Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8818c7a6-cf72-3cff-8995-91fa9a1fc2e8.roa
File:                     8818c7a6-cf72-3cff-8995-91fa9a1fc2e8.roa (raw, json)
Hash identifier:          agXwjRpwBMbrU9wAXkkhu1Ijyi/aZrb8z8kQAwcjNRI=
Subject key identifier:   07:8B:D3:DA:39:3B:F7:44:34:B3:8C:96:CC:CA:4D:9B:94:BB:50:26
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584EC0A730A344FB6DD0D53A9300
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8818c7a6-cf72-3cff-8995-91fa9a1fc2e8.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     32211
IP address blocks:        107.144.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:30:a3:44:fb:6d:d0:d5:3a:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=1d302c82-dad9-4763-b342-ac80f8cf8371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:be:30:1c:ff:59:7c:93:49:dd:88:4d:c1:dd:
                    27:0b:fb:63:5f:fb:af:21:fc:76:e3:54:a8:80:13:
                    a4:b7:aa:2e:95:9c:d1:54:9f:03:9e:3f:a0:bb:39:
                    f9:28:48:bb:c6:92:73:59:6f:40:97:27:de:e2:e1:
                    f7:24:d6:c2:c7:fb:d9:37:7c:89:61:97:a8:71:e8:
                    91:b4:d7:c5:4f:c3:af:df:41:fe:cf:4c:2c:47:45:
                    24:d2:bd:c5:51:d8:17:86:7a:35:fb:5d:0f:bd:ed:
                    b5:ac:22:22:b3:bd:65:bf:53:37:ac:11:ee:91:8b:
                    c3:4a:51:ad:1a:34:43:88:cf:e5:38:3f:29:ec:9d:
                    42:2d:74:d3:97:ab:3c:73:3e:4e:d3:d2:7a:e2:1d:
                    5a:5b:b4:56:8e:3f:1f:4a:4b:e5:91:4a:b0:ee:3b:
                    e0:a3:b3:92:da:e7:6c:29:90:e4:83:9e:2e:26:1a:
                    8a:58:57:65:7b:04:69:f1:72:7f:d4:d9:52:12:41:
                    b9:32:a7:10:74:24:16:79:0f:7b:33:c0:f9:72:f9:
                    6a:6f:88:f1:e3:24:56:2a:0c:a8:49:a4:60:d9:0f:
                    3c:0d:15:0e:66:88:b9:56:30:d2:03:b1:52:8c:b1:
                    63:18:aa:01:61:c9:0e:33:3e:84:d8:9e:88:f0:00:
                    4e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8B:D3:DA:39:3B:F7:44:34:B3:8C:96:CC:CA:4D:9B:94:BB:50:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8818c7a6-cf72-3cff-8995-91fa9a1fc2e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.144.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:27:b3:cc:f1:83:b9:2a:0e:9a:b3:65:19:a4:78:2d:02:31:
         a7:80:fd:d7:6d:44:d0:91:00:a9:70:8d:bd:8a:77:78:af:e5:
         13:e4:83:21:7a:25:04:f5:05:cf:1c:44:b6:db:a6:c1:db:6b:
         22:e2:31:07:14:d7:41:21:2b:fe:b5:0c:35:ea:92:33:05:87:
         48:b6:c6:88:9f:7a:dc:1d:fc:78:51:5a:da:79:ea:a3:d7:7e:
         fd:f1:0f:58:d0:22:55:17:cd:8b:99:80:09:3b:69:28:03:39:
         48:5a:bf:10:00:6d:61:e2:ce:5a:6d:77:85:c4:51:5a:66:9e:
         f2:e9:34:6d:c0:83:f7:30:e1:be:ed:91:6d:7b:65:5c:7d:43:
         86:db:2b:96:ca:c5:a6:3e:f2:2e:59:59:f0:c7:ed:4a:ab:f2:
         dd:36:5d:a6:84:ae:27:56:e1:41:57:bb:42:9f:be:7e:35:43:
         cf:50:12:ad:1b:82:69:54:80:de:ff:48:2a:4e:89:c7:14:ee:
         ab:33:d6:dd:6b:8d:1a:05:71:cf:c9:2e:49:fc:45:c2:e8:1c:
         e1:3d:90:05:d3:0d:d8:d2:21:be:a3:40:67:45:17:6b:19:2d:
         9d:31:b8:bb:7a:90:99:45:74:dd:bc:d3:65:f3:8e:5a:41:58:
         b7:ba:f6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 02:59:07 2026 by rpki-client