Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/ef6521f7-3563-31b8-a2a4-173c6a9379a8.roa
File:                     ef6521f7-3563-31b8-a2a4-173c6a9379a8.roa (raw, json)
Hash identifier:          iAxR74QbEfJxFCrNmYcDSVL1/IMVf+MRKT+7Fnr1cjM=
Subject key identifier:   86:DD:3F:0E:78:48:17:BD:53:BA:AA:4B:56:38:42:6D:FE:3A:01:8C
Certificate issuer:       /CN=03b51393-7784-45a0-9621-168719782436
Certificate serial:       010D0C9F4328584EA79BE7C4F7CCDEA02D1EB880
Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/ef6521f7-3563-31b8-a2a4-173c6a9379a8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10384
IP address blocks:        152.87.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:e7:c4:f7:cc:de:a0:2d:1e:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b51393-7784-45a0-9621-168719782436
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=27533a44-36f9-4375-aeda-8f894a411b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:31:dd:08:d5:78:e0:40:b1:a1:37:45:a6:5b:
                    36:aa:f2:6a:50:4c:59:69:96:90:93:56:c4:3d:55:
                    8d:fa:fe:0e:63:05:9d:18:4c:bd:6c:6d:60:54:dd:
                    10:6b:8f:a2:7e:9b:48:a0:b8:68:d0:6e:76:c5:18:
                    c7:e3:79:a7:cc:34:60:99:8a:87:1e:d6:be:78:f1:
                    7a:8c:94:dd:3e:cd:4e:a3:04:94:7d:27:2b:41:a4:
                    a9:8a:1d:fb:4d:79:ac:40:7d:59:69:26:11:a2:24:
                    6c:05:91:2e:19:ae:1a:f8:51:b2:7d:f2:99:fa:65:
                    82:4d:bc:5b:3c:ff:14:16:a8:10:f7:b5:e4:e9:2b:
                    3b:17:ab:78:ea:51:71:f5:88:fd:f1:aa:fd:e8:63:
                    0a:cb:ae:6e:02:0b:65:53:b3:75:c1:ea:8b:93:1e:
                    42:7e:d8:d0:3e:e5:00:79:f4:e6:01:4c:4b:ff:b3:
                    1f:fc:14:08:9f:d8:c3:ac:05:21:22:66:f7:59:66:
                    50:fa:07:dd:c2:b8:50:6c:05:67:8e:79:cb:6c:bb:
                    66:50:3c:c3:c1:c3:0d:37:c5:fd:15:b3:9d:4e:8f:
                    4a:b7:68:20:72:5c:7a:83:7b:d2:a3:d1:9d:46:77:
                    ee:b2:56:ec:28:19:e4:c6:44:68:7f:df:c8:6e:fe:
                    95:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DD:3F:0E:78:48:17:BD:53:BA:AA:4B:56:38:42:6D:FE:3A:01:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/ef6521f7-3563-31b8-a2a4-173c6a9379a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl

            X509v3 Authority Key Identifier:
                keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.87.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:d0:83:a8:53:a7:e9:d5:b9:d9:a3:6a:19:ee:40:98:ba:0f:
         e4:e7:8d:d9:36:cd:d1:3b:a2:eb:e0:35:cc:61:65:40:e8:b8:
         16:0f:f3:44:9c:3f:bc:3a:17:45:79:7a:21:91:88:41:a6:41:
         d3:90:ef:95:02:a9:79:9e:16:da:89:bd:f0:70:72:ce:db:22:
         ed:2e:fc:33:bf:7b:f4:c0:3c:ee:3d:6a:23:11:64:cf:30:bd:
         87:09:eb:62:f2:9c:f0:ce:3f:50:f8:38:d6:a5:96:98:51:bc:
         c5:e9:94:aa:8e:dc:98:4e:0f:12:de:be:7c:32:1f:17:e5:c5:
         66:9a:43:cb:7c:58:a5:89:40:b0:b2:ed:4e:ff:39:cd:94:2a:
         b6:a8:05:0d:59:12:5d:4e:92:00:10:2f:c2:d7:5a:5b:71:2b:
         06:be:d8:9c:05:c6:67:64:20:ff:9b:8a:40:d6:2b:3d:2d:b2:
         82:e0:6e:80:aa:39:24:2c:7c:0c:a2:8d:63:cb:3d:ab:e8:5a:
         13:0b:fe:64:e4:6d:2a:4b:33:1f:0e:e7:97:a7:2e:6f:19:1e:
         8c:f1:e8:66:9c:26:0b:1a:a4:54:32:40:ae:ea:e6:a8:12:37:
         e4:1c:11:da:fc:1c:af:16:e1:e1:af:c2:76:52:37:64:01:12:
         70:1f:8f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:38:29 2026 by rpki-client