Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/57a86509-535e-3f39-9aa9-5dafe9726ec5.roa
File:                     57a86509-535e-3f39-9aa9-5dafe9726ec5.roa (raw, json)
Hash identifier:          nz6p05A0gr605RyGls6rMSxaFfN8+HRwXu6qqeAQBZI=
Subject key identifier:   B7:64:10:7A:A1:DE:85:FC:90:90:0A:FF:56:D0:52:6F:38:08:C7:75
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584EA78847A6097EDAADD720D0C0
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/57a86509-535e-3f39-9aa9-5dafe9726ec5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     62610
IP address blocks:        107.151.227.0/24 maxlen: 24
                          107.151.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:47:a6:09:7e:da:ad:d7:20:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cffa2d02-2669-469e-a42c-63103e198fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:84:79:c1:11:ff:ed:36:bd:0f:0d:b7:83:29:
                    19:f2:d3:99:59:55:61:dd:fc:cc:e1:74:54:2f:c1:
                    f3:97:65:c2:43:c6:1e:b3:29:7a:a5:13:38:42:33:
                    74:fc:fd:04:9a:51:37:cc:3e:d1:c1:80:1f:94:ee:
                    53:3c:14:5f:f2:52:9a:c5:b4:71:be:2d:2f:98:90:
                    a8:fd:66:4b:e1:a3:84:d8:2d:f7:16:05:dc:34:0f:
                    b0:8b:82:43:50:0f:f3:3a:4f:f5:26:e8:74:f7:42:
                    e0:94:37:f0:0f:64:9f:94:5b:5b:23:3e:87:01:5c:
                    ab:c9:58:b5:43:95:a5:e5:8a:98:0f:21:32:7a:2d:
                    8e:a9:f9:a9:04:77:3f:2d:69:ed:3e:00:d2:a6:38:
                    b3:db:8b:7c:98:8c:2f:3a:a5:37:63:08:7a:6a:89:
                    01:64:93:05:6a:c7:38:da:b4:d9:8c:a0:52:ab:52:
                    be:3e:48:16:6a:b8:73:b1:08:44:d2:5f:df:2e:78:
                    c8:03:3b:0f:25:7e:71:bc:7b:c7:37:54:8b:62:2c:
                    83:e4:4c:5b:45:ba:58:38:69:08:72:38:00:79:4b:
                    ab:17:2c:8d:a3:38:0b:0d:14:25:6f:f2:59:0c:cf:
                    2b:6c:90:2a:ab:3c:4d:f3:fb:fa:4d:c7:80:40:b2:
                    a0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:64:10:7A:A1:DE:85:FC:90:90:0A:FF:56:D0:52:6F:38:08:C7:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/57a86509-535e-3f39-9aa9-5dafe9726ec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.227.0-107.151.228.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:65:76:70:cd:1b:b7:af:93:60:00:71:a3:a7:01:87:a6:c1:
         f5:67:23:0e:c9:76:8c:f1:e0:9e:a6:67:be:35:6f:b3:80:cd:
         ef:d4:89:a1:9f:b3:7b:54:55:35:6e:96:42:54:2e:15:07:78:
         80:a8:a9:05:ca:da:a8:7d:50:38:61:0b:6b:99:cb:b2:27:df:
         de:1e:29:12:18:4e:36:56:b8:cd:c9:ec:02:ea:0a:b0:5a:23:
         a6:79:dd:4c:2d:a5:c0:67:c9:92:3d:bf:64:a3:d7:48:d5:8c:
         da:d6:86:25:b6:9f:de:72:c1:f6:d8:dd:de:e3:2e:2b:eb:aa:
         1e:14:28:20:e4:3f:ec:6a:bf:e3:05:7f:6c:54:21:f7:bb:b6:
         cb:c8:1e:51:8f:95:89:93:5c:97:84:ad:e1:d8:93:ef:46:0c:
         90:fc:4f:62:18:46:9f:a6:5d:d7:ca:b6:72:2f:28:17:82:88:
         5d:0f:1b:76:0c:e8:91:61:b5:7a:b8:4e:7d:5a:d9:a1:97:6f:
         f6:7f:ba:08:a6:32:dd:3e:8f:0e:1a:33:11:cd:d4:89:f0:ea:
         1a:66:ba:f5:43:6a:ce:92:20:90:b9:71:ba:06:a1:b4:f4:b2:
         33:c6:df:97:6f:4b:7a:ac:34:df:4a:94:34:89:7b:ee:43:8b:
         de:db:3e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:58:35 2026 by rpki-client