Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/632cc66c-9f55-334b-b01a-d9aa18680391.roa
File:                     632cc66c-9f55-334b-b01a-d9aa18680391.roa (raw, json)
Hash identifier:          XlbCxgEJI6Monw/GQBsPQTaSIfK+JA4TzFHOwQlt5GQ=
Subject key identifier:   DE:A7:E2:D7:52:E7:DB:50:69:62:80:ED:E1:F9:0A:9B:13:ED:69:9A
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E5A20E5E2995B57AC250FBF20
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/632cc66c-9f55-334b-b01a-d9aa18680391.roa
Signing time:             Wed 01 Jul 2026 07:37:33 +0000
ROA not before:           Wed 01 Jul 2026 07:37:33 +0000
ROA not after:            Tue 29 Sep 2026 07:37:33 +0000
asID:                     834
IP address blocks:        107.158.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:20:e5:e2:99:5b:57:ac:25:0f:bf:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul  1 07:37:33 2026 GMT
            Not After : Sep 29 07:37:33 2026 GMT
        Subject: CN=a32fce36-9d1c-4c08-9f81-836a409c8fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:b6:8c:45:14:50:51:35:33:53:05:6e:6c:
                    71:15:0d:f1:d8:05:0f:b8:28:62:57:f9:d8:07:32:
                    c8:5c:0b:37:d2:75:da:09:d8:ee:dd:f2:fd:44:87:
                    8f:77:fb:df:d1:55:c0:5d:cd:04:e8:ed:df:97:62:
                    44:22:5f:56:d1:8d:3f:0d:57:6e:2e:0f:c8:d6:63:
                    08:57:71:4a:75:0a:b6:3d:0f:6f:b1:b2:31:76:97:
                    16:d5:69:fe:78:53:f3:e5:d8:69:47:75:c9:6e:61:
                    f2:0b:df:5a:4c:fd:6c:cb:a1:be:b0:17:78:2b:ea:
                    32:b7:c5:2e:e3:71:9f:54:b4:2e:d0:79:a6:a2:a7:
                    a6:81:a5:68:f2:3d:85:75:4f:73:46:30:0a:f1:4e:
                    56:8a:86:e9:12:1f:78:2d:00:94:52:6c:3d:95:4c:
                    33:ee:f9:f7:7d:53:5f:06:8e:bf:64:5d:1f:31:4c:
                    02:76:27:ed:a6:02:b0:9e:37:95:9c:aa:06:47:dc:
                    80:45:0d:62:1a:c9:38:8f:12:90:6c:84:13:0e:ed:
                    7d:c8:dc:a5:d1:71:41:d3:8c:c2:c7:65:19:7d:44:
                    b1:40:b0:fb:62:51:ba:0c:42:e5:43:e4:59:36:9d:
                    2e:03:f1:40:a2:d0:b6:c4:1d:dc:2d:d1:ce:c9:15:
                    2f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A7:E2:D7:52:E7:DB:50:69:62:80:ED:E1:F9:0A:9B:13:ED:69:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/632cc66c-9f55-334b-b01a-d9aa18680391.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:1f:af:2e:48:a6:d1:79:3f:d1:62:31:db:b4:a3:20:af:6c:
         3a:c0:75:84:fd:8a:8a:5f:26:2c:6a:f4:2c:5e:36:38:23:d5:
         df:34:f4:50:d0:57:5d:36:89:c6:33:7d:b6:20:b3:e8:17:2c:
         3a:17:12:ed:ea:2a:f8:d4:5e:e8:6b:c6:81:35:db:92:42:d3:
         6e:3d:87:14:fa:95:e7:e1:c0:86:54:a8:c3:79:62:b3:c5:a2:
         2f:fa:3d:6f:27:93:e4:0d:99:cd:2e:ad:23:77:59:bb:22:bb:
         b9:05:ef:85:4a:87:dc:22:31:41:cb:a6:26:c3:56:2e:c3:57:
         dd:67:51:a4:2c:5e:f4:83:6a:e7:39:51:ab:d4:0b:ea:94:6a:
         e7:42:43:b3:ba:b6:3f:cc:9c:d0:33:be:6d:ee:e6:be:0e:d9:
         72:f6:a8:93:7d:f2:f9:cb:ac:c3:da:fa:d5:5f:32:dc:8c:c9:
         c2:54:21:e7:2e:80:f6:45:d6:5b:66:f9:6e:92:7a:4a:63:32:
         e3:f1:f6:27:ff:8f:76:a9:84:da:75:36:14:60:ae:64:65:bf:
         64:de:60:98:6d:96:fb:1b:f4:14:7f:17:34:5f:17:2c:da:48:
         db:e1:41:29:99:6b:5b:18:e2:6a:dc:b1:f9:ab:0b:fb:76:1d:
         9e:60:5b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:24:21 2026 by rpki-client