Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dae5d1d3-2590-3c4b-a5b9-fb7c4c5bcd7d.roa
File:                     dae5d1d3-2590-3c4b-a5b9-fb7c4c5bcd7d.roa (raw, json)
Hash identifier:          zwgjIWNn5pz4QOlgw6n1TgbtytpplcH9OBwre4SWgQw=
Subject key identifier:   A6:6E:37:90:ED:19:EF:32:D4:FC:C8:67:D7:10:E1:BD:6F:19:B5:C0
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E3069B089E092349A44A9B300
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dae5d1d3-2590-3c4b-a5b9-fb7c4c5bcd7d.roa
Signing time:             Tue 16 Jun 2026 09:00:12 +0000
ROA not before:           Tue 16 Jun 2026 09:00:12 +0000
ROA not after:            Mon 14 Sep 2026 09:00:12 +0000
asID:                     6079
IP address blocks:        107.158.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:30:69:b0:89:e0:92:34:9a:44:a9:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jun 16 09:00:12 2026 GMT
            Not After : Sep 14 09:00:12 2026 GMT
        Subject: CN=2b35b9ab-ffc5-4269-8944-1cd86bc73067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ec:01:7e:cd:92:de:c1:4b:42:18:a3:d4:75:
                    84:e2:f9:43:be:6c:8f:91:5e:12:47:50:70:9d:d3:
                    31:c7:77:6a:b8:63:d4:1b:1f:24:64:24:ae:cd:5a:
                    44:22:17:92:ff:d1:01:77:d8:74:f2:9a:4e:c6:83:
                    1a:05:ae:05:a2:b8:30:5c:27:53:a4:0c:ba:27:79:
                    2e:bb:92:0c:ab:4e:5a:30:cd:0a:f0:70:bd:6f:cc:
                    2f:fe:38:7f:1b:90:1b:09:e1:21:f2:18:fa:63:80:
                    c3:a1:3e:39:a0:be:da:b0:41:dd:c1:76:3d:76:eb:
                    a4:e8:ca:54:2c:37:a9:55:b8:81:46:9f:c0:d0:f4:
                    1d:fb:a9:90:1c:77:b9:dc:c7:52:ad:81:49:c9:07:
                    aa:ef:9d:98:e2:86:a8:f7:25:75:e4:6b:ef:c6:7b:
                    21:03:8d:de:03:fe:d9:45:00:b9:d3:ee:6a:3d:0c:
                    8e:05:5e:b9:1f:40:03:1c:47:8d:26:9b:40:b2:91:
                    f3:fc:cd:e6:56:3e:79:2b:5b:41:ae:59:3f:bd:a4:
                    52:32:8b:51:ee:c1:ae:c6:5c:0a:b5:87:65:e3:f0:
                    c7:6c:c6:fa:cb:80:86:04:b7:93:f1:51:6d:f4:b0:
                    c4:28:d5:05:fe:c5:dd:82:1a:87:99:e5:ac:e7:78:
                    ed:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6E:37:90:ED:19:EF:32:D4:FC:C8:67:D7:10:E1:BD:6F:19:B5:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dae5d1d3-2590-3c4b-a5b9-fb7c4c5bcd7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:28:b1:49:7b:fe:79:7b:c1:d0:96:f6:5c:30:64:f2:91:93:
         eb:c8:cb:85:a4:f6:00:ab:18:bd:d0:9a:cf:7e:07:18:dd:3b:
         89:f1:dd:ba:6d:a2:ca:0e:7d:d6:53:24:23:8b:7e:04:c7:43:
         b8:1d:1d:90:d9:8f:66:6b:c7:fb:78:df:dc:32:3d:7e:dc:84:
         d4:c6:99:e3:3b:66:a8:18:68:ab:13:77:60:43:12:0f:ce:b0:
         30:38:6f:fc:07:d0:1c:20:85:df:97:0b:c5:c9:10:45:b4:73:
         77:6b:e1:37:19:74:43:fa:8d:5d:7d:9c:06:dd:ab:21:56:cf:
         86:54:3e:f0:a6:10:38:cd:0b:02:32:71:82:ff:27:94:68:12:
         64:cd:dc:9e:ae:28:40:0e:a3:3b:c7:cc:7b:70:66:aa:db:e3:
         ca:a8:bc:bf:72:f0:63:25:65:d7:c4:c3:89:7c:55:64:9b:6d:
         c8:3c:ff:92:6c:f2:af:2a:ca:35:c6:20:60:c9:4a:74:b5:41:
         ef:fa:9d:d2:9e:4a:4c:a1:ad:96:1d:ca:1e:63:79:40:05:06:
         e6:14:34:05:69:cb:9a:2a:2b:eb:9a:1e:6d:13:75:c3:f2:46:
         04:14:e4:10:2d:ce:a1:f2:42:03:ed:60:42:af:1a:60:81:64:
         53:03:65:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:07 2026 by rpki-client