Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/728a12ab-46bb-3008-a74a-69daeb1cf25e.roa
File:                     728a12ab-46bb-3008-a74a-69daeb1cf25e.roa (raw, json)
Hash identifier:          NY7EAZOYddPxDbnz2lAbXLOaJjUozyxog1/bSDHdV7s=
Subject key identifier:   00:B1:3E:8D:1B:CB:52:D5:80:59:4E:80:96:80:BE:47:88:78:F8:A0
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584EF40CB1971A6A9956C1CD1400
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/728a12ab-46bb-3008-a74a-69daeb1cf25e.roa
Signing time:             Tue 25 Aug 2026 10:51:20 +0000
ROA not before:           Tue 25 Aug 2026 10:51:20 +0000
ROA not after:            Mon 23 Nov 2026 11:51:20 +0000
asID:                     33651
IP address blocks:        107.158.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:0c:b1:97:1a:6a:99:56:c1:cd:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 25 10:51:20 2026 GMT
            Not After : Nov 23 11:51:20 2026 GMT
        Subject: CN=810f011d-12d8-459b-9555-10f8255aca2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2c:ae:f2:a0:e2:11:e1:bf:ee:bf:78:93:3c:
                    c0:ec:00:92:66:a9:60:64:f2:10:0c:17:63:ed:c0:
                    9c:5f:62:b4:f2:54:94:ce:2d:00:af:7b:31:12:06:
                    70:b2:5b:04:9e:23:2d:28:07:ad:e1:4b:3f:da:6c:
                    03:eb:e6:75:f7:e2:ae:bf:38:e4:1e:69:e5:1c:dd:
                    76:94:bf:52:3b:0e:3c:64:b1:53:ad:ca:76:87:a5:
                    d5:22:7d:d2:03:c0:8a:7e:8a:50:5d:0a:75:0c:ac:
                    72:a1:7f:c9:f4:52:6e:1f:1e:94:85:92:2a:7f:35:
                    65:b6:df:e1:cf:29:19:fe:6a:e5:c5:62:d5:ec:27:
                    a4:97:95:37:c1:33:07:61:ce:74:5b:ef:5f:9f:9f:
                    1b:56:9e:e2:ce:dc:5e:ff:2d:b8:df:39:01:bc:d7:
                    ca:6a:49:f3:1e:a3:3b:84:6c:7e:88:34:e7:9c:bc:
                    d1:9c:26:e3:fc:86:cd:4b:3d:a4:ef:8d:c6:c5:68:
                    44:f3:56:5e:82:d2:55:09:ab:9c:5b:07:3b:c7:67:
                    e7:61:f6:62:90:cf:e2:ee:ef:73:81:30:d8:0e:a2:
                    87:d0:a6:6b:23:38:2b:35:53:46:1b:76:3e:7d:10:
                    c0:64:66:5b:5b:59:54:c5:75:15:ac:23:3a:43:90:
                    2b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B1:3E:8D:1B:CB:52:D5:80:59:4E:80:96:80:BE:47:88:78:F8:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/728a12ab-46bb-3008-a74a-69daeb1cf25e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:cc:00:ac:e2:52:70:72:14:6b:22:5c:2e:7d:3c:80:1a:c6:
         31:43:70:f5:27:2a:30:fd:12:ab:ae:1d:40:b9:10:17:2c:df:
         aa:96:55:c0:c7:ae:ca:eb:85:6f:b8:06:0d:1c:24:65:7e:56:
         56:a5:71:c4:68:c7:58:ee:31:a2:1e:e3:64:b6:07:c0:2d:6a:
         2a:a3:66:68:8d:e7:ae:5a:ab:92:ed:43:75:00:28:68:70:3b:
         2f:c1:fc:86:a0:67:6e:2e:9a:47:4c:c3:54:af:2a:38:54:da:
         3e:7b:6d:3a:7b:2e:08:d5:34:24:67:02:91:2d:7b:26:23:63:
         6d:d6:9c:26:d3:40:6c:45:74:c6:ae:b4:81:8d:95:dc:44:dd:
         d2:83:78:01:62:ad:8c:3e:0c:54:73:14:7d:83:e6:1b:bc:4c:
         d0:96:02:0c:9d:a6:26:c7:3b:3b:a2:b0:a4:16:8d:27:70:1e:
         ed:d8:28:03:88:c8:33:8c:bb:76:f7:84:f9:5d:47:2f:76:2f:
         32:e6:b7:69:56:6d:28:9a:f1:93:4a:d4:48:60:b5:40:2b:d0:
         bc:22:56:db:42:21:29:db:a1:ac:d5:5c:79:92:5e:6c:9d:df:
         db:fc:5f:bb:fd:74:12:32:f2:a1:cb:1f:bf:f4:7d:f7:d6:65:
         a9:b6:43:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 05:59:57 2026 by rpki-client