Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/edb1399c-e7aa-36a8-bd44-dfbacba808c0.roa
File:                     edb1399c-e7aa-36a8-bd44-dfbacba808c0.roa (raw, json)
Hash identifier:          V8QJiirc5dqCATSJ2SqQOwH33nzLhRwXP78Yv8olZEY=
Subject key identifier:   2E:CA:F3:B3:AE:70:89:DB:52:43:87:78:1C:80:70:19:CD:14:E8:A1
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F4328584EC20C6D725CAD68009793E200
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/edb1399c-e7aa-36a8-bd44-dfbacba808c0.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     1403
IP address blocks:        107.161.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:6d:72:5c:ad:68:00:97:93:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=cc506edd-8e29-4f04-98e1-8fdec3b49d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:91:19:55:fa:cf:92:b8:0a:48:0e:10:40:
                    a8:a3:63:d0:31:de:8a:4f:dd:41:9b:b0:17:12:f2:
                    bd:42:3f:2c:90:fe:de:5f:ed:11:3c:fc:d6:bb:86:
                    31:50:8d:26:18:a6:76:d0:47:80:aa:8e:d0:4c:62:
                    b0:58:b0:eb:8b:aa:7e:b0:bb:32:26:d0:f0:3f:8b:
                    09:3a:c8:1e:e0:17:ed:5f:c1:96:0a:11:93:87:fc:
                    7d:16:4a:58:2a:14:9c:15:02:2c:a0:c4:d0:2d:42:
                    0d:23:38:a2:b2:77:59:6f:af:c3:49:84:ee:a6:26:
                    fb:cf:bf:75:63:52:6c:56:b8:4f:20:e5:8b:b8:08:
                    fe:18:6b:40:d8:d8:25:c4:8b:97:30:05:87:17:87:
                    2d:67:7d:86:ef:3a:fa:33:8d:83:5a:65:13:e7:a6:
                    12:ff:7f:54:b3:48:e3:88:40:cc:77:d3:64:61:d6:
                    08:13:8d:dc:82:8a:91:77:c8:d5:29:6c:11:ba:b0:
                    e3:65:44:aa:f7:ca:3f:97:aa:7d:6e:91:a5:f5:24:
                    44:e7:89:f1:4c:d1:98:4f:77:3c:ec:49:dd:dc:e9:
                    3a:42:d9:c7:48:87:82:a7:b8:4a:b3:d1:bb:94:7d:
                    79:f4:01:2f:54:90:0c:4b:46:f3:56:a8:67:1d:47:
                    ff:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CA:F3:B3:AE:70:89:DB:52:43:87:78:1C:80:70:19:CD:14:E8:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/edb1399c-e7aa-36a8-bd44-dfbacba808c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.161.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:6b:27:32:d1:cb:26:e6:c3:5f:d9:3b:5a:8a:8a:4b:92:7b:
         5a:74:ae:f4:5a:e5:52:0b:7b:5f:f5:24:0c:fd:8b:a8:2e:57:
         86:e1:b5:09:f4:e4:4d:8b:ed:be:2c:ec:cb:02:83:57:e6:07:
         bd:20:ec:6b:d1:a1:ae:0f:97:f1:4a:8f:fb:de:0e:ed:16:7d:
         27:db:2d:7a:32:df:39:04:5a:9d:a8:af:bb:bb:40:8c:28:01:
         d4:b2:d2:02:6b:dd:fe:e6:62:69:73:84:79:1e:87:f1:ca:8e:
         0a:61:24:40:10:ad:94:4c:75:91:91:11:3d:c0:52:85:81:76:
         d3:aa:5e:76:78:db:85:3f:2e:10:d4:76:19:44:e6:d2:bb:5b:
         ff:97:b7:0b:64:4d:44:a8:3f:f8:78:b6:44:f9:50:ce:64:69:
         b9:67:05:01:75:a6:8d:7d:a7:96:a2:2b:0b:d8:9d:4d:22:2f:
         ec:f4:3a:c2:07:60:df:dd:10:9c:74:03:73:4e:f5:1e:1c:2b:
         e4:23:c9:bc:a0:12:2a:0c:18:83:f7:f9:1b:42:2d:90:9a:6f:
         a9:a2:3e:bf:1b:4e:64:c6:2b:9d:13:0b:bd:3f:46:d0:e7:50:
         b6:be:60:60:40:1b:fc:c0:18:18:6f:b1:64:78:d2:b1:74:2d:
         8f:32:fb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:57:43 2026 by rpki-client