Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/480c00b3-5d59-3bed-b898-2c031081b71b.roa
File:                     480c00b3-5d59-3bed-b898-2c031081b71b.roa (raw, json)
Hash identifier:          P3KaFLoDan8IBSIhhrTd8MLn8JogtN8UnEjrPVKTdvk=
Subject key identifier:   14:52:20:0C:4D:9C:40:98:02:2E:4D:BB:7B:84:F6:92:9A:7B:C5:BA
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584ED9C73B436F1B3C5B8DFD8C00
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/480c00b3-5d59-3bed-b898-2c031081b71b.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     31898
IP address blocks:        108.167.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:3b:43:6f:1b:3c:5b:8d:fd:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=87f59299-462b-44ce-afd1-31eea8fe0e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f1:69:82:8b:a0:de:16:e3:31:b1:f7:85:2b:
                    81:7b:94:b5:a6:66:5d:52:7b:fd:a4:3b:bc:72:e8:
                    30:14:b8:21:95:c1:39:43:7c:73:4a:db:56:2c:2e:
                    26:1a:16:ee:e9:6b:69:20:d3:30:9d:c5:4f:1a:91:
                    e1:d2:c0:82:eb:a6:60:cb:b6:85:8f:e3:1e:69:29:
                    fd:90:9d:e1:a0:38:49:72:00:a6:96:b3:93:01:78:
                    40:4b:95:35:47:63:b4:24:fd:db:a9:e6:ec:f8:8f:
                    6c:47:9c:ba:b5:95:ed:64:7e:09:6c:3f:17:3d:33:
                    2c:0f:fa:b1:13:43:8e:59:23:ff:bb:a3:41:3b:4e:
                    49:d6:87:93:94:03:60:6d:4d:cc:65:dd:1c:d5:90:
                    b2:54:5c:40:d2:da:b1:36:d8:c8:99:bf:e4:aa:8b:
                    c9:f4:54:b2:e1:0f:3e:b7:4e:bd:ad:1f:d5:8d:54:
                    0c:2a:a4:12:a2:0a:2a:5b:4b:f4:56:33:48:be:9b:
                    f2:a3:74:b5:b4:b3:3d:82:f5:0d:c8:45:85:df:5c:
                    30:1f:1e:29:36:90:33:99:af:9d:99:e5:81:85:b8:
                    1c:b5:d6:65:6f:0b:f5:fd:ee:83:3a:1e:41:8a:ec:
                    f0:40:55:89:49:c7:81:ed:f8:a6:8b:5f:a9:bb:98:
                    34:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:52:20:0C:4D:9C:40:98:02:2E:4D:BB:7B:84:F6:92:9A:7B:C5:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/480c00b3-5d59-3bed-b898-2c031081b71b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.167.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:51:34:11:9c:02:c7:10:b9:90:a7:6d:3d:48:cb:cb:27:46:
         f2:e9:85:f4:84:cf:2c:ec:1d:c8:a6:97:3d:2a:e5:91:23:5f:
         09:79:1b:df:9d:17:11:62:fa:70:85:db:94:ae:d8:73:43:87:
         e5:21:34:83:d3:d2:22:ef:5e:55:2d:ab:69:cc:45:b0:bd:28:
         41:9b:a0:2c:19:0b:c0:99:18:4a:29:a7:61:94:47:94:f6:1a:
         16:6e:03:47:1b:11:e2:41:eb:51:d2:2c:0f:6b:b4:03:24:49:
         31:d8:ae:c7:42:a6:88:51:f9:be:16:f2:01:02:9d:88:33:ce:
         fa:ea:b3:be:72:4f:8e:0d:ba:71:83:c4:a6:7a:3d:1b:46:45:
         b0:06:ae:bf:cc:bc:c3:7a:a6:07:3e:ee:5a:9e:09:53:5d:fe:
         a6:c6:8c:47:16:f6:52:c9:27:f8:2e:75:95:7e:13:07:0d:b7:
         d3:42:df:48:49:d1:4c:13:45:b4:e0:6e:b3:2b:ac:44:68:ee:
         d3:0e:3f:37:34:c5:be:34:6d:cf:c7:ec:1b:c6:a3:ab:fb:f9:
         aa:43:a1:18:e7:3d:d7:d2:e0:24:dd:be:ac:60:4d:52:70:07:
         d8:df:17:a5:ce:0a:ea:3f:15:d5:bf:97:51:13:d8:96:73:a9:
         7c:c3:ce:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:08:25 2026 by rpki-client