Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/84121d1f-462f-3cfe-83fa-6a9aab01ec21.roa
File:                     84121d1f-462f-3cfe-83fa-6a9aab01ec21.roa (raw, json)
Hash identifier:          pY9rRjSyWeM1QOI+8UPT96yme2VsLQoeQg17+8H8US4=
Subject key identifier:   AC:2B:F1:F4:25:8B:0B:84:33:DC:48:57:3D:6E:7C:F5:3E:4A:AC:53
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584F23C25256D28CEFA0859D8800
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/84121d1f-462f-3cfe-83fa-6a9aab01ec21.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     394727
IP address blocks:        107.155.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:52:56:d2:8c:ef:a0:85:9d:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=7bdc619a-9acf-44d1-92e4-7c759e67c3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0a:f6:bb:09:a1:1c:e9:42:ee:e8:d6:80:1f:
                    06:20:33:69:d4:be:85:38:e3:db:27:28:d3:4e:7c:
                    2f:e6:c9:fe:15:b9:ef:43:20:5b:d1:d5:3c:c6:7e:
                    85:cb:a7:94:b3:a7:83:34:19:85:9a:6d:24:86:b7:
                    bc:6a:e6:bf:10:22:82:c5:b1:02:5b:42:bf:92:97:
                    6a:7b:02:a0:59:3d:92:c3:ee:4c:b1:67:9a:8f:ca:
                    56:b4:aa:d6:86:23:6c:11:85:de:9f:d1:6b:cf:54:
                    3a:bc:13:39:f3:50:89:ac:2c:c3:81:13:55:86:ee:
                    8d:2f:2a:c9:37:83:73:5e:e1:35:fa:2f:51:2b:39:
                    1f:a1:5a:eb:c3:23:5f:77:33:42:6d:7d:2d:b4:d3:
                    40:16:9f:14:de:61:58:79:ab:e0:f9:74:1c:ae:15:
                    a6:b6:74:3e:1b:ab:ae:6f:7e:92:79:69:63:74:a7:
                    a6:2e:09:bc:75:ce:46:43:76:2d:6a:96:d0:68:f1:
                    db:fb:fc:78:29:eb:f7:7c:98:a4:30:7b:99:59:60:
                    e2:66:6a:5f:40:59:39:8b:b1:e3:f9:24:91:0e:34:
                    14:bb:2a:fb:78:59:86:0a:b2:5f:03:ac:cb:aa:22:
                    d7:23:eb:57:bb:1b:58:d4:8d:2c:93:bf:73:3c:2e:
                    14:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2B:F1:F4:25:8B:0B:84:33:DC:48:57:3D:6E:7C:F5:3E:4A:AC:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/84121d1f-462f-3cfe-83fa-6a9aab01ec21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.155.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:50:9e:5f:c5:f6:d2:f1:ee:50:f4:c8:32:4c:7b:10:ae:3a:
         de:01:6e:8c:f7:a7:ea:94:e7:3c:9b:d8:64:7a:5f:96:da:95:
         87:14:59:d3:8e:64:79:eb:b7:e6:75:a1:5d:1e:93:4e:53:49:
         e1:ba:67:0b:f2:fb:4f:ab:ac:e1:58:da:1f:c2:bc:05:3b:af:
         1c:14:57:8f:ed:81:9d:a0:b6:f0:1f:f3:63:bf:e9:8f:d4:65:
         bd:ab:f6:65:ef:75:f1:3b:6d:65:4b:5e:67:fc:50:00:36:4b:
         44:eb:d5:a9:cd:4a:c5:2e:c4:a7:dc:02:16:95:7e:ee:a3:4b:
         75:db:9d:f3:40:8a:dc:12:71:9d:c3:a7:8e:56:35:b3:73:86:
         ac:23:bd:6d:56:32:ec:88:cd:de:8b:62:0e:57:89:21:e0:78:
         a4:53:cc:9b:99:ac:f7:0e:07:10:b9:d2:b3:30:92:fc:30:c9:
         09:bb:8f:9e:a4:e0:6e:f0:24:32:fd:56:dc:95:81:c6:a6:7a:
         5a:c5:7a:f8:1c:25:12:01:f1:24:a8:c3:f6:e7:4d:79:a7:c3:
         a6:35:5b:dc:e2:69:c8:13:91:d1:e1:5b:0b:f3:28:20:58:89:
         f7:6f:9a:72:96:3f:1c:9a:a5:0e:a8:b3:a7:be:ce:9d:c4:1c:
         fe:bc:c7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:04:06 2026 by rpki-client