Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/00dd7348-af35-3e07-83b5-4757028e73fa.roa
File:                     00dd7348-af35-3e07-83b5-4757028e73fa.roa (raw, json)
Hash identifier:          zjs+pivD1SsOtWZngCtjhRmzVN9s038RQKs9t7Kpo9Q=
Subject key identifier:   EF:52:A1:F4:F0:46:98:9B:C2:A7:E4:1E:FC:EA:11:0E:F7:A9:45:F1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F4974E717483BDE6A50454840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/00dd7348-af35-3e07-83b5-4757028e73fa.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     26127
IP address blocks:        107.191.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:e7:17:48:3b:de:6a:50:45:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cd3ddd42-a509-4872-89f2-c21bdb6ebfb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:96:0e:ff:25:2c:42:4c:0b:49:be:cb:31:20:
                    b9:f9:99:d0:47:2d:14:15:c0:be:bb:cc:f3:39:4e:
                    05:8e:ce:ab:36:6e:7b:96:32:95:f1:4d:cb:82:17:
                    a6:b7:7a:ca:08:35:2b:7c:2a:cd:6a:0e:e3:5d:0a:
                    92:6a:9a:ce:d1:b8:f7:27:54:13:ad:45:d4:a4:ca:
                    2e:c0:ea:8b:01:9d:4e:eb:08:40:d6:88:b9:62:71:
                    2c:cf:21:b9:89:52:7a:7e:e6:ac:85:c8:df:83:b4:
                    f6:29:a9:4c:ce:05:4f:77:e8:0f:55:5f:85:9f:41:
                    54:a7:da:dc:e2:07:40:c1:b0:f2:7c:9a:96:fe:85:
                    fa:0d:39:23:9b:f0:95:31:93:fd:02:d7:f8:70:10:
                    21:73:10:c4:c9:90:42:ab:cd:2b:f8:c4:c6:1f:e1:
                    d1:85:0a:c8:4f:c1:76:39:ed:42:ac:dc:7a:c1:3f:
                    8e:56:c9:31:a3:de:c0:1b:6d:44:5c:5a:d4:2f:96:
                    74:2f:04:ae:be:23:b0:f7:e8:fc:cf:3f:dd:0a:76:
                    ef:bf:e3:66:37:69:05:70:a6:cb:8a:d0:3e:c6:e3:
                    fd:31:73:c4:9b:8e:f3:8f:1d:cb:7b:de:8b:b2:85:
                    c4:e2:a7:3a:cd:0d:68:9e:ef:02:40:fb:0e:f5:49:
                    e2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:52:A1:F4:F0:46:98:9B:C2:A7:E4:1E:FC:EA:11:0E:F7:A9:45:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/00dd7348-af35-3e07-83b5-4757028e73fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.191.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a8:65:6f:42:cc:99:b1:c3:29:0c:8c:6a:6e:94:f1:66:86:
         de:22:8c:48:37:6d:17:f2:44:56:0b:47:c1:d8:86:58:39:e9:
         ea:e2:47:57:96:e5:3f:4b:61:9b:5f:81:85:a2:b4:2a:e2:31:
         92:45:5c:6f:ae:9a:dc:62:06:34:e3:ec:26:ad:31:51:a1:ef:
         7f:0d:dd:c8:64:6c:20:f7:f9:42:94:16:01:d6:0e:b9:84:f8:
         b7:7f:5b:e9:3b:8e:c0:8b:0d:17:40:c8:2c:44:84:7f:7f:ef:
         9a:f2:7a:48:c1:8b:1a:77:46:b2:26:0e:ec:3f:74:b5:f7:62:
         6c:33:de:cc:a9:68:3c:ee:da:87:ba:0b:c0:10:9e:53:68:3a:
         58:98:ca:a0:b3:53:2a:a9:1c:33:98:0d:59:64:71:1c:dc:28:
         b0:8d:6e:5f:f6:dd:b2:15:bd:f8:56:38:69:5b:20:2f:fe:9d:
         d0:f3:0f:47:fe:16:14:3e:35:59:51:d3:7d:6f:1e:29:67:0f:
         4f:a5:33:29:3c:c0:67:a0:f4:8e:aa:9a:d4:65:e5:b0:b5:57:
         46:11:23:ed:4b:f1:e1:74:19:79:6a:9c:fb:fb:f3:24:07:24:
         ee:b4:ea:91:30:38:36:a3:97:cc:39:31:6a:92:b6:20:b0:3c:
         2f:76:28:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:49:31 2026 by rpki-client