Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ea32300b-ee9f-3975-a89c-6ee3af1def4e.roa
File:                     ea32300b-ee9f-3975-a89c-6ee3af1def4e.roa (raw, json)
Hash identifier:          yaQ5W0DdIWSMkMGdDBoRC6oRak+g3TuFKIXspJUp56s=
Subject key identifier:   96:37:44:2F:00:4F:95:7D:4A:06:5E:B6:44:D4:DD:A4:FB:10:C7:39
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584EDF5C8AFB8FB97938A6BC7880
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ea32300b-ee9f-3975-a89c-6ee3af1def4e.roa
Signing time:             Tue 18 Aug 2026 01:00:12 +0000
ROA not before:           Tue 18 Aug 2026 01:00:12 +0000
ROA not after:            Mon 16 Nov 2026 02:00:12 +0000
asID:                     62468
IP address blocks:        107.151.224.0/21 maxlen: 24
                          107.151.232.0/23 maxlen: 24
                          198.44.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:df:5c:8a:fb:8f:b9:79:38:a6:bc:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Aug 18 01:00:12 2026 GMT
            Not After : Nov 16 02:00:12 2026 GMT
        Subject: CN=a052c807-a893-4a42-a6a7-34e17cb36635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:74:bf:55:5a:ad:ad:4c:58:fb:4b:16:06:
                    a1:65:5e:14:70:6a:ec:80:bc:a5:07:45:d3:2c:41:
                    1d:0b:17:32:76:fc:93:11:fd:36:d7:e1:62:df:f5:
                    1f:f0:dd:a9:fb:76:a8:03:88:c7:5d:53:04:22:46:
                    41:36:ff:8a:a1:dc:e1:cf:31:dd:e6:22:ef:dd:5d:
                    85:1c:f3:de:4e:82:4f:35:e1:a8:58:f2:46:12:7e:
                    d8:80:7e:0b:f9:f1:90:70:cf:33:c4:4f:5e:b6:4f:
                    01:ef:b9:52:cb:15:56:77:ed:59:56:3c:a7:98:78:
                    ab:b6:7b:39:12:75:99:68:5a:e3:d6:96:83:0e:27:
                    19:66:85:9d:04:9f:c9:08:3c:2a:f8:1b:e9:67:7c:
                    77:1f:a2:a4:a6:c9:0f:ea:57:d6:11:87:68:fb:a9:
                    d9:70:9b:08:60:d2:ed:c0:a0:4e:74:35:79:5a:ef:
                    a6:fb:e6:45:18:2f:a3:fd:ae:b3:9f:c5:a5:ba:96:
                    3c:13:07:66:10:9c:09:6c:53:a7:7e:7e:5a:88:c0:
                    f5:16:a0:4f:24:b6:fd:d9:03:5f:08:33:a7:4e:6e:
                    c4:5c:71:37:a4:d8:a5:ce:38:37:94:a1:df:d9:f1:
                    28:ef:ec:8a:a9:5e:68:95:18:46:13:08:a7:7c:b8:
                    92:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:37:44:2F:00:4F:95:7D:4A:06:5E:B6:44:D4:DD:A4:FB:10:C7:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ea32300b-ee9f-3975-a89c-6ee3af1def4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.224.0-107.151.233.255
                  198.44.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:ef:1e:8c:32:4f:c9:c0:2b:9a:58:ed:64:ff:9e:df:f5:26:
         c0:dd:53:20:fd:b8:c4:d3:b2:9b:c9:0b:b1:ec:7c:c1:31:98:
         33:8e:a3:2a:97:8a:c5:43:44:3c:b7:7e:28:c9:1d:aa:8b:1d:
         42:58:b0:4b:20:13:b4:ec:1c:6a:42:d8:5d:84:fc:7e:1a:15:
         c0:aa:e8:ed:e6:ca:c9:ce:05:ba:5f:e1:d6:ea:41:13:1f:4a:
         39:3b:e4:b0:65:61:6a:25:d5:7c:75:47:9d:0f:66:b3:70:8d:
         4b:1a:b9:82:b2:8d:67:08:41:b8:d8:3e:c5:42:1c:98:88:55:
         4a:d0:cb:8b:a5:d2:ee:13:e8:2e:3b:d2:45:65:d5:7c:a2:0f:
         8f:44:42:e0:03:47:74:2a:dd:e4:30:b8:3d:36:20:71:d2:93:
         09:05:d9:fb:d2:5d:f0:6b:b7:8f:30:b3:ad:7f:2f:2e:4f:81:
         c8:92:6f:65:38:0c:61:22:d2:ad:d6:38:44:f3:6b:e0:b1:ba:
         ff:32:81:11:be:24:44:11:ab:a8:ed:20:22:df:ec:41:0d:04:
         0a:40:e8:73:ce:ca:36:14:7c:bd:95:65:d3:d4:06:54:f4:83:
         ec:a5:21:e3:2a:bb:7b:9c:21:34:9d:8a:07:80:44:e2:83:85:
         be:0b:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:18:17 2026 by rpki-client