Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/591c5d87-30d1-35c8-9c74-3a7413a531e1.roa
File:                     591c5d87-30d1-35c8-9c74-3a7413a531e1.roa (raw, json)
Hash identifier:          AAK8vWi2cC2FS2/4BaZE6UrbGVErmcfCKj90ux+NYRI=
Subject key identifier:   7D:15:24:A1:17:31:DE:FB:54:1B:DA:C0:47:49:F5:0F:45:7C:AE:C9
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F593CC6B44D59CD0D3C82D970
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/591c5d87-30d1-35c8-9c74-3a7413a531e1.roa
Signing time:             Wed 30 Sep 2026 16:44:51 +0000
ROA not before:           Wed 30 Sep 2026 16:44:51 +0000
ROA not after:            Tue 29 Dec 2026 17:44:51 +0000
asID:                     62904
IP address blocks:        107.158.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:59:3c:c6:b4:4d:59:cd:0d:3c:82:d9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 30 16:44:51 2026 GMT
            Not After : Dec 29 17:44:51 2026 GMT
        Subject: CN=b5971437-bac2-4c52-9829-a6d785683320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:49:67:67:cf:fb:ee:da:db:5f:51:a0:ff:af:
                    2a:de:e8:7f:33:93:9d:81:b4:9e:3c:d8:fd:47:f6:
                    bf:ae:ec:75:60:5d:2c:07:e2:dc:6d:e7:5e:9b:9b:
                    da:35:2e:99:35:02:2b:cc:de:5e:6a:57:9c:64:5f:
                    dd:87:79:16:d7:3d:7a:dc:07:8a:ab:be:81:25:df:
                    c0:f6:cb:e5:09:f2:21:89:37:ae:c5:f8:7a:f0:94:
                    42:36:ca:b5:7b:e0:ee:ca:01:b3:ac:95:c3:08:51:
                    0d:28:75:56:2f:25:3a:09:3a:5a:b3:6f:29:4c:0a:
                    34:58:09:81:83:ef:67:20:9e:33:8c:2a:95:56:a8:
                    e9:e0:0d:49:b6:d5:b3:71:8e:a8:f6:1f:8b:af:de:
                    48:8a:bf:29:7f:73:92:b3:79:b5:dd:ee:ff:75:58:
                    56:35:47:b5:1f:a1:aa:92:bd:e8:15:bb:e4:33:8f:
                    87:61:fe:e4:83:2a:18:b8:81:d6:47:2d:0a:53:a3:
                    21:5e:3c:18:ce:a5:f0:4a:8f:b9:6e:68:a7:9e:a4:
                    1c:cf:3f:0c:45:fd:99:47:09:f5:36:cb:ca:00:6b:
                    8d:69:00:84:54:8b:04:fa:16:f7:61:f0:eb:33:39:
                    c6:30:3a:62:bc:1c:bc:98:1c:f1:7e:c9:1a:d5:3d:
                    d3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:15:24:A1:17:31:DE:FB:54:1B:DA:C0:47:49:F5:0F:45:7C:AE:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/591c5d87-30d1-35c8-9c74-3a7413a531e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:6e:1d:9d:db:85:76:c3:76:72:b7:a1:5e:33:e3:26:59:1a:
         4c:25:e5:71:51:fb:1c:b3:ce:44:c1:0d:ae:7c:36:7a:41:c6:
         7d:a1:03:13:9a:93:07:4c:26:ba:3c:5b:5f:d0:c3:14:22:74:
         01:83:98:1d:49:91:52:a5:7f:02:16:3a:51:3f:7b:bc:da:9f:
         ef:4a:e3:08:87:27:71:0b:33:4b:17:94:65:cd:b1:f4:b3:d7:
         3b:ff:e1:22:20:fa:42:e6:e9:c7:e8:1d:65:b3:a5:bc:d3:8d:
         0e:d0:c7:5b:35:81:c1:dd:fb:9b:f7:6e:a8:53:bf:37:3b:82:
         b1:fe:21:16:6b:e0:d0:e2:97:80:f6:67:e5:04:3e:df:e6:0b:
         ce:cb:66:e1:3a:89:b6:cb:10:45:fe:13:82:1b:6e:56:b5:7f:
         f8:b7:36:d4:50:ce:de:b9:5f:02:3d:92:8e:13:fd:77:b0:42:
         3b:19:8d:78:79:85:c5:6b:13:64:5a:5d:f7:4c:7e:83:48:03:
         be:46:41:d8:ab:df:24:e3:e5:c8:36:84:23:8f:a4:55:1b:b2:
         87:f7:3d:5b:4f:78:fc:46:0e:59:a6:e8:76:35:f2:14:92:4f:
         ba:49:13:aa:2f:0b:5f:75:19:4c:6a:7d:2f:5e:43:cb:e0:8d:
         22:59:16:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:12:59 2026 by rpki-client