Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/e34faaa6-aaa5-3164-b66b-2fc103f69b4c.roa
File:                     e34faaa6-aaa5-3164-b66b-2fc103f69b4c.roa (raw, json)
Hash identifier:          MYUNJ3VT3sPsxCU+73hFkjZXvO/mimZJnBkH9hKJyZU=
Subject key identifier:   CE:38:C7:BE:9D:A9:5F:6E:68:AA:42:A9:F2:5A:93:2C:91:54:91:85
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584F0FC2FFFD1699D7D72775F780
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/e34faaa6-aaa5-3164-b66b-2fc103f69b4c.roa
Signing time:             Fri 04 Sep 2026 09:05:28 +0000
ROA not before:           Fri 04 Sep 2026 09:05:28 +0000
ROA not after:            Thu 03 Dec 2026 10:05:28 +0000
asID:                     393889
IP address blocks:        107.151.137.0/24 maxlen: 24
                          107.151.148.0/24 maxlen: 24
                          107.151.150.0/24 maxlen: 24
                          107.151.159.0/24 maxlen: 24
                          107.151.179.0/24 maxlen: 24
                          128.1.143.0/24 maxlen: 24
                          128.1.177.0/24 maxlen: 24
                          128.1.183.0/24 maxlen: 24
                          128.1.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0f:c2:ff:fd:16:99:d7:d7:27:75:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep  4 09:05:28 2026 GMT
            Not After : Dec  3 10:05:28 2026 GMT
        Subject: CN=9e2e7cce-eb40-4ba2-96d5-62bcf47f7834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ad:ae:d9:3e:a1:d1:ee:f1:da:dd:b1:bc:2a:
                    4b:6c:05:c7:a3:a2:71:72:4b:18:da:90:e0:75:e0:
                    e5:bb:8f:79:29:de:61:79:cb:3d:6b:37:fe:5a:8d:
                    b4:dc:b9:c9:0e:db:d8:77:1c:11:79:9b:98:59:19:
                    94:e3:5d:c2:cf:91:80:ca:fa:a1:ac:41:3e:22:c2:
                    fa:c6:29:f1:69:ce:20:be:81:83:df:b8:64:9d:cf:
                    e6:c1:f1:e9:7a:6f:0f:dd:e9:d5:a4:09:46:3d:06:
                    11:7e:8f:47:b0:f4:5b:8e:fa:64:5a:d5:cb:6d:13:
                    90:9c:86:b5:8d:fe:92:a5:83:89:bc:7f:a2:c7:ee:
                    bd:f5:f6:df:17:44:60:15:41:3d:65:dc:f1:fb:9b:
                    25:2d:43:d0:85:62:81:de:d5:65:ce:b0:6f:5b:ab:
                    e4:2d:77:7c:17:a6:0f:28:41:1f:f0:ad:ca:f8:c9:
                    49:c7:3d:c4:cb:c3:1e:31:cb:e6:04:c2:fc:5a:ae:
                    5c:c9:28:62:83:29:03:79:29:70:b9:c3:60:bb:03:
                    ad:90:2b:64:b8:af:47:a7:0e:84:7f:bd:6c:af:e7:
                    88:16:5c:dd:af:81:c9:a7:10:57:d1:a1:63:fb:f5:
                    cf:52:9e:66:15:3d:6d:c7:4c:4d:c5:01:ff:aa:1f:
                    82:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:38:C7:BE:9D:A9:5F:6E:68:AA:42:A9:F2:5A:93:2C:91:54:91:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/e34faaa6-aaa5-3164-b66b-2fc103f69b4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.137.0/24
                  107.151.148.0/24
                  107.151.150.0/24
                  107.151.159.0/24
                  107.151.179.0/24
                  128.1.143.0/24
                  128.1.177.0/24
                  128.1.183.0-128.1.184.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:85:e9:7e:ca:33:02:55:67:79:12:55:51:f7:70:58:39:ae:
         4f:97:8a:1e:42:a0:9e:0c:82:da:af:2c:ea:8c:88:0b:f6:77:
         e8:94:3b:63:f3:51:44:e4:fc:b9:8c:09:14:f2:cd:b1:7b:db:
         55:cd:6a:0a:d9:b2:23:d1:9a:08:f7:6e:4a:49:e0:28:1b:12:
         0a:b3:e4:2e:49:85:34:b9:5b:6b:e2:a1:7f:e4:d2:51:d9:2c:
         6a:76:47:b5:da:60:03:a1:11:08:f8:f4:8d:bb:a1:2b:de:92:
         bf:a0:b1:54:d2:f8:80:7c:6d:d1:5b:3b:49:da:44:de:a5:a9:
         7f:1a:ea:56:2f:fe:b8:3c:7f:7c:3e:7f:12:7c:61:29:4b:a1:
         51:cc:e5:24:eb:7d:34:0c:eb:e5:ce:3f:d6:73:6e:5a:f1:36:
         59:50:30:21:f8:bb:84:df:2a:15:94:6b:b2:cc:4b:1a:7c:d4:
         09:7b:ef:08:ba:09:ec:b0:01:a9:0c:d5:3f:fa:be:5d:d5:2a:
         16:55:1c:15:a5:d2:8e:cc:d2:26:5e:fe:33:4b:c3:cf:e5:07:
         e0:f7:1a:20:72:cf:6a:d1:f8:23:62:e9:31:2c:54:a6:69:51:
         98:b7:e6:97:e5:26:99:ac:dc:a2:61:dd:4b:d2:d6:d5:cd:18:
         3a:d1:ea:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:01 2026 by rpki-client