Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/9b53990e-22bb-30d5-bec2-63f04fc66fe9.roa
File:                     9b53990e-22bb-30d5-bec2-63f04fc66fe9.roa (raw, json)
Hash identifier:          S61UBvU3/hLqAcFmi17d3+NU/vMo1XngWlwkJNNMtf0=
Subject key identifier:   95:30:A3:55:9F:91:70:2E:5B:50:DF:A1:59:3F:0A:84:F7:6E:E5:6B
Certificate issuer:       /CN=ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe
Certificate serial:       010D0C9F4328584EAE81A326E509EA1A9A1FA800
Authority key identifier: 22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/9b53990e-22bb-30d5-bec2-63f04fc66fe9.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     3356
IP address blocks:        107.191.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:a3:26:e5:09:ea:1a:9a:1f:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=96df01d4-ba28-40b0-bf55-2438759425c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:d8:ac:8f:5e:39:ab:c8:76:43:49:61:de:
                    67:7e:01:c7:18:4d:ef:3b:33:65:bb:f0:a9:57:82:
                    e1:72:b4:02:dc:4b:c1:26:08:ae:28:bc:d1:14:49:
                    9c:69:7c:f4:bc:81:01:1a:9a:b1:7f:3f:08:54:28:
                    af:13:94:27:24:af:1e:1a:30:5d:de:35:5f:c3:9a:
                    0c:3d:54:f1:6d:55:50:6e:59:33:2a:29:28:60:b7:
                    ab:9c:b1:97:26:6e:1c:85:6e:24:97:53:8d:58:7f:
                    cd:69:63:74:27:c2:c9:a7:84:b0:fb:46:62:0a:c5:
                    88:99:49:86:1b:c1:9c:36:b8:2c:ce:65:64:cd:3a:
                    b9:82:e6:41:e1:be:25:62:d1:8f:9c:28:c8:c5:b3:
                    be:1b:4e:a8:80:ec:bf:97:5e:c7:95:b1:69:3c:41:
                    12:2b:76:82:81:3b:0f:9a:7a:0f:8f:62:64:2d:d7:
                    0b:a7:9b:09:e1:d4:95:0d:5b:84:68:66:9f:95:3e:
                    97:7a:d0:54:cb:9e:bc:cc:48:47:60:e4:5f:e2:ce:
                    2a:3b:6d:fa:25:34:24:92:51:67:62:a6:d6:5c:e7:
                    58:b0:ca:a9:cd:f6:3d:3f:7b:fe:61:42:e7:ef:03:
                    42:0b:38:da:41:87:68:94:14:65:df:ae:51:38:0d:
                    05:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:30:A3:55:9F:91:70:2E:5B:50:DF:A1:59:3F:0A:84:F7:6E:E5:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/9b53990e-22bb-30d5-bec2-63f04fc66fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.crl

            X509v3 Authority Key Identifier:
                keyid:22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.191.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:4e:fb:41:d9:53:7e:89:2f:fb:68:2e:66:60:aa:df:dc:4e:
         a1:2f:35:aa:37:7a:38:75:92:69:4e:03:ce:7f:2c:fe:23:7f:
         f0:88:ed:d9:91:dd:aa:ef:e6:4a:93:64:8c:41:e2:2d:53:cc:
         15:33:3c:b1:12:bd:52:a0:30:0d:85:3a:3f:a0:dc:c3:99:0e:
         87:1f:f1:4f:dc:62:26:50:d7:b4:6b:4a:77:ef:ee:8a:f5:cd:
         15:d6:c3:30:e7:dd:9f:15:e1:88:5a:9f:b7:19:51:26:22:86:
         f2:c5:53:f1:78:d8:39:ee:ef:c1:86:8b:a8:bc:c0:3a:06:48:
         8a:20:43:6e:05:02:12:b5:69:c3:12:32:7e:84:19:ce:16:c6:
         6f:43:73:f2:03:7b:5b:f9:bd:a6:4b:d8:5b:16:9f:a9:96:4c:
         c6:70:91:06:37:56:d3:a5:71:1a:de:e7:9b:d8:e3:66:cb:8f:
         37:c2:23:59:76:94:70:ca:12:df:8b:b9:18:2c:84:d3:39:e8:
         d8:d6:9b:8a:97:53:90:52:fc:f7:fd:bc:c1:84:14:2a:ef:10:
         24:2c:6c:37:18:41:59:0a:eb:b1:d3:5d:b9:b1:64:35:ef:20:
         f3:1c:48:c1:3e:b6:74:c1:34:d5:0c:9f:8e:3a:8f:a6:87:73:
         79:dd:32:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:19 2026 by rpki-client