Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1cf73a95-5707-30f8-8fc8-90489261c6e4.roa
File:                     1cf73a95-5707-30f8-8fc8-90489261c6e4.roa (raw, json)
Hash identifier:          pApwP0gu6Xc6YEYG6uZgYuuexiuaHbKcQha65H7ZWVU=
Subject key identifier:   EB:01:2B:CE:E9:89:80:04:42:68:B1:7B:C1:11:31:F4:AE:FE:AC:D7
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBF5FA7AAB3BD56548C60CD00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1cf73a95-5707-30f8-8fc8-90489261c6e4.roa
Signing time:             Thu 06 Aug 2026 14:00:38 +0000
ROA not before:           Thu 06 Aug 2026 14:00:38 +0000
ROA not after:            Wed 04 Nov 2026 15:00:38 +0000
asID:                     396190
IP address blocks:        108.177.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:5f:a7:aa:b3:bd:56:54:8c:60:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  6 14:00:38 2026 GMT
            Not After : Nov  4 15:00:38 2026 GMT
        Subject: CN=a931dccb-7c38-4da7-ac0f-19ec280ddb3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:78:e8:8c:d8:3d:b3:e1:60:aa:21:3b:73:2f:
                    90:6e:4e:e4:6b:9d:dc:6f:a9:0b:4a:bb:9d:01:03:
                    04:e7:58:d5:1f:36:2b:ee:13:5c:2f:a4:bd:09:fe:
                    34:a0:69:f9:80:43:ce:45:2f:1a:34:63:be:21:96:
                    33:6c:fe:30:fa:a0:9c:45:7b:3b:4f:6b:81:a7:3a:
                    0a:f8:8c:22:12:0c:09:5d:9c:c4:dd:cf:4e:cb:39:
                    15:ad:8a:5d:f0:e4:84:0a:67:5b:72:59:c7:17:4b:
                    cf:30:22:15:e2:98:c8:f2:0a:64:ad:2c:69:ff:1c:
                    92:b7:b4:66:ad:24:de:60:43:84:64:0c:4c:74:b2:
                    9e:d8:ce:68:3f:fc:d5:a1:d3:1b:5a:ea:d9:d6:bc:
                    10:f7:28:92:91:de:84:b3:d6:a9:4e:45:d8:f2:60:
                    c8:49:40:94:01:de:df:cb:b6:36:18:d9:73:4e:e0:
                    48:ca:e7:36:83:cd:fa:f1:75:6b:cc:a5:10:ea:45:
                    7d:fb:67:7b:c1:b8:e2:d1:a1:f3:b2:af:fe:d1:10:
                    c8:f7:cd:fc:89:42:21:5a:ab:e5:72:00:55:af:8f:
                    c1:be:4d:3a:da:ec:43:c9:70:40:b5:da:f6:69:53:
                    bc:48:a5:e5:ac:72:33:be:7c:50:29:52:1c:d9:41:
                    d1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:01:2B:CE:E9:89:80:04:42:68:B1:7B:C1:11:31:F4:AE:FE:AC:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1cf73a95-5707-30f8-8fc8-90489261c6e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:da:05:25:3f:1c:f7:c5:0c:8a:ac:3e:eb:7a:54:77:bd:52:
         c6:7d:07:9e:33:8b:1e:35:f3:23:42:23:5c:4b:6b:ae:e3:ff:
         a7:a5:6a:41:2a:06:56:1d:5e:a9:7a:80:b8:ae:61:f3:e2:62:
         d0:d2:e2:96:f9:84:8a:02:e0:fa:b8:25:af:9d:f5:e4:f2:10:
         fa:5b:24:f1:e2:fc:20:f7:c6:62:95:e2:a6:46:88:03:4a:6f:
         85:5e:65:dd:af:5c:aa:bd:ed:40:c3:f2:50:03:97:8a:ac:29:
         12:ce:92:80:9a:69:e2:d5:85:e5:b3:8b:fa:c6:0a:93:0b:f7:
         33:01:6e:66:2a:ea:c4:81:7c:82:2f:8f:e9:22:47:b3:9c:a3:
         1e:80:11:a2:43:0c:8f:48:e6:ea:66:ac:8b:bf:0d:b4:64:25:
         c6:93:a8:6f:af:18:d9:9c:d8:a8:c3:04:60:30:72:e1:24:60:
         2e:70:1a:14:e4:3b:b3:d1:24:0a:b7:09:b6:40:54:c5:19:05:
         06:86:4f:a4:6a:12:ee:7e:2f:24:29:08:4d:95:14:67:be:4a:
         89:f0:3b:d6:56:8f:ae:18:eb:3a:94:9e:16:a2:27:a8:1c:b5:
         a9:ca:33:78:a2:a5:67:05:4f:51:51:35:06:a4:0d:3d:32:32:
         22:96:39:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:39:26 2026 by rpki-client