Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/fb630681-aea1-33c6-9dfb-e509be1d99ef.roa
File:                     fb630681-aea1-33c6-9dfb-e509be1d99ef.roa (raw, json)
Hash identifier:          pWq5crZte/stCpUB9Fp4Np8e2BjywkbQtvPvsy5yL4s=
Subject key identifier:   C5:8D:50:F9:1C:B2:BF:A4:4D:FF:75:C6:A5:25:9A:2E:D0:2F:9D:A6
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EC040185F451B2530DE23A500
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/fb630681-aea1-33c6-9dfb-e509be1d99ef.roa
Signing time:             Thu 06 Aug 2026 21:32:52 +0000
ROA not before:           Thu 06 Aug 2026 21:32:52 +0000
ROA not after:            Wed 04 Nov 2026 22:32:52 +0000
asID:                     395954
IP address blocks:        108.177.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:40:18:5f:45:1b:25:30:de:23:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  6 21:32:52 2026 GMT
            Not After : Nov  4 22:32:52 2026 GMT
        Subject: CN=8bb18bd3-e7c1-433c-8f7b-f0be1396942c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:52:a3:0c:3c:66:84:0a:93:3f:c7:85:de:
                    94:2d:7f:ef:65:27:58:19:ea:29:37:34:d8:35:08:
                    4a:aa:9b:a4:55:cc:69:ab:c3:b5:ff:55:35:6f:c8:
                    98:c3:cc:9d:f5:ac:10:ea:66:aa:be:68:17:fe:56:
                    91:88:aa:df:f5:c7:1e:2c:34:25:4c:e1:d1:12:89:
                    b3:a9:6d:08:be:6c:43:90:a9:36:09:2b:85:c6:39:
                    08:e8:b1:c3:62:f9:cd:df:0a:fe:86:fe:26:f7:88:
                    cf:d3:a1:65:6b:60:50:67:36:92:33:c3:ad:98:7b:
                    e2:0c:9a:b0:5a:3b:93:22:08:2e:6f:ef:80:7e:09:
                    1b:ff:fd:48:02:69:03:9e:d0:bd:de:dd:64:d6:d5:
                    8e:87:b8:42:99:98:69:a0:bb:ec:33:ca:f3:0d:79:
                    bf:8a:67:c2:38:3a:c4:1a:94:78:84:fd:47:6d:5c:
                    14:3b:cb:17:87:2d:b2:f4:d4:7a:33:43:5c:08:0e:
                    03:67:ce:84:08:73:ec:f0:e3:23:af:9d:12:28:ea:
                    69:1a:17:53:e1:f1:ca:03:07:57:85:35:24:ea:64:
                    3e:2c:0a:46:4e:43:86:28:ed:ce:12:50:de:f5:10:
                    90:c9:02:bd:b0:51:77:26:bc:a4:f0:73:70:bc:3e:
                    64:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8D:50:F9:1C:B2:BF:A4:4D:FF:75:C6:A5:25:9A:2E:D0:2F:9D:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/fb630681-aea1-33c6-9dfb-e509be1d99ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b5:f0:26:9d:a5:9b:b3:c2:9b:84:db:d4:fe:5b:b6:bc:75:
         ad:57:a7:3e:22:87:61:0a:88:99:f7:80:a0:ff:f2:ae:bb:82:
         74:33:7c:6d:45:ac:47:65:c9:69:6a:cf:1d:4b:81:45:8d:6d:
         ed:6c:a7:34:13:c7:c5:bf:9b:b5:75:f2:c7:f3:97:39:b3:17:
         f4:d5:03:f8:54:d9:91:f3:30:28:57:50:6f:d8:3d:15:9c:df:
         d1:b9:b1:c4:e0:b0:da:75:bf:c8:40:29:0f:d7:e6:4e:57:62:
         6b:73:a5:00:69:f9:77:76:f5:8c:12:24:28:e4:e2:04:40:dd:
         30:e6:32:3d:c3:e8:a7:ec:b6:51:6b:d6:59:00:0a:bb:db:15:
         3d:2b:f7:7a:28:49:68:88:d8:7c:16:a6:49:7a:5c:77:ae:56:
         ec:9c:69:a9:56:f0:d8:8a:3f:57:f1:a6:39:25:0c:a6:93:ef:
         82:57:6c:29:2f:db:b6:e3:58:83:a4:fd:c6:22:95:37:9a:8a:
         61:54:c7:53:8a:f8:bd:f5:12:73:27:57:c4:79:3d:3b:63:16:
         cc:b6:a9:99:85:5f:30:1f:eb:4b:78:fd:12:40:57:5f:98:5e:
         e8:29:91:c5:ca:12:d0:5b:55:a5:92:8d:74:54:5d:fe:bf:dd:
         7e:d8:c8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 18:18:41 2026 by rpki-client