Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/6a43ae01-6ae7-3e0f-b042-456023baa041.roa
File:                     6a43ae01-6ae7-3e0f-b042-456023baa041.roa (raw, json)
Hash identifier:          7ZGL2qaLy7RWhxOFCSesZHPUnSWcIRt8KuRrzHHWTlw=
Subject key identifier:   02:DD:DC:90:0A:68:52:81:86:21:97:65:02:D0:05:FB:4A:C2:F1:6E
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584EA792341B9C479945676DC480
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/6a43ae01-6ae7-3e0f-b042-456023baa041.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33368
IP address blocks:        107.166.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:34:1b:9c:47:99:45:67:6d:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=911451bd-6d9b-46b3-babc-5f09dae62dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bc:05:99:12:67:b7:aa:ad:42:7d:9c:a5:9b:
                    4b:96:60:72:34:61:5e:23:2e:d7:77:d3:2d:37:b2:
                    bc:f6:51:8d:ea:48:f7:7a:56:27:d3:07:60:67:05:
                    5a:b2:ea:78:f5:c7:f7:6d:60:1a:c6:ee:66:6c:91:
                    c8:46:52:fa:eb:20:48:ce:78:1c:24:e8:4d:f5:bc:
                    ad:20:fc:48:f7:dd:1a:5e:57:ca:7c:97:30:19:21:
                    83:e1:70:39:8e:30:da:27:fb:1a:dd:2a:47:84:a9:
                    4a:f9:56:ac:06:58:92:aa:86:a9:80:62:4f:03:2e:
                    ed:01:3f:e7:b2:e0:91:33:ae:12:07:46:3b:bb:41:
                    49:28:75:f8:a8:d9:44:46:9b:9d:19:2e:27:f0:8d:
                    a3:96:53:1d:69:3e:43:2b:ce:b5:18:a7:23:47:39:
                    89:a4:6a:5a:6f:ca:c6:56:b1:71:0c:55:09:55:2e:
                    2d:a3:16:17:a6:05:e8:7f:47:fc:21:40:4d:c7:4e:
                    9d:ff:89:f7:64:2e:65:ad:ae:75:4f:b1:92:c6:0e:
                    85:21:0b:74:e1:84:e0:97:0a:ee:7e:00:98:a6:50:
                    9d:90:db:82:e2:cd:fd:cb:e7:68:d9:b5:74:4a:da:
                    ec:26:05:5c:e7:c3:6f:49:1e:2e:4f:cc:32:16:ae:
                    33:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DD:DC:90:0A:68:52:81:86:21:97:65:02:D0:05:FB:4A:C2:F1:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/6a43ae01-6ae7-3e0f-b042-456023baa041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.166.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:b1:9b:85:a0:02:ce:ba:83:ec:1b:82:8c:23:8c:eb:5c:d9:
         53:36:5d:17:5e:00:e3:91:ca:62:c2:c4:06:4a:0a:07:24:77:
         a3:7c:b8:74:12:d9:e8:e1:ce:ed:16:fe:2c:37:62:4f:c2:5d:
         d0:30:ed:d8:be:a4:cb:ab:b7:dc:9f:29:6a:15:af:bb:6e:a8:
         88:d2:b4:ab:ec:7c:c4:ac:47:6e:ca:13:f6:73:ea:d8:e2:3a:
         56:50:54:b8:44:a5:90:70:04:ba:7a:30:0a:66:30:eb:0e:44:
         91:f7:00:72:59:27:4b:2b:8a:8a:d0:38:87:28:da:48:ee:78:
         e4:d0:01:7c:a4:3b:c7:bd:35:b5:a6:86:ec:11:d3:8c:50:ba:
         1d:3a:28:a6:23:3d:84:1a:ae:e7:7c:50:42:7a:45:b0:f2:2e:
         4a:b6:89:a0:10:57:c5:9c:b6:46:05:25:b1:3a:fd:d7:81:41:
         8e:e2:bd:f0:47:c7:a6:66:48:35:0c:51:71:38:d7:b9:2a:c6:
         12:6b:83:b8:3b:4f:98:ac:40:64:f3:85:f5:e5:92:0f:47:fa:
         79:05:df:17:2c:be:de:15:67:af:e6:6b:72:27:3d:17:c8:d2:
         99:0f:a0:2e:8f:e4:a6:a2:d8:d3:ff:f6:f3:dd:3d:0c:a7:ff:
         90:b6:c3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:31:49 2026 by rpki-client