Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4c790d2e-ef5e-39f4-8d92-933f93cb32e1.roa
File:                     4c790d2e-ef5e-39f4-8d92-933f93cb32e1.roa (raw, json)
Hash identifier:          ffS/IqqY4tgTEJ95Qkp3pjdAO4cVw6r86ftRBhxjUcg=
Subject key identifier:   64:88:F0:95:F4:BC:22:9D:DA:E4:60:30:F7:FC:C7:7E:26:9D:EC:D7
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F2957A837EB5452433C5DD3C0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4c790d2e-ef5e-39f4-8d92-933f93cb32e1.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     142111
IP address blocks:        107.158.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:a8:37:eb:54:52:43:3c:5d:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=51914e84-88d0-4cfc-9dc7-a7c65d3e3100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:53:40:f9:5b:17:1d:0f:d5:e9:1a:f9:24:64:
                    5c:8c:56:8c:2d:e5:01:87:49:c0:ab:e6:3f:9b:8f:
                    7f:f5:2a:6b:3e:85:3c:61:e4:91:47:a8:07:b2:78:
                    78:55:66:fd:c4:95:33:6e:f6:2d:54:ea:c7:26:b7:
                    37:02:65:93:9f:0c:c9:b1:ab:d4:14:9d:66:8f:b8:
                    85:59:fc:74:01:a8:90:90:e9:26:e4:ab:32:5b:1f:
                    cd:01:c3:d5:ff:40:11:21:df:4e:66:0c:f5:30:56:
                    96:48:47:f1:f1:42:70:56:24:36:2a:68:4f:3f:ae:
                    df:58:db:ae:1a:25:8c:0e:9f:b1:d1:13:58:84:5c:
                    15:60:12:a2:f7:2f:cb:85:16:36:b4:2f:97:fc:2d:
                    fb:aa:cf:28:74:18:bb:c3:85:09:1d:04:f7:64:21:
                    df:17:3d:5c:df:d2:e8:57:0f:8d:4a:2d:d8:60:28:
                    be:24:ef:63:84:e4:f1:79:00:53:a8:2a:14:76:c5:
                    a7:3e:53:7f:e9:0c:61:7f:8b:ca:ac:b7:de:d2:55:
                    e5:07:04:af:25:91:17:46:3f:4b:7b:ff:4d:00:e7:
                    89:de:d3:aa:09:9d:81:fb:d9:9f:a9:c5:d1:db:38:
                    1f:fa:97:2c:7d:72:19:6a:83:5c:83:00:a9:6e:72:
                    16:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:88:F0:95:F4:BC:22:9D:DA:E4:60:30:F7:FC:C7:7E:26:9D:EC:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4c790d2e-ef5e-39f4-8d92-933f93cb32e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b5:75:3e:20:77:9c:29:4b:5b:49:ba:b8:1e:00:4c:0c:55:
         a3:8c:d0:e9:1e:c4:45:e7:3e:2c:6a:1d:e3:f6:56:e7:3b:57:
         12:4e:ec:76:95:82:10:46:b0:25:79:6b:38:62:c3:74:7e:36:
         b3:8e:39:f8:aa:a8:8b:53:e9:1f:e9:d2:61:5c:80:f6:95:1e:
         aa:b1:37:4d:65:6e:1e:c8:05:1c:f5:fd:3a:b7:bc:75:77:72:
         fe:be:96:7b:c5:b3:85:0e:2b:19:e6:1b:27:78:4d:d8:7a:02:
         e1:16:7e:24:f5:ca:b6:57:82:37:97:77:de:5c:db:df:7a:d3:
         7f:6f:6c:49:46:b9:1c:29:65:ce:77:7d:05:f3:52:00:90:5d:
         c3:d9:05:b4:79:40:42:cc:a7:0c:97:c2:d2:65:28:1d:41:3a:
         e9:b8:e1:ba:66:6f:67:42:ff:63:43:cd:a8:cb:a3:25:04:17:
         52:b9:3c:5b:96:6d:99:bd:a9:d1:95:16:16:2b:7a:7a:64:46:
         54:77:f2:a8:8f:bc:d7:9f:7f:49:91:fd:9c:cd:04:d8:5c:77:
         ef:e0:0c:dd:16:83:70:05:c4:86:77:7a:b0:2f:af:92:aa:7d:
         69:45:79:54:bd:37:7e:80:dd:ca:6e:1e:ca:36:3e:2a:ea:18:
         dd:33:cf:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV6g361RSQzxd08AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk
NTE5MTRlODQtODhkMC00Y2ZjLTlkYzctYTdjNjVkM2UzMTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVNA+VsXHQ/V6Rr5JGRcjFaMLeUBh0nAq+Y/
m49/9SprPoU8YeSRR6gHsnh4VWb9xJUzbvYtVOrHJrc3AmWTnwzJsavUFJ1mj7iF
Wfx0AaiQkOkm5KsyWx/NAcPV/0ARId9OZgz1MFaWSEfx8UJwViQ2KmhPP67fWNuu
GiWMDp+x0RNYhFwVYBKi9y/LhRY2tC+X/C37qs8odBi7w4UJHQT3ZCHfFz1c39Lo
Vw+NSi3YYCi+JO9jhOTxeQBTqCoUdsWnPlN/6Qxhf4vKrLfe0lXlBwSvJZEXRj9L
e/9NAOeJ3tOqCZ2B+9mfqcXR2zgf+pcsfXIZaoNcgwCpbnIWBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGSI8JX0vCKd2uRgMPf8x34mnezXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNGM3OTBkMmUtZWY1ZS0z
OWY0LThkOTItOTMzZjkzY2IzMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa54lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABG1dT4gd5wpS1tJurgeAEwMVaOM0OkexEXnPixqHeP2Vuc7VxJO7HaV
ghBGsCV5azhiw3R+NrOOOfiqqItT6R/p0mFcgPaVHqqxN01lbh7IBRz1/Tq3vHV3
cv6+lnvFs4UOKxnmGyd4Tdh6AuEWfiT1yrZXgjeXd95c2996039vbElGuRwpZc53
fQXzUgCQXcPZBbR5QELMpwyXwtJlKB1BOum44bpmb2dC/2NDzajLoyUEF1K5PFuW
bZm9qdGVFhYrenpkRlR38qiPvNeff0mR/ZzNBNhcd+/gDN0Wg3AFxIZ3erAvr5Kq
fWlFeVS9N36A3cpuHso2PirqGN0zz2w=
-----END CERTIFICATE-----
Generated at Sat Oct 3 17:39:30 2026 by rpki-client