Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ca29cc-4e38-3e4f-8af1-e0c5c578c39c.roa
File:                     a7ca29cc-4e38-3e4f-8af1-e0c5c578c39c.roa (raw, json)
Hash identifier:          0vqGqxb3yLZZz4klSZrfCGOUUAJYdz+3d8vg6EinHZc=
Subject key identifier:   00:20:8B:FC:D7:CF:7E:AF:94:FD:3C:80:E4:1C:EF:E2:31:B6:40:D5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3D758CF7412E70A2B30DC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ca29cc-4e38-3e4f-8af1-e0c5c578c39c.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        107.3.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3d:75:8c:f7:41:2e:70:a2:b3:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=b7c04bca-b56e-4b8b-a74b-e1f096534b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:34:2d:39:82:d4:52:1f:a3:76:88:72:5b:5c:
                    7e:89:8d:fd:b2:e5:cd:e4:a8:49:c6:3e:6f:da:36:
                    ed:71:8e:00:e2:cf:14:b3:50:89:d0:17:6c:b8:2f:
                    30:dc:00:f7:c3:23:32:3c:d2:e7:c0:e0:34:b6:fc:
                    e3:2d:1c:49:dc:e4:68:88:32:3f:2c:b8:bd:b0:11:
                    04:8f:30:90:13:b8:67:d3:95:cc:73:0f:b8:55:a3:
                    1a:f3:df:84:2d:e9:60:91:cf:54:bd:e5:2e:fb:4c:
                    3c:59:23:02:b1:0f:68:c0:78:aa:5e:20:42:48:4c:
                    1c:fe:3e:d8:95:2b:c3:31:ae:74:3d:6a:f9:0d:99:
                    86:6e:06:6e:e8:42:75:bc:b6:9c:ae:7f:71:55:87:
                    11:f2:4b:a4:79:8f:f1:70:06:6c:de:d8:db:32:79:
                    3e:9e:eb:72:b0:ef:e7:11:5a:ef:ba:0f:18:bb:d0:
                    4b:64:b9:80:ae:fc:d2:7b:e3:1d:25:5b:65:22:45:
                    a6:98:c4:28:69:7c:3b:4b:44:ee:f3:a9:bb:ac:db:
                    2e:3e:bd:72:a7:45:01:f5:6a:e3:15:46:5e:17:73:
                    62:69:71:8c:c1:68:f4:57:e1:94:72:ca:89:83:e8:
                    59:2e:01:c2:56:bf:10:a1:49:c5:37:9f:13:aa:be:
                    aa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:20:8B:FC:D7:CF:7E:AF:94:FD:3C:80:E4:1C:EF:E2:31:B6:40:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ca29cc-4e38-3e4f-8af1-e0c5c578c39c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.3.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:35:65:1a:c4:a2:9c:4e:76:dc:4f:18:7f:ff:87:b1:f3:8c:
         7a:d6:c9:5e:6d:09:29:2e:36:35:92:1a:14:3e:97:a0:91:00:
         a5:d7:47:d1:3b:5d:ac:ea:b2:af:be:c7:61:38:d9:0d:36:08:
         6f:2f:1e:95:8c:b2:dc:33:03:3b:86:c0:f5:98:a4:ad:71:7b:
         3a:ac:67:9a:f7:96:80:18:25:c4:18:69:54:73:e6:15:bb:9b:
         15:0c:4c:cb:ef:00:f1:89:9d:a9:b9:73:6b:d8:4d:0d:9b:20:
         9e:cc:68:0b:c4:dc:56:79:cf:f4:e9:31:71:01:82:7e:98:3d:
         60:8f:6a:c3:ec:83:80:e4:58:9b:5e:7d:26:d5:e3:a5:c0:ff:
         a0:59:eb:a7:f9:33:14:43:b9:b3:f9:20:42:86:ff:41:a6:f7:
         e6:03:6b:61:ff:e4:8f:a8:e1:53:b0:87:18:b2:da:19:a4:37:
         20:2c:ca:54:a6:26:a2:ae:8d:88:e1:40:aa:31:63:aa:79:31:
         4a:42:7d:a1:5a:6f:8d:36:2f:31:fa:8a:9f:72:24:24:30:71:
         5b:7a:18:15:7a:81:ae:35:f2:61:30:16:b5:49:e3:d6:e1:b8:
         f0:c3:2e:63:6f:6e:be:77:6c:d7:8f:52:a3:dd:dd:96:6f:ee:
         d5:b1:82:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:03:16 2026 by rpki-client