Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/850933f2-23a5-3114-ae9b-49de9a7bc924.roa
File:                     850933f2-23a5-3114-ae9b-49de9a7bc924.roa (raw, json)
Hash identifier:          77XVT+REMpKSFSUo+Df5yKAV/8c9l5hldg30hjYPCEI=
Subject key identifier:   B0:DE:CC:1D:01:B4:12:F1:E6:FD:05:25:E7:93:46:F1:B3:EF:6B:B9
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F594C1767EC09388E7FBD89D0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/850933f2-23a5-3114-ae9b-49de9a7bc924.roa
Signing time:             Wed 30 Sep 2026 17:15:42 +0000
ROA not before:           Wed 30 Sep 2026 17:15:42 +0000
ROA not after:            Tue 29 Dec 2026 18:15:42 +0000
asID:                     62904
IP address blocks:        107.158.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:59:4c:17:67:ec:09:38:8e:7f:bd:89:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 30 17:15:42 2026 GMT
            Not After : Dec 29 18:15:42 2026 GMT
        Subject: CN=db53f20a-dc05-4543-9d9b-18b7a3a3b8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b8:3f:be:98:ef:80:7a:76:dd:e4:13:59:6d:
                    00:d3:17:39:df:96:1f:2b:62:ff:39:11:5c:a6:ea:
                    ee:0b:18:23:76:1f:15:77:0f:22:8a:7d:a3:82:f6:
                    68:27:28:ef:fd:45:df:07:e0:f6:f1:47:88:b5:45:
                    33:d5:d5:87:f2:7a:6d:f9:5e:dd:a3:85:cd:36:23:
                    74:b7:17:04:04:93:99:ad:17:2b:1a:bd:3b:53:05:
                    38:78:fc:56:b4:86:05:2f:e3:7f:ff:bd:ef:4e:f3:
                    92:74:1e:ee:b2:00:86:3b:a6:3f:a0:ee:0e:02:05:
                    0b:41:97:5a:17:dd:80:a7:fa:9e:a0:b0:fe:27:70:
                    b0:e6:0f:de:58:f6:7e:13:a5:ef:ed:b6:90:f2:f6:
                    9c:46:31:97:f5:57:6c:43:b2:e1:96:14:23:72:82:
                    df:e8:d2:f2:70:bb:b2:cf:93:b6:00:d6:0e:57:df:
                    83:1b:01:1c:4c:55:50:81:e5:93:85:59:06:6b:69:
                    be:ff:d1:0a:73:40:2a:7f:0e:8e:a2:64:a5:e8:fa:
                    2c:56:9d:98:50:50:eb:a8:bd:ae:ce:75:77:e5:11:
                    1a:f9:43:90:0c:ec:33:33:3d:8e:ad:24:da:62:9d:
                    3c:4a:6f:8e:ba:3c:0d:28:38:ed:3a:ca:17:e7:7d:
                    4c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DE:CC:1D:01:B4:12:F1:E6:FD:05:25:E7:93:46:F1:B3:EF:6B:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/850933f2-23a5-3114-ae9b-49de9a7bc924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:8e:ad:39:c3:01:cc:55:be:92:06:f2:c9:0c:07:40:42:87:
         c0:dc:a6:71:03:e7:a1:31:d9:58:85:c4:8d:e3:bd:ca:ce:25:
         4a:19:2c:fc:4a:76:fb:2a:a8:c7:d4:72:a6:07:85:7f:e5:3c:
         40:fa:3c:0f:3e:c3:d7:55:f5:3a:83:bc:09:1b:19:b7:f2:82:
         66:3b:77:85:f0:a9:d3:d7:6d:81:25:31:48:9d:48:1f:3a:d0:
         08:76:a9:34:e9:31:3f:d6:b8:4d:fb:49:cc:e6:5a:c1:4d:9f:
         ed:1b:44:fb:15:4f:17:ce:17:4f:e0:f2:a8:cf:0d:15:b0:8a:
         af:a4:ce:8a:c4:08:03:ab:6f:07:aa:fa:dd:60:9a:f3:95:4b:
         e0:86:9f:f6:93:e8:0d:70:e1:52:1f:2f:42:c7:cc:7b:56:db:
         9f:a1:3d:a9:ee:f1:74:c1:86:21:57:21:56:09:09:6a:f2:bf:
         18:9b:18:2c:f9:d4:27:a6:5a:56:e9:3c:c6:0f:6a:62:5d:19:
         fd:f9:47:1a:76:65:5f:7b:73:5d:e9:45:5f:37:5f:db:19:18:
         78:45:78:27:a2:30:6e:71:17:a9:37:35:af:7a:d9:7e:d7:fd:
         33:4b:26:dc:51:cd:33:05:d8:fa:b7:51:8e:56:2b:23:9b:04:
         00:55:c8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:11:53 2026 by rpki-client