Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6f59d69b-2b27-3b4e-8a14-e1eb1b261540.roa
File:                     6f59d69b-2b27-3b4e-8a14-e1eb1b261540.roa (raw, json)
Hash identifier:          RlsPnZY98RvyyQUvb182IgxzzrIjihUWgv2XPLh1dA4=
Subject key identifier:   5D:C4:FC:F7:1A:52:6C:60:CD:D6:14:70:6D:EA:A1:7F:5A:D0:3B:B1
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F4328584FAB28AEB77ADF123FF6040180
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6f59d69b-2b27-3b4e-8a14-e1eb1b261540.roa
Signing time:             Fri 30 Oct 2026 01:00:13 +0000
ROA not before:           Fri 30 Oct 2026 01:00:13 +0000
ROA not after:            Thu 28 Jan 2027 02:00:13 +0000
asID:                     11348
IP address blocks:        207.160.128.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ab:28:ae:b7:7a:df:12:3f:f6:04:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Oct 30 01:00:13 2026 GMT
            Not After : Jan 28 02:00:13 2027 GMT
        Subject: CN=32116bf4-e0c7-4300-837c-ded74521748e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2d:1b:5d:2d:6b:8d:0b:57:a8:83:f2:6c:43:
                    e8:ba:0e:c7:e7:ac:48:98:90:ba:b6:06:95:7f:f5:
                    a4:67:fa:d5:f7:85:37:93:b3:08:2e:8f:9f:2a:c9:
                    99:84:e1:be:cc:2a:31:ad:3c:82:45:62:77:2f:ba:
                    eb:de:f3:3a:5a:2b:0f:c4:e3:da:66:ba:8d:a4:65:
                    d6:2f:c9:14:49:ae:49:db:41:98:2d:62:1d:ed:7e:
                    9f:1e:17:ce:1a:e7:aa:77:55:47:bd:3a:45:71:3c:
                    b7:cb:76:9c:cb:fc:0d:e3:39:86:aa:db:4e:68:f2:
                    92:64:42:45:c5:9d:cc:96:c2:08:3f:03:02:78:42:
                    44:81:7c:c3:b1:e5:31:d5:e0:eb:55:5e:5a:53:b1:
                    0a:cc:b1:2e:2b:6a:b4:8d:81:73:cd:71:9a:36:84:
                    75:6e:4b:39:75:b1:67:47:fa:2a:cb:f3:ac:81:46:
                    0a:a0:fe:b0:e3:aa:e0:fb:b5:80:35:29:99:dc:d5:
                    15:4d:46:cd:3f:2e:98:f3:a1:97:61:c2:be:76:52:
                    2d:d5:41:f0:4c:28:b9:36:9b:48:01:06:0c:1f:3a:
                    b2:74:a9:b5:38:42:4b:cb:e4:e5:34:17:87:ce:35:
                    9b:b5:07:95:90:73:da:a4:3d:87:42:a2:b0:2f:d5:
                    6f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C4:FC:F7:1A:52:6C:60:CD:D6:14:70:6D:EA:A1:7F:5A:D0:3B:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6f59d69b-2b27-3b4e-8a14-e1eb1b261540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.160.128.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:3d:bf:3a:18:20:04:64:cd:20:f6:68:2c:a6:08:b6:48:ce:
         04:51:cf:61:56:e5:fb:d9:b0:24:35:ae:62:76:6b:f4:14:c5:
         ba:43:08:81:46:b3:4e:1c:c7:22:fb:ae:2d:08:f1:50:49:03:
         37:36:fe:dc:8d:69:f9:96:d5:30:91:b0:16:31:f7:93:38:ba:
         15:63:27:9a:20:b3:3b:99:29:87:22:f2:31:04:85:9b:5b:bd:
         7a:d7:53:3b:c4:3a:e2:9e:f2:13:52:c9:c3:94:e9:78:fd:a1:
         77:b0:8d:7e:5e:1c:49:ca:ed:be:6e:74:1e:3b:2a:b5:dd:ba:
         2f:55:ad:34:cc:db:46:50:68:bd:c9:e2:f5:fe:97:26:a8:aa:
         3a:27:96:ed:3b:a9:75:0e:ab:ea:75:1f:e2:03:ce:c0:7e:02:
         a8:c6:4b:f9:a4:37:a1:47:37:df:73:1c:bd:49:0b:c9:4a:18:
         eb:d5:f6:e2:d0:e9:56:e2:3c:df:8b:f3:4d:df:3e:d1:79:6a:
         94:60:aa:92:d4:07:cf:ed:6d:b1:eb:a1:ca:18:84:3e:53:08:
         47:79:4d:d5:3b:27:19:14:32:40:bb:12:d8:b5:11:c8:63:28:
         6a:26:47:67:28:02:4e:85:17:c0:cf:97:f5:73:e1:18:7a:14:
         e1:b3:a7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:21:55 2026 by rpki-client