Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4c2a2080-9c5f-31c8-801c-9dca60c14b90.roa
File:                     4c2a2080-9c5f-31c8-801c-9dca60c14b90.roa (raw, json)
Hash identifier:          pxezovqXC+SbfIK/9wQey04S8MHkHe7HFqQ5eoAUtU8=
Subject key identifier:   B4:28:2E:B7:03:75:EC:D3:51:67:66:21:42:DB:F9:A7:66:6C:AF:B6
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E7A64D3A83242872F0853FEE0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4c2a2080-9c5f-31c8-801c-9dca60c14b90.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     62904
IP address blocks:        107.158.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:d3:a8:32:42:87:2f:08:53:fe:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=c8689b14-5c1f-4dcb-959d-df6947e134b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e5:5f:08:11:00:fa:0b:45:26:14:55:91:da:
                    9b:aa:9f:05:6c:51:21:35:52:a3:d2:99:66:d6:fd:
                    7b:30:2c:e5:82:af:7f:42:8b:ad:2f:ce:1d:0a:49:
                    b8:80:15:39:ae:60:14:d8:4f:01:76:19:24:54:a4:
                    e8:59:a4:28:bd:23:3e:bf:c1:58:aa:04:db:8f:64:
                    52:1d:68:8b:6c:bd:95:46:22:1e:12:80:08:b5:c7:
                    a5:cb:0b:8f:b3:ec:82:90:62:55:0a:8b:e9:72:e8:
                    66:ea:83:1f:99:b9:4d:bc:f8:8a:b4:cb:c5:d2:74:
                    bd:e1:78:18:7e:64:64:f6:a8:1a:1a:db:ab:45:49:
                    e5:93:7e:ee:74:11:bc:ac:af:4e:f0:ae:7b:76:51:
                    a6:ba:f7:f0:27:4b:5b:6c:7f:17:e8:b0:5a:97:b0:
                    b3:de:00:ff:89:d1:c9:8e:78:8f:93:0b:be:a6:d0:
                    2c:e3:ca:17:6c:55:e7:b1:a9:44:d8:9a:f7:e0:d8:
                    2d:64:3e:c6:4f:52:7a:ba:30:c3:9a:75:b8:9f:51:
                    93:dc:ce:5d:b8:cd:cd:5c:35:61:77:ae:32:b9:bb:
                    6d:17:35:dd:2f:a5:ee:2d:34:4b:23:e4:fa:a8:97:
                    91:ba:ab:c2:04:2c:c8:cc:98:8e:2a:88:30:bf:1a:
                    78:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:28:2E:B7:03:75:EC:D3:51:67:66:21:42:DB:F9:A7:66:6C:AF:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4c2a2080-9c5f-31c8-801c-9dca60c14b90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:bb:64:88:88:bc:ae:dd:8f:ff:b9:c9:af:8a:fa:9a:65:05:
         47:db:41:9a:77:51:f6:74:db:0d:72:7c:b1:51:08:47:58:05:
         6c:4d:86:fc:c0:37:73:42:dd:f0:03:e8:4e:2f:fc:14:75:20:
         1c:ea:dd:20:f1:8e:17:ec:8b:f1:e8:1b:cf:58:ff:fe:cb:3c:
         18:59:aa:3f:b5:80:7a:44:51:18:15:42:f8:ec:53:26:ec:70:
         b8:ea:e6:24:62:b7:f2:ac:42:c6:26:ee:27:1f:02:7a:20:df:
         fd:ef:92:a5:5c:bc:ff:bb:c1:ed:c6:e1:d6:38:d6:35:15:35:
         bc:12:e9:f7:47:1a:c2:18:6c:26:6c:c5:a4:02:7f:80:57:8f:
         55:f9:cc:4c:97:61:35:bc:37:ad:77:72:a1:c3:00:ce:b5:5c:
         b9:84:c3:41:5b:6f:ab:d9:11:45:b2:c9:6e:ba:8c:61:5a:51:
         36:8e:ba:27:ee:b7:72:b7:84:4c:ae:bd:a6:4e:ab:37:e3:97:
         bb:ba:00:de:c8:ae:76:c5:1e:94:a7:0e:32:68:63:0f:c6:9d:
         45:86:53:b9:0a:28:e4:b3:59:c3:33:50:e8:54:5b:49:4f:1b:
         b6:31:18:51:28:2b:be:e5:4e:53:29:f6:30:b0:ed:fd:24:d0:
         f1:91:1c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:26:20 2026 by rpki-client