Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/42dd5554-364a-3818-8be0-cee2dd3216c4.roa
File:                     42dd5554-364a-3818-8be0-cee2dd3216c4.roa (raw, json)
Hash identifier:          DFdvc7G3TK8/83rX4YgrXc1VKAWcYT6R8RyCXD1h+hQ=
Subject key identifier:   0D:9E:FF:6E:B4:D7:43:E4:D4:CB:39:CD:35:68:7E:0D:70:C3:9B:52
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F400256D438C84614B83C9880
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/42dd5554-364a-3818-8be0-cee2dd3216c4.roa
Signing time:             Mon 21 Sep 2026 15:51:54 +0000
ROA not before:           Mon 21 Sep 2026 15:51:54 +0000
ROA not after:            Sun 20 Dec 2026 16:51:54 +0000
asID:                     3257
IP address blocks:        107.158.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:40:02:56:d4:38:c8:46:14:b8:3c:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 21 15:51:54 2026 GMT
            Not After : Dec 20 16:51:54 2026 GMT
        Subject: CN=c2982272-fc9f-42d6-971a-f7d5235da406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d1:d6:8b:47:d8:2e:a7:62:3b:4b:4a:e1:bd:
                    bd:b3:34:ed:10:2b:88:ee:51:d3:f0:03:50:7b:13:
                    ff:4e:88:23:5b:ac:b1:99:b2:f3:63:9b:28:8a:c9:
                    ee:6d:1a:9e:13:75:b2:14:8b:13:ee:18:2a:d7:9e:
                    6f:55:12:c1:5f:75:0d:cd:ef:67:7d:92:29:bf:17:
                    8c:80:cd:9c:bf:64:ea:31:b1:2a:20:e1:f9:d7:29:
                    27:66:3a:b6:ae:eb:9c:1f:07:04:f8:b6:75:f0:1c:
                    18:1c:a2:a1:d5:02:5d:f4:b3:a5:d0:14:01:81:6d:
                    ac:ac:c3:c3:11:cc:82:9a:cc:cc:04:88:46:de:54:
                    3f:bc:39:ca:7f:79:59:af:87:9f:e2:3a:28:df:21:
                    3e:e1:2b:75:0f:d7:8e:7d:1e:21:14:2e:d7:ed:9c:
                    51:ef:7b:13:5d:75:ab:06:83:8b:c4:76:8b:2e:33:
                    b6:e3:38:c2:89:a1:9a:ae:a8:2c:09:af:8f:86:7e:
                    a9:25:c7:33:1c:e3:bf:b2:95:98:70:6b:5a:b9:46:
                    a9:5e:5c:fd:8e:77:54:0a:93:56:91:b2:88:b7:f6:
                    f6:4b:81:94:ca:fd:49:a2:65:d6:60:4f:0a:08:08:
                    07:ec:c4:06:82:e9:67:3f:1f:7f:48:17:6d:60:5b:
                    ed:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9E:FF:6E:B4:D7:43:E4:D4:CB:39:CD:35:68:7E:0D:70:C3:9B:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/42dd5554-364a-3818-8be0-cee2dd3216c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:34:98:44:02:d6:30:f1:a8:b5:bf:4d:d0:42:17:5f:3d:ca:
         43:52:d8:47:32:40:43:2e:2d:41:45:84:08:d9:42:a3:d7:c5:
         21:94:5b:49:a4:d5:73:b7:17:66:dc:cb:01:70:7c:3f:4c:ba:
         f0:da:52:26:bf:0d:a7:93:ee:de:4c:8f:dd:42:50:91:bb:57:
         6f:9b:f2:d8:02:76:a2:a3:22:46:75:53:94:e7:39:61:dd:47:
         6e:33:f9:7c:86:00:e4:05:be:4d:6c:1d:55:83:ec:3f:16:25:
         87:7e:7f:c2:33:70:78:1d:6f:49:bd:ea:21:33:0f:b8:d0:f2:
         a5:4c:aa:4e:67:50:47:68:7a:26:26:6c:14:f5:f1:a3:df:4b:
         73:45:77:9a:b0:80:e4:2c:3b:59:f6:e6:d6:f0:79:d3:db:34:
         27:cf:78:cc:6a:a5:4b:25:3c:b8:dd:70:d4:89:4f:36:5d:3c:
         38:20:4b:9c:d2:fa:3b:10:9b:5a:56:de:8a:ee:ff:9c:96:c1:
         d4:50:a1:7a:d6:29:a2:39:94:8e:1d:28:b1:76:b7:a2:5e:af:
         c8:d9:df:2b:1c:df:eb:af:0b:bd:82:ad:b7:35:b5:b4:05:fc:
         08:82:bf:4f:8d:3b:04:38:fa:7b:7b:5c:1f:88:61:3f:c0:28:
         9a:62:2f:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9AAlbUOMhGFLg8mIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDkyMTE1NTE1NFoXDTI2MTIyMDE2NTE1NFowLzEtMCsGA1UEAxMk
YzI5ODIyNzItZmM5Zi00MmQ2LTk3MWEtZjdkNTIzNWRhNDA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9HWi0fYLqdiO0tK4b29szTtECuI7lHT8ANQ
exP/TogjW6yxmbLzY5soisnubRqeE3WyFIsT7hgq155vVRLBX3UNze9nfZIpvxeM
gM2cv2TqMbEqIOH51yknZjq2ruucHwcE+LZ18BwYHKKh1QJd9LOl0BQBgW2srMPD
EcyCmszMBIhG3lQ/vDnKf3lZr4ef4joo3yE+4St1D9eOfR4hFC7X7ZxR73sTXXWr
BoOLxHaLLjO24zjCiaGarqgsCa+Phn6pJcczHOO/spWYcGtauUapXlz9jndUCpNW
kbKIt/b2S4GUyv1JomXWYE8KCAgH7MQGgulnPx9/SBdtYFvtKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA2e/26010Pk1Ms5zTVofg1ww5tSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNDJkZDU1NTQtMzY0YS0z
ODE4LThiZTAtY2VlMmRkMzIxNmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa561MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACc0mEQC1jDxqLW/TdBCF189ykNS2EcyQEMuLUFFhAjZQqPXxSGUW0mk
1XO3F2bcywFwfD9MuvDaUia/DaeT7t5Mj91CUJG7V2+b8tgCdqKjIkZ1U5TnOWHd
R24z+XyGAOQFvk1sHVWD7D8WJYd+f8IzcHgdb0m96iEzD7jQ8qVMqk5nUEdoeiYm
bBT18aPfS3NFd5qwgOQsO1n25tbwedPbNCfPeMxqpUslPLjdcNSJTzZdPDggS5zS
+jsQm1pW3oru/5yWwdRQoXrWKaI5lI4dKLF2t6Jer8jZ3ysc3+uvC72Crbc1tbQF
/AiCv0+NOwQ4+nt7XB+IYT/AKJpiL9A=
-----END CERTIFICATE-----
Generated at Sun Sep 27 04:00:13 2026 by rpki-client