Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c2e4eff7-a685-3230-860e-152dafa1b525.roa
File:                     c2e4eff7-a685-3230-860e-152dafa1b525.roa (raw, json)
Hash identifier:          nDYIplkzzL40fAZBKiPVBa3h5E9pdqzx97Rqzh6+vBs=
Subject key identifier:   1D:13:A6:F8:CB:A2:99:CD:8B:21:B1:A5:94:C7:D7:FD:F0:4B:18:60
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584EA7873B18C831D64DD1AB6E80
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c2e4eff7-a685-3230-860e-152dafa1b525.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     109
IP address blocks:        128.107.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:3b:18:c8:31:d6:4d:d1:ab:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=884ded0e-376f-473b-8727-3ac669859663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:46:84:e3:dd:c3:c9:b6:ea:43:57:00:4f:25:
                    6a:f6:ba:52:eb:fa:7c:37:75:fd:44:54:58:17:a1:
                    11:cd:33:6b:10:30:ea:4c:15:9b:cc:87:08:61:5f:
                    c4:18:db:59:ad:dc:4e:c1:eb:c8:05:12:41:7a:bc:
                    5d:1a:14:be:b2:e3:92:a4:1a:2c:60:a2:fa:fb:fb:
                    e0:86:a5:db:f0:1d:ce:6e:c8:11:58:a3:34:15:5e:
                    f4:93:f4:5d:f1:ea:2b:4f:0e:19:cf:4e:41:fe:8e:
                    40:bb:ca:26:d7:0a:00:fc:1d:55:53:da:2f:cf:6b:
                    f9:68:f0:98:3a:c5:16:31:2c:e6:73:c0:29:75:53:
                    ee:68:f8:86:dd:0b:c4:12:fe:cf:f3:71:94:07:44:
                    5d:c2:7b:76:84:f0:4f:37:87:c6:db:a8:66:f0:14:
                    09:ee:9a:d7:3f:a1:cb:dc:90:9d:aa:a6:ee:81:77:
                    2c:12:87:3c:07:f6:eb:3b:23:4b:ad:ff:46:77:b4:
                    33:3b:a5:f9:9c:9c:b7:ca:4e:ec:ef:da:2b:2c:22:
                    d8:d5:d3:54:6c:3f:57:54:68:17:5b:ab:8a:ff:01:
                    a3:c6:10:81:98:ff:fa:56:e0:57:90:f4:1c:3d:96:
                    de:1d:74:36:ce:76:fd:92:ce:8e:da:de:7b:0b:ff:
                    db:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:13:A6:F8:CB:A2:99:CD:8B:21:B1:A5:94:C7:D7:FD:F0:4B:18:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c2e4eff7-a685-3230-860e-152dafa1b525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.107.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:4c:3e:c9:15:21:e9:2a:6a:a6:f2:96:73:a5:d8:49:50:9f:
         60:e1:64:3b:f1:76:a2:ef:c2:f9:7a:9d:90:9e:50:10:42:94:
         e5:61:33:fe:27:2a:41:58:a9:4a:45:17:7a:75:3f:8a:49:9d:
         70:2e:ad:5a:85:7f:66:69:39:ad:7d:83:85:da:a0:f6:ab:ad:
         cf:40:67:18:39:9e:20:17:f2:4f:3e:cd:f2:67:b4:ab:4c:3c:
         0b:bf:49:60:e8:b6:f9:63:e7:52:df:f0:86:49:c0:5f:b6:23:
         03:33:bf:72:73:4b:1f:2c:41:65:4f:70:e3:52:d2:92:b6:53:
         0e:5d:57:52:e5:a0:41:b3:08:49:b0:1d:56:66:7a:67:12:9e:
         6f:ad:7b:b1:40:60:48:21:ef:be:79:1b:b7:c9:4e:10:25:b6:
         8d:af:57:e2:cc:cb:a9:c7:ea:fd:1f:a7:e6:d7:d2:48:65:f6:
         af:41:ca:af:b2:d5:7c:2d:63:b3:58:51:88:6f:ad:54:ea:da:
         99:1a:17:b2:fe:b9:62:5e:db:09:bd:eb:d7:64:94:67:aa:41:
         11:61:33:f8:a2:1d:37:2d:9a:eb:1b:98:92:87:95:3e:d8:44:
         d8:05:21:47:27:f8:27:af:47:a5:e6:1c:67:df:33:ee:0b:4d:
         23:28:84:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:32:22 2026 by rpki-client