Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/acfaa87f-57bc-3e3b-bfc3-53e9681dd022.roa
File:                     acfaa87f-57bc-3e3b-bfc3-53e9681dd022.roa (raw, json)
Hash identifier:          OUjWTEtU19UdlFXUFiTZi6o9MOhyum04ndSFIce5MwI=
Subject key identifier:   D7:C4:04:AF:37:17:3E:7C:D8:CB:DF:AF:72:DB:98:1F:67:F0:3B:9F
Certificate issuer:       /CN=0153231e-bade-4c05-b3fd-55b65671daae
Certificate serial:       010D0C9F4328584EA794E4457822DEAE53885D00
Authority key identifier: B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/acfaa87f-57bc-3e3b-bfc3-53e9681dd022.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395153
IP address blocks:        107.182.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:e4:45:78:22:de:ae:53:88:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0153231e-bade-4c05-b3fd-55b65671daae
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=36373483-5fa6-4d42-a971-5d2bf7fe9182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2c:5c:36:67:4c:bc:5d:6d:41:07:ac:25:b6:
                    2f:8c:c1:24:a0:98:da:8e:05:4e:72:43:a3:3d:78:
                    7e:99:3c:5d:13:f5:4a:f2:ff:1d:83:55:71:57:97:
                    74:d3:32:19:d3:f1:cb:86:32:cc:fc:5c:63:69:d1:
                    bc:93:0f:06:eb:05:ce:0d:61:67:62:01:ad:f4:5f:
                    34:55:b1:f7:5d:d8:87:f9:f8:76:95:5a:24:a1:ae:
                    c5:54:d2:d5:b6:af:92:e7:e5:7a:fe:0e:42:c9:8d:
                    37:52:36:4b:b5:fc:73:a4:7a:1a:31:84:3f:32:e6:
                    7a:6a:d2:9f:4f:6a:57:81:b6:e2:2a:1c:83:18:33:
                    f1:6a:f5:c8:76:3c:80:2a:51:54:11:e3:35:5f:1d:
                    c4:ca:cc:9b:8b:8b:25:14:3b:54:ee:62:de:92:5c:
                    cb:78:95:4b:b0:e0:1d:10:15:63:e9:ef:e6:19:19:
                    f1:72:91:ba:73:69:90:dd:23:6f:3b:68:a7:02:43:
                    7d:e3:b9:4b:92:63:69:24:1f:4e:3f:39:7d:70:e0:
                    37:0c:c2:14:b7:f4:5b:45:d5:c8:c5:5d:b5:00:40:
                    3b:4f:8d:59:55:37:e0:19:c1:02:84:e8:6d:f9:91:
                    a7:1a:be:6a:24:e4:60:2e:3f:cd:49:56:25:8e:ab:
                    cf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C4:04:AF:37:17:3E:7C:D8:CB:DF:AF:72:DB:98:1F:67:F0:3B:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/acfaa87f-57bc-3e3b-bfc3-53e9681dd022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:e1:4d:dc:87:d4:a3:1c:bc:e4:fe:f0:bf:2f:cb:30:b4:b6:
         1a:c0:18:4b:79:43:a1:81:94:e5:c5:54:88:98:72:e4:67:19:
         9d:1e:fe:f5:43:0f:d1:ff:2c:7d:74:19:9a:06:4a:ca:aa:ab:
         47:1c:eb:b8:e1:c0:3d:4c:99:67:a0:2d:bc:b9:56:53:ad:5d:
         81:59:cb:74:26:2d:93:b7:2d:cc:a4:bf:c4:f5:3f:f1:75:02:
         82:53:69:e9:12:d1:c3:28:e5:1b:6d:ef:ea:7a:69:d7:3c:0e:
         f0:dc:1e:04:78:ac:9a:03:e6:f6:a1:4c:cf:aa:31:f8:93:4a:
         04:3c:50:dc:32:d1:a3:fa:75:63:b1:75:b9:ae:47:f5:88:bc:
         f8:d2:9e:2a:1d:da:ff:15:41:76:fa:84:b6:ec:ba:d7:e2:e7:
         73:e6:23:39:9b:03:85:e0:ed:d4:83:af:4f:bb:c3:77:85:77:
         ca:f0:f6:2e:6a:6d:21:f9:5d:a9:66:1c:c2:93:58:1e:6d:f5:
         e5:2b:39:07:36:1f:26:47:9c:4a:45:10:bd:77:f5:99:e4:e5:
         3c:71:b6:90:f4:11:bb:5f:28:6f:89:54:0f:59:ea:20:e6:98:
         35:ac:be:3e:4a:a2:a3:fc:11:fb:40:08:1b:49:49:dc:28:e8:
         c7:8f:71:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:08:58 2026 by rpki-client