Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/a1ba40db-538f-33cc-a61f-9edd1f2c36d2.roa
File:                     a1ba40db-538f-33cc-a61f-9edd1f2c36d2.roa (raw, json)
Hash identifier:          WKrGD+M4WmBVFIZM80b/qSMXuztWVCkdJMDkezWJXeo=
Subject key identifier:   A7:1C:AB:00:E5:B4:89:30:FA:6B:A1:E8:D9:CB:AD:D4:26:DE:A4:D9
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584E815F8B35D84A2BC30171A8C0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/a1ba40db-538f-33cc-a61f-9edd1f2c36d2.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     394727
IP address blocks:        107.155.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:8b:35:d8:4a:2b:c3:01:71:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=ab221ffb-e46c-4bfe-ab73-0b66326361aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1c:dd:de:72:44:d2:ca:fe:44:f4:a8:9c:9e:
                    dc:b6:5e:5c:b9:f2:0e:8d:22:7a:d9:17:e1:b1:e5:
                    76:83:fc:0f:c0:33:1e:05:d0:f5:f1:0b:ec:6a:b0:
                    f9:d1:7b:be:67:b0:4e:5b:3f:fa:ad:88:24:b5:73:
                    d8:a9:56:c9:c3:87:b1:f0:6f:e7:07:9f:ee:c2:a8:
                    0b:9e:75:62:a8:d9:09:08:a9:ec:30:31:62:f7:76:
                    0a:7b:fa:b9:11:d5:50:44:dc:4d:4e:2b:ca:59:13:
                    b1:2a:cb:5a:c7:9b:8f:69:fd:b9:20:0e:19:d8:ad:
                    23:88:c5:ba:89:4d:bc:6f:96:87:17:e6:44:59:58:
                    66:3a:d3:a5:b9:9f:63:7c:68:e6:16:48:05:01:3a:
                    a0:18:77:03:46:3a:14:7d:a7:cc:2f:1b:ad:a2:06:
                    b0:9c:56:b6:61:bd:63:9f:01:73:70:d3:25:6d:9a:
                    47:2d:ab:71:1e:ab:3d:2c:db:62:d2:0b:83:d6:47:
                    f4:0b:90:76:a0:37:69:0e:25:e7:b4:8f:16:b2:f8:
                    2f:a9:9e:17:57:c9:3b:e4:10:f5:96:3e:fd:b6:2a:
                    60:4a:1e:ff:3a:c1:21:db:e8:42:d2:4c:cf:56:f2:
                    f9:82:1e:0a:a3:75:71:f4:b2:a6:58:1b:76:e5:0c:
                    b8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1C:AB:00:E5:B4:89:30:FA:6B:A1:E8:D9:CB:AD:D4:26:DE:A4:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/a1ba40db-538f-33cc-a61f-9edd1f2c36d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.155.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:69:99:42:7e:85:e7:a1:44:da:35:9a:67:b9:a0:54:ee:20:
         b1:e4:b7:20:4a:bd:9c:2a:a0:1e:64:d1:93:9c:03:10:96:9e:
         5c:15:d1:48:c0:6a:3e:bd:d5:7f:da:51:99:19:ec:41:2c:7f:
         59:49:e3:c6:7b:5a:4c:a7:83:7f:fb:70:7b:31:37:48:47:2e:
         ca:09:3a:9a:53:32:47:61:f2:ce:7a:81:66:50:ae:0b:9e:fd:
         fe:6c:ab:fc:8f:66:15:eb:92:0f:01:2c:84:f9:13:db:f2:d1:
         a3:c8:2c:22:ca:44:59:d3:b0:1a:5d:17:61:ac:91:42:57:1a:
         f7:d1:0b:aa:bb:d4:da:12:e8:d6:95:ae:5f:70:0c:1d:fa:78:
         2f:14:6f:0d:69:2a:44:f1:84:cf:e5:14:39:3b:c4:af:e2:47:
         98:85:85:27:8d:40:a1:b2:60:ac:ce:7c:b7:0c:29:6c:fc:14:
         4c:33:9b:14:87:75:c9:e1:4a:29:af:80:3f:29:51:c8:f4:fc:
         31:64:e1:b2:3b:87:2f:7b:1b:75:7d:bf:e0:04:40:79:c2:33:
         65:9c:a6:6b:da:e5:6c:77:b2:12:2f:c5:83:8c:33:4c:42:e0:
         7f:c4:f8:da:7a:2c:d5:02:0d:84:f5:d2:8b:43:f4:f7:6d:06:
         99:9d:c6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:45:44 2026 by rpki-client