Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/8a1f5d33-b3d2-3798-be9b-364fda1a8a6d.roa
File:                     8a1f5d33-b3d2-3798-be9b-364fda1a8a6d.roa (raw, json)
Hash identifier:          1dzzEa+NQMntaOutA2cDkPdoKedM3AiMCT6P5413VM4=
Subject key identifier:   E4:3B:19:7C:4E:B9:EB:34:10:9C:BF:62:12:BC:3E:C6:61:35:DF:73
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584F6F22EF3B599328E9CB59B380
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/8a1f5d33-b3d2-3798-be9b-364fda1a8a6d.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     62610
IP address blocks:        107.150.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:ef:3b:59:93:28:e9:cb:59:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=deddc43f-033b-4866-b938-dbb18e93ef8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6f:e1:d3:0b:bf:27:b3:f5:68:cc:3d:d3:72:
                    5e:53:b4:e0:f6:3a:00:54:90:d5:cd:e9:ff:c7:4b:
                    90:2f:f2:85:46:5d:a0:76:bd:d1:37:b9:18:30:ca:
                    92:f9:6f:38:12:c0:30:87:4e:18:76:ff:ce:8b:91:
                    b8:41:57:ac:99:3b:d6:aa:00:3d:ed:41:b3:20:4d:
                    ab:66:bb:72:f4:82:67:10:35:8e:f7:e2:52:4c:5d:
                    7a:2f:0f:75:a1:d8:ac:27:37:8d:3a:17:c3:a6:dc:
                    27:e9:d2:89:24:a9:a2:f5:71:71:e4:92:17:61:78:
                    49:0e:4c:ff:01:45:e7:c7:8d:01:08:f6:91:ff:2c:
                    3e:80:8e:9f:8a:59:ee:30:58:65:88:0c:f7:a5:f9:
                    4d:1f:74:28:8a:08:5c:81:59:89:fd:74:c4:57:a8:
                    35:f9:c5:ab:5d:1f:c6:55:bd:c3:23:98:c4:32:82:
                    83:c5:b0:cf:56:16:2e:d1:e9:17:01:7e:43:7a:24:
                    e7:68:b9:88:13:df:fc:76:18:d1:c4:8e:a1:b3:b8:
                    a9:0c:6e:2e:24:a1:31:d8:fc:51:9e:55:99:f4:67:
                    b3:8f:7c:b4:83:e2:54:e7:bd:b9:16:4b:b2:a4:65:
                    cb:81:62:a5:94:af:a0:3d:ce:f9:81:85:5c:81:c4:
                    3e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3B:19:7C:4E:B9:EB:34:10:9C:BF:62:12:BC:3E:C6:61:35:DF:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/8a1f5d33-b3d2-3798-be9b-364fda1a8a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.150.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:6f:f7:06:ed:e7:ad:c6:fa:1d:dc:b6:15:56:ab:62:66:2d:
         fc:af:c7:5e:06:07:17:49:36:9e:1d:74:d0:3b:93:74:f6:b1:
         03:ee:c6:10:62:b0:5d:6b:2b:3a:70:b1:35:93:b6:48:63:46:
         b5:3b:28:b1:ad:bd:8f:a5:1d:0b:a0:5e:84:44:53:bd:f2:22:
         95:0f:49:5b:ce:a8:07:ea:0e:58:ab:fd:2d:64:0a:4a:ae:76:
         3b:5c:15:7b:a5:23:39:75:e7:11:88:b9:37:72:97:e1:ab:1c:
         85:8a:8d:b1:21:5b:e2:ac:a6:02:2c:dd:d1:0c:53:6c:38:23:
         e3:1f:5b:d1:e6:cd:18:7a:3d:80:d1:0f:f7:e8:1c:00:b2:cf:
         86:c9:08:95:26:7e:e2:1a:2f:8c:bc:7c:33:28:8f:4b:b9:bc:
         f8:6e:d4:a7:3d:62:6f:fe:f5:fd:0d:e9:7c:7b:10:dd:d8:59:
         3a:35:bf:a6:de:7e:20:79:1e:a5:f9:7a:39:ae:b3:bf:b5:a4:
         6e:f6:c1:c8:b0:68:66:e2:03:78:3f:75:04:c0:db:ef:3d:64:
         71:17:ea:df:e6:d5:e6:fe:91:d3:56:12:57:bd:2e:bf:93:76:
         28:bf:75:04:42:4d:95:72:46:bd:2e:bc:08:a5:5f:12:87:1a:
         be:6e:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:15:34 2026 by rpki-client