Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/9bf665f2-1455-3d67-aef9-6d593c673d9b.roa
File:                     9bf665f2-1455-3d67-aef9-6d593c673d9b.roa (raw, json)
Hash identifier:          9wFoIPVdwivrPtE7qM1YsqiqcNvhxonBsKQsoBPtRis=
Subject key identifier:   0C:3B:98:C5:D9:2A:24:DB:B8:ED:80:D0:83:65:B6:0C:AD:D3:54:CD
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584DAAE03504CBC988B08FEBE400
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/9bf665f2-1455-3d67-aef9-6d593c673d9b.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     8796
IP address blocks:        107.151.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:35:04:cb:c9:88:b0:8f:eb:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=6d3507fc-d4f5-43bd-8e62-ba3f82463b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:46:c5:43:c9:58:05:c5:20:57:e0:43:e2:
                    ed:84:a0:69:49:fb:dd:6b:a6:89:2b:9e:d4:d5:d0:
                    92:ee:f2:06:65:98:61:4d:ff:68:dd:15:e3:9e:5a:
                    a4:35:65:e6:be:0b:e8:13:90:4b:fb:1f:1a:e8:4a:
                    87:cd:71:61:2a:cc:c8:a0:1e:60:2b:a2:78:2f:b2:
                    97:d8:47:03:aa:d2:c3:04:f7:5c:c4:04:d7:70:02:
                    55:a6:75:eb:0b:75:f0:49:36:be:89:3f:0b:8e:87:
                    99:7f:a3:f8:56:1b:a6:d7:63:81:1f:44:d9:17:8f:
                    83:a0:db:51:49:7d:a7:9a:af:14:21:12:2d:ce:50:
                    33:56:fe:f2:08:47:98:9e:95:43:e9:3d:fd:c9:2f:
                    65:69:b0:c0:95:2b:60:61:ff:8e:dd:0e:12:7f:3e:
                    80:06:6e:b1:e4:7d:6b:69:1b:aa:3b:c7:b7:80:cd:
                    56:63:26:74:3c:7a:44:89:da:48:3e:1d:6d:bf:c8:
                    2a:7c:1f:33:06:2d:30:96:2e:cb:5d:14:25:79:7f:
                    f3:54:53:09:2d:3a:fc:e4:45:22:d2:1b:34:2b:b7:
                    e7:e5:58:97:d4:d1:e3:68:9a:7d:dd:25:28:57:d0:
                    b2:44:ab:d4:f1:39:ac:c3:eb:6c:d8:f0:8c:e2:2c:
                    63:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3B:98:C5:D9:2A:24:DB:B8:ED:80:D0:83:65:B6:0C:AD:D3:54:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/9bf665f2-1455-3d67-aef9-6d593c673d9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d9:2c:f3:f5:6d:6d:dd:c7:5f:dc:67:96:e6:07:ac:ed:d9:
         4d:6c:55:99:e2:b5:77:c6:3a:11:49:93:4f:11:6b:be:8b:b2:
         3e:d1:c7:f8:68:64:e7:32:2a:48:ee:d4:dc:45:db:f2:c9:37:
         a6:84:45:53:de:b1:a6:c2:e0:fb:66:8d:1c:c0:53:6c:dc:b6:
         ec:ab:5f:41:ce:8f:c4:80:49:85:29:c8:35:9a:0e:66:aa:84:
         c5:42:61:b2:5a:43:22:0b:fe:18:3b:d5:10:a3:14:dd:e9:71:
         e7:e7:3d:6b:93:eb:ae:a9:71:14:02:34:88:af:7a:b5:93:34:
         ec:cd:c3:73:1e:1c:00:da:05:ad:f1:39:f1:9d:33:0a:98:10:
         b8:8f:cb:36:25:31:0b:34:bb:a4:cc:21:df:ba:a8:ed:8e:3a:
         9e:9a:7d:5d:d4:d6:0d:3a:a6:0d:de:5e:e1:40:6e:82:f7:0c:
         4f:e6:7a:bd:59:5b:ba:f0:c9:cf:c7:8b:30:7c:e7:ea:2b:e4:
         ac:e9:0f:26:e2:00:24:74:d8:49:a3:3f:d1:dc:e2:97:ad:0f:
         cf:ef:b7:4b:8d:0e:23:22:54:f9:93:63:5d:4b:d5:81:a7:1c:
         56:21:a5:cd:38:eb:13:8b:fb:05:c7:6c:d5:b4:0b:17:e0:d3:
         ad:ac:81:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:15:07 2026 by rpki-client