Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f8653e9b-4bdf-39f7-bc5c-aa1002524e1c.roa
File:                     f8653e9b-4bdf-39f7-bc5c-aa1002524e1c.roa (raw, json)
Hash identifier:          /EgnnP3evmgjtMooHChRw4Yw1VPSRZPXGDMjngj+yBw=
Subject key identifier:   B8:63:ED:53:DD:DC:F0:90:D5:B2:07:BC:2E:A1:26:C9:90:98:74:BE
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F00DCC52F3F2119494957A900
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f8653e9b-4bdf-39f7-bc5c-aa1002524e1c.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        152.44.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:c5:2f:3f:21:19:49:49:57:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=063ac799-197b-4c57-bc0c-2b72913f81fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bc:5f:0f:33:22:e4:76:b8:ee:e6:3a:7d:5f:
                    9a:5a:11:07:f9:c8:37:eb:e1:de:27:97:49:d7:2e:
                    1f:13:89:83:07:ce:2a:30:57:7d:16:66:6f:ef:0c:
                    46:3f:b2:fd:2a:7c:91:86:af:fb:23:f1:90:e9:7c:
                    c3:a2:36:7c:2e:7a:7a:61:c7:ff:82:26:a3:27:11:
                    ed:59:68:ed:19:7b:1d:d6:2e:3a:bb:9f:b7:c7:0e:
                    51:e1:00:89:de:7d:6a:73:b0:c9:fc:13:e0:1d:ca:
                    d7:3b:12:6b:b3:a5:4b:bb:79:af:6e:26:bb:f4:36:
                    64:66:22:dd:b5:19:2a:33:88:31:f6:2d:57:f0:fb:
                    aa:bd:f4:c9:c3:67:04:e4:77:25:1b:0a:a1:53:43:
                    cf:b8:30:2a:af:a5:36:57:72:c4:99:0c:60:35:a9:
                    4f:c6:da:f9:92:35:ca:1e:b4:01:7d:80:9a:41:81:
                    46:2e:f3:77:ea:32:3e:f1:b7:58:d9:34:5b:f1:c9:
                    26:ca:89:07:43:7e:3f:e9:7d:48:5e:47:60:97:5b:
                    3f:6b:dc:9d:51:fd:ce:da:9c:f4:e4:15:b1:9b:09:
                    ab:cf:18:4d:04:c4:e4:26:13:33:2d:e0:15:5d:23:
                    dc:1f:4a:5f:fa:d4:70:45:5b:82:41:4f:52:e1:58:
                    ed:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:63:ED:53:DD:DC:F0:90:D5:B2:07:BC:2E:A1:26:C9:90:98:74:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f8653e9b-4bdf-39f7-bc5c-aa1002524e1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:82:57:05:42:cf:86:b4:6b:fe:ae:55:25:83:c1:c0:91:d7:
         a2:06:59:78:ba:c8:c0:92:48:0b:7f:3b:8d:9f:21:f9:e6:95:
         2e:e3:16:e9:70:4b:16:54:58:a5:97:f0:90:52:ec:fc:62:fa:
         44:14:15:22:e0:7b:77:0c:8b:5d:80:eb:be:38:3c:22:be:8a:
         bf:6a:07:95:a2:96:3c:b5:ec:82:2a:b9:63:72:70:e0:cd:b1:
         4a:5b:0a:a9:33:b0:13:95:93:47:f4:26:fd:ec:58:c2:cd:db:
         79:b1:7d:4e:e5:44:62:a3:ce:5b:f5:1c:3d:84:d5:6d:0e:46:
         29:7f:71:b0:08:88:8f:9f:ed:9a:b2:7b:67:74:f5:8a:a9:4d:
         35:8c:bf:74:c1:e2:a8:8c:f3:d4:e5:b4:cf:10:8a:47:24:3c:
         67:23:56:75:8d:7d:79:d2:3e:16:5a:55:d4:65:3e:d3:42:d4:
         3a:68:13:01:4d:f7:58:29:d1:44:7e:d4:be:fd:38:b7:66:33:
         aa:4c:62:60:37:9b:46:d1:09:0f:6d:1e:b7:9d:f7:a2:48:cb:
         1f:ef:ab:35:ad:2a:77:4c:d0:1a:fe:43:8d:6a:13:88:9c:49:
         9a:f6:d1:da:7f:67:b3:ce:2d:d4:9b:29:b1:82:1e:21:9c:7d:
         df:57:93:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:17:01 2026 by rpki-client