Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6e84b623-e3a3-3f1f-88da-e527e9861998.roa
File:                     6e84b623-e3a3-3f1f-88da-e527e9861998.roa (raw, json)
Hash identifier:          IrVqmNt5UkFijnLZc+qU1HNiAK9MItDJoveJtM0srfQ=
Subject key identifier:   28:76:12:65:BD:E3:CB:A9:AF:24:BB:92:F9:B8:8B:83:D6:40:BB:65
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584EA79EA9CA5D13FA39419728C0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6e84b623-e3a3-3f1f-88da-e527e9861998.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        209.107.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:a9:ca:5d:13:fa:39:41:97:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=01ab2a02-740d-42d1-bbfa-64ed92e147e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:41:12:af:b4:df:c5:93:77:5e:2c:6d:4f:
                    bc:d2:47:b5:69:68:21:26:cf:c5:c8:d7:b4:10:cd:
                    ad:a5:93:31:7a:25:5e:4d:75:ee:e8:0b:b6:95:40:
                    15:04:f4:ff:cd:05:be:c9:b5:e0:ac:0a:4c:68:e5:
                    45:b5:be:aa:e1:b9:f9:95:9f:2f:40:3d:a6:24:3c:
                    b4:9f:05:99:de:85:24:6e:11:3a:b4:8f:0b:34:75:
                    3d:23:3a:55:24:19:e3:93:d2:27:68:bd:52:67:13:
                    23:e5:69:80:52:90:14:66:c0:0a:7e:17:1d:5b:b9:
                    44:87:b5:0e:26:e2:8a:60:43:bf:62:24:78:6b:09:
                    7a:37:ae:70:76:6a:94:52:90:82:29:b0:f8:4e:d3:
                    3b:e2:28:d8:61:c9:c8:8a:90:71:c8:d0:c5:43:68:
                    b0:66:43:ba:65:37:d6:dc:0f:c8:ca:53:b3:e1:65:
                    ff:4f:6c:78:26:7e:d6:09:e9:39:ef:02:1d:52:a2:
                    be:d8:83:f3:19:35:6b:76:b8:25:ff:f2:9b:60:5f:
                    72:45:2a:74:3b:fa:1b:2d:20:64:1a:f8:72:93:e2:
                    cb:f7:55:9f:8b:39:a7:22:d7:11:e6:02:59:99:7f:
                    07:cd:bd:d8:a0:19:44:c7:ba:dc:3b:af:fd:5e:68:
                    c4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:76:12:65:BD:E3:CB:A9:AF:24:BB:92:F9:B8:8B:83:D6:40:BB:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6e84b623-e3a3-3f1f-88da-e527e9861998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:8f:22:21:5e:ec:0e:a6:11:95:4d:33:50:9e:7b:99:84:38:
         65:2f:d4:d6:28:5a:04:2a:04:f8:e7:aa:fa:97:cc:c0:82:ea:
         77:df:08:3c:f8:ed:6c:63:32:7c:02:52:c2:41:83:d9:69:2a:
         8c:00:8f:f9:a4:07:10:93:7b:38:71:f3:4a:82:b5:09:77:40:
         ba:b2:ac:84:61:12:6b:bc:d2:37:2a:80:73:9f:4d:c2:9d:d8:
         2c:9e:10:7b:db:79:b4:35:fd:cf:98:c0:01:00:23:c4:14:c4:
         2d:48:f2:bf:4c:05:ac:13:07:4e:cc:b7:98:6c:d6:a4:9a:a5:
         3c:5e:06:ab:a8:e9:39:8e:fb:4f:ea:f4:bd:81:ce:6e:1d:b5:
         59:55:85:03:4e:0f:6c:f6:c2:68:94:fa:8e:fa:4c:3a:ac:7e:
         e3:a7:bd:25:1c:31:83:6f:98:d1:53:c4:17:88:45:1d:0d:46:
         b6:59:1e:30:5a:7d:5f:a1:d6:0f:6f:c4:96:f4:96:a8:59:cc:
         e6:b1:12:0e:60:ce:db:13:16:4d:10:de:13:77:09:c6:e3:2d:
         bc:7b:62:8f:e6:4b:c9:4f:ed:81:fd:a0:2c:24:5c:2e:0a:ae:
         2a:46:de:b9:94:65:76:9b:ee:87:9e:ec:d2:08:cb:5d:c5:a4:
         f1:b6:67:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:28:32 2026 by rpki-client