Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d2605b32-a67b-3a35-bfe8-3dfa47299cc5.roa
File:                     d2605b32-a67b-3a35-bfe8-3dfa47299cc5.roa (raw, json)
Hash identifier:          ofJ0y+PSpocbZrIzxX+cTRTAqyK6qbup4V/Dsozg3dw=
Subject key identifier:   AD:41:04:9E:3C:2A:CE:DD:09:F5:58:57:66:CE:2C:C3:0F:9A:71:A1
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F498996C885250EB2BC09B800
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d2605b32-a67b-3a35-bfe8-3dfa47299cc5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        107.158.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:96:c8:85:25:0e:b2:bc:09:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e1c3875c-09de-42fe-93f2-8b84a721f5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:81:77:59:e5:96:ae:ed:61:4e:20:8d:6e:c8:
                    d8:aa:7e:6d:78:c3:65:8e:72:36:14:db:66:26:e9:
                    86:cf:4a:5d:9c:66:3a:bb:19:24:7b:10:4b:f7:05:
                    39:cf:29:14:7a:0e:a2:29:8a:30:3b:3f:8d:56:f3:
                    13:3c:24:75:1e:9f:43:63:6e:d4:64:a5:c4:17:37:
                    16:6d:61:b6:30:08:c6:47:18:e1:ee:32:bd:06:a0:
                    d8:45:66:e1:b7:45:1a:1e:0d:fe:1b:4f:ff:73:6c:
                    a9:eb:0e:b8:ac:35:7c:2b:90:62:68:f1:b1:b9:9b:
                    1e:97:aa:b8:ea:c7:03:b9:bf:85:11:24:2e:1b:1e:
                    bf:14:4d:3a:f5:f0:92:ca:2b:a7:64:ae:12:f0:d1:
                    a4:70:e5:75:96:1a:7e:e9:4a:7b:29:77:48:a4:e3:
                    f1:0e:74:76:83:56:3f:a4:c5:be:53:c3:5c:00:d8:
                    7d:73:42:f1:60:20:1d:61:9f:3a:d2:79:85:09:85:
                    a7:04:75:99:a4:98:8e:df:54:d1:b5:2a:51:c1:87:
                    d5:8f:72:cd:6d:4c:0c:fe:73:6e:c0:8f:82:43:d1:
                    ca:07:a7:7f:31:b5:ea:52:50:bc:26:8f:b7:8f:ac:
                    57:47:9b:57:62:14:83:1b:4a:86:2e:01:63:76:f6:
                    cd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:41:04:9E:3C:2A:CE:DD:09:F5:58:57:66:CE:2C:C3:0F:9A:71:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d2605b32-a67b-3a35-bfe8-3dfa47299cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:8e:ea:5e:c2:90:1c:e5:d1:d8:5e:4a:58:8b:8f:79:d3:71:
         3e:62:8f:90:1c:f6:89:d4:61:e8:e6:12:2b:13:fd:3a:96:1b:
         3c:45:2e:d3:35:eb:79:4e:47:c7:83:a1:91:84:c5:3c:a6:f8:
         74:cc:d0:15:00:6f:e4:dc:4e:30:0b:a7:f3:ea:1b:dc:4f:27:
         6b:39:b4:62:c0:66:12:2d:64:34:dd:6f:ed:f4:a5:16:23:2d:
         e9:ca:7d:4c:a3:60:8d:ec:c5:d8:6b:bc:42:8c:57:12:ef:1f:
         b8:ee:1d:30:a2:78:74:98:b9:4e:5b:0f:8f:5b:6f:eb:ba:68:
         4b:66:2d:f6:8f:6a:f4:6e:cc:13:e0:42:4a:09:b3:9d:72:be:
         95:74:4e:ef:eb:b0:66:b5:81:91:6f:54:9b:7a:cc:17:b3:05:
         c1:12:d9:94:36:23:31:3e:e7:20:99:f9:a6:d5:e8:3b:09:69:
         1d:c2:7c:46:c6:59:d0:08:79:c2:92:fa:22:94:0c:89:e8:54:
         48:4b:b7:12:09:24:ea:ad:85:3d:cf:64:67:ec:a8:39:00:5a:
         fe:b7:71:38:b5:34:7e:ef:c6:fb:ad:27:d9:fe:a4:31:60:65:
         77:a2:bf:46:f5:e7:bd:97:13:de:86:da:a3:74:f0:8b:ca:82:
         3e:b2:0b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:03:51 2026 by rpki-client