Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/9b53990e-22bb-30d5-bec2-63f04fc66fe9.roa
File:                     9b53990e-22bb-30d5-bec2-63f04fc66fe9.roa (raw, json)
Hash identifier:          hEuXNwZR6Po06xB3SDDHxNaMLGUlMLiUQQxp0JOA1XM=
Subject key identifier:   A6:83:56:BC:60:0F:2A:44:47:6C:55:A7:AD:B1:26:F2:F9:A8:54:21
Certificate issuer:       /CN=ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe
Certificate serial:       010D0C9F4328584D2BDA1E48EABC9156764CB600
Authority key identifier: 22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/9b53990e-22bb-30d5-bec2-63f04fc66fe9.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     3356
IP address blocks:        107.191.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:1e:48:ea:bc:91:56:76:4c:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=ed03bf06-5adc-4481-b6b6-bd460bf1d496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:54:6c:96:af:39:9c:b4:94:71:fa:b5:bb:
                    5d:32:54:b9:9b:5f:06:fa:c0:bd:ee:3c:5b:73:b8:
                    ba:f0:e7:5d:13:ae:78:ef:b5:18:2a:d1:5c:ec:a9:
                    e2:d6:a8:e6:de:8b:79:e6:c9:7c:51:ef:a1:17:03:
                    e1:e6:ff:22:3b:61:57:f1:24:78:40:da:b3:4e:4a:
                    e5:7a:c1:9b:d4:15:39:69:d3:3d:4d:b3:b3:0a:b5:
                    b6:85:3a:30:37:45:70:f9:63:eb:6f:ec:94:33:ef:
                    db:f5:c9:4a:da:2a:43:91:bb:f4:55:4b:ea:3f:77:
                    59:14:0b:08:4e:50:2d:da:a2:b5:7a:19:fb:96:9b:
                    08:36:3c:0e:b2:df:81:94:fa:fa:87:01:e0:33:ba:
                    ac:79:d9:c0:00:71:da:6b:2f:de:f9:c4:eb:20:f5:
                    84:57:e0:a2:43:9c:5c:43:76:cf:8e:90:19:47:ab:
                    00:03:4e:65:7b:65:aa:be:c8:1d:66:d2:29:54:24:
                    cf:26:14:af:45:54:2d:be:e7:dc:e3:97:5e:8b:ed:
                    fa:3e:82:a1:97:c6:a0:fe:c0:58:85:85:30:45:7d:
                    a4:81:d2:9b:66:6c:8d:6e:e7:1c:1d:19:10:0c:80:
                    79:6d:0b:2b:12:3d:83:da:a2:97:ce:ba:c5:ba:6e:
                    70:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:83:56:BC:60:0F:2A:44:47:6C:55:A7:AD:B1:26:F2:F9:A8:54:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/9b53990e-22bb-30d5-bec2-63f04fc66fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.crl

            X509v3 Authority Key Identifier:
                keyid:22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.191.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:db:6a:87:15:8b:65:b0:94:f6:0a:22:75:98:0e:20:bd:a3:
         3e:5d:55:78:bd:c8:9c:db:62:6f:ae:a9:08:95:c7:ff:1a:a7:
         02:15:93:fd:22:88:fe:ed:30:3f:f7:b3:21:f3:ad:f7:eb:c2:
         bd:00:25:91:fd:ff:ea:e1:45:23:0d:c1:be:a1:fa:cd:47:c7:
         6f:40:36:31:6e:5d:29:58:ce:fd:8f:0a:21:1d:35:cd:d5:42:
         7c:fd:37:4c:5c:67:9b:e5:de:0e:bf:88:c8:14:dd:c6:ba:dc:
         ea:74:61:7c:95:d4:22:11:2f:a4:53:53:8f:20:ed:b7:dc:f9:
         82:2c:7f:83:89:c8:48:79:90:fc:25:df:6f:c5:82:75:2d:f3:
         52:89:2d:74:de:c5:66:5a:03:b0:06:d0:1d:83:08:fe:f3:a1:
         f0:67:56:17:25:0a:54:88:72:ee:89:bf:98:92:5f:c1:56:56:
         ec:25:07:94:78:6f:c8:69:45:76:87:41:92:07:68:4b:72:76:
         e1:0b:17:32:86:06:99:51:ba:05:c7:25:66:80:37:cb:d6:64:
         da:df:3a:35:8c:f3:9e:df:4a:08:52:46:c4:e3:98:b1:24:16:
         7c:86:f9:d7:bc:39:05:31:63:ad:d7:9a:c1:24:d7:d4:ed:21:
         10:c5:97:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:36:49 2026 by rpki-client