Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cd6994cb-1e24-3356-8409-94f417f68aa3.roa
File:                     cd6994cb-1e24-3356-8409-94f417f68aa3.roa (raw, json)
Hash identifier:          4m/rN5B2SE3YMqz7e1s5WCNPOQuMcwXZQgTu0M03RVc=
Subject key identifier:   65:70:D5:F7:CE:BC:6A:90:17:FD:76:B4:E9:CF:3A:E8:18:20:4F:AB
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584EA788B82EF0CE592FF0449080
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cd6994cb-1e24-3356-8409-94f417f68aa3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     834
IP address blocks:        107.158.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:b8:2e:f0:ce:59:2f:f0:44:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e9c5dda3-9b12-4eb1-adfc-3e8fea9acbda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:8d:8c:0a:4d:3e:cc:4a:a4:05:42:ce:8f:
                    cd:d7:87:0a:9c:24:62:32:59:e4:af:df:bc:41:f5:
                    6f:ff:f9:51:f7:53:c5:e7:f0:91:56:e2:7c:5c:c5:
                    52:02:64:00:9b:41:d2:79:55:af:de:f9:cb:83:ce:
                    00:62:22:70:68:a4:2b:c2:b4:93:08:90:7f:bd:b2:
                    55:53:07:41:25:fb:ba:06:02:7b:01:ce:41:42:fa:
                    f8:d4:29:1a:e4:ab:a1:8d:6f:7a:f4:00:c5:74:6f:
                    1c:25:0a:e0:67:51:6d:63:27:cd:82:da:82:30:09:
                    fe:18:c3:36:24:7e:32:4c:ac:92:3b:e0:fe:fc:08:
                    0f:30:83:33:80:9f:d4:40:83:36:b4:dc:72:a9:22:
                    88:d9:65:dd:1e:0a:46:a9:55:a8:a5:69:91:6f:fc:
                    fd:5e:88:8c:7d:5d:de:34:57:b1:d2:99:0e:5d:b2:
                    c1:71:8b:3c:ac:89:dc:6a:0e:8d:ea:8e:e7:ce:dc:
                    22:75:8e:bb:5e:47:0c:f7:86:97:85:76:f9:02:d5:
                    e0:81:3a:99:1a:31:af:11:72:58:36:51:bc:68:5b:
                    34:a8:01:b0:ed:01:4b:bd:6a:99:4c:22:df:bc:71:
                    d2:a2:05:55:7e:15:4b:e2:f5:a9:e2:ea:ae:5f:86:
                    9b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:70:D5:F7:CE:BC:6A:90:17:FD:76:B4:E9:CF:3A:E8:18:20:4F:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cd6994cb-1e24-3356-8409-94f417f68aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:62:f2:b9:40:59:d7:2e:21:0e:d4:83:1b:e3:7b:19:c5:ca:
         92:bf:87:4a:8b:03:da:12:5d:06:78:44:1f:76:c5:bf:90:ee:
         2d:37:12:6a:a7:3c:27:55:5a:1a:f5:6e:ae:7a:80:15:95:df:
         cf:82:4d:a0:b9:f7:5e:0b:27:26:fa:74:43:eb:4a:0a:76:7c:
         46:df:90:43:5c:8e:c4:e1:5a:cb:0f:59:a3:79:6e:c2:e3:46:
         a9:6f:6f:f9:d0:9e:06:33:5d:88:c8:86:1f:cf:4f:3f:b4:2c:
         e4:08:93:37:ff:97:d9:3f:e8:6c:74:f9:92:7b:32:cb:15:a3:
         cd:f9:11:28:28:7c:3d:78:19:0c:d7:62:9f:20:83:0d:7c:9a:
         88:47:c2:e6:94:a2:d1:b7:7d:2f:15:f4:b3:28:9a:2d:76:24:
         6b:db:fc:04:0c:2e:2e:d3:29:77:b3:9d:7e:1a:03:af:50:95:
         6d:85:01:e7:50:ac:4f:08:b5:80:ba:e9:64:06:52:71:35:12:
         25:9f:6b:b6:99:7b:22:72:38:dd:e9:b3:91:3e:5f:a7:f3:89:
         08:7e:b8:54:93:8b:30:43:52:99:df:b5:67:ec:2d:60:03:16:
         9d:8b:35:b7:24:22:b0:a5:93:b8:e2:8a:e9:ed:3d:9f:9c:c9:
         f4:04:80:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:19:43 2026 by rpki-client