Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cf1a2b9b-7824-31ae-b340-9b372ff3f463.roa
File:                     cf1a2b9b-7824-31ae-b340-9b372ff3f463.roa (raw, json)
Hash identifier:          wGOXmNkqfFgOcORQ1tLU4hxoIQeHEC7pRWe2H0dhpCc=
Subject key identifier:   ED:28:49:80:D1:4E:BB:15:09:19:A5:40:D9:58:3A:BA:12:87:86:07
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F400A943052CECC6562ACD180
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cf1a2b9b-7824-31ae-b340-9b372ff3f463.roa
Signing time:             Mon 21 Sep 2026 16:08:30 +0000
ROA not before:           Mon 21 Sep 2026 16:08:30 +0000
ROA not after:            Sun 20 Dec 2026 17:08:30 +0000
asID:                     3257
IP address blocks:        107.158.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:40:0a:94:30:52:ce:cc:65:62:ac:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 21 16:08:30 2026 GMT
            Not After : Dec 20 17:08:30 2026 GMT
        Subject: CN=c94cf251-ce96-407a-9ee0-b943f074ef6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:81:b2:35:2e:3b:e0:17:65:7b:54:ca:6d:
                    43:2a:8a:06:bc:a9:f6:af:dd:f9:5b:a9:55:f3:68:
                    32:37:14:6f:ff:32:f3:7f:11:5c:b0:99:03:7c:ee:
                    11:08:1f:2c:76:99:a8:3e:38:f0:fc:f0:e7:0e:b8:
                    57:1a:cb:e7:0f:2d:89:36:16:79:e0:d7:22:28:04:
                    ff:67:eb:33:70:33:41:24:be:14:b3:fa:e3:86:79:
                    73:7f:b1:82:4d:0a:ef:e6:29:65:3f:7b:7b:df:2f:
                    3f:90:27:e4:2e:e9:77:04:de:8f:ce:08:4b:60:00:
                    47:55:77:7c:69:b8:7b:fe:49:0e:bb:84:3d:85:6a:
                    08:b0:42:0c:b6:59:29:62:40:82:5a:e6:89:03:c6:
                    b1:a6:bb:74:52:a5:42:82:11:84:77:ea:3e:8e:db:
                    f1:f6:79:f3:2e:11:ec:71:87:27:46:35:9a:38:c6:
                    2f:44:e8:06:97:0e:1b:d1:e2:de:42:ff:62:e9:66:
                    26:c4:fb:42:7d:c8:92:46:a8:52:10:a8:81:36:e9:
                    ec:68:b4:cc:5a:64:8e:37:fd:25:7a:7a:56:d1:3d:
                    fe:f9:3e:43:33:82:cf:b3:4f:ab:0b:81:09:2b:cb:
                    7d:e2:39:54:58:0d:55:7b:dc:c2:30:26:dd:59:18:
                    60:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:28:49:80:D1:4E:BB:15:09:19:A5:40:D9:58:3A:BA:12:87:86:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cf1a2b9b-7824-31ae-b340-9b372ff3f463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:5b:fe:56:02:e5:d0:75:69:3b:45:a5:bf:35:60:a8:68:bf:
         74:64:2e:f5:89:8f:e0:53:76:cd:e6:69:b3:e5:e4:94:a0:1c:
         da:07:ab:4c:d9:6d:59:82:eb:55:79:8b:b7:31:51:52:0f:2b:
         39:96:42:b6:78:06:f5:99:07:34:4b:a4:35:9b:63:22:82:51:
         94:23:94:55:a9:03:ef:07:94:15:fc:01:cf:53:cd:d0:24:26:
         4f:ad:d0:f6:b3:84:b4:fd:38:25:e9:3b:15:2d:dc:ba:dc:9f:
         69:69:1e:28:97:27:60:a2:c8:4d:46:52:e4:7c:18:f3:64:cf:
         e5:c1:da:bf:22:47:6c:59:46:f6:d3:3a:05:45:2a:08:c2:a7:
         98:7a:c9:e4:20:0d:f7:78:84:f6:29:89:9c:de:df:69:43:00:
         34:1f:55:18:98:07:38:03:15:f5:96:b2:1e:43:10:1a:f0:2b:
         bb:ea:d7:3d:47:4c:e2:c9:5d:ab:c2:bf:70:a4:9e:44:ce:29:
         35:b9:12:d0:a6:21:03:d2:e5:18:dc:a9:57:f1:31:93:2a:92:
         25:d9:f6:fc:87:f7:72:fe:43:21:65:de:63:90:9c:59:7a:8d:
         df:b0:c5:03:ea:eb:ed:37:c6:11:e1:88:e2:74:4d:ff:63:61:
         38:95:e6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:46:03 2026 by rpki-client