6e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 23:15:34 2026 by rpki-client