Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/eaa3e99e-19e4-30a8-8380-ff15e0a03b3c.roa
File:                     eaa3e99e-19e4-30a8-8380-ff15e0a03b3c.roa (raw, json)
Hash identifier:          2VPLz4e+Brw2+fA7c9XcR+DUqyRkqn5QqDUZbDwg0N4=
Subject key identifier:   7F:A7:50:17:EF:DA:96:E2:3D:6D:47:29:DA:CB:BD:80:73:2D:AC:83
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F40063EA4B708A748EB7E5700
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/eaa3e99e-19e4-30a8-8380-ff15e0a03b3c.roa
Signing time:             Mon 21 Sep 2026 15:59:46 +0000
ROA not before:           Mon 21 Sep 2026 15:59:46 +0000
ROA not after:            Sun 20 Dec 2026 16:59:46 +0000
asID:                     3257
IP address blocks:        107.158.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:40:06:3e:a4:b7:08:a7:48:eb:7e:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 21 15:59:46 2026 GMT
            Not After : Dec 20 16:59:46 2026 GMT
        Subject: CN=41277098-6e4f-4065-bdbb-739e1a4ddf6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ba:b9:33:a0:b9:4b:7e:e7:4c:d5:75:28:c8:
                    91:75:76:7d:ff:0f:ba:61:5b:ce:e6:3a:f0:d5:83:
                    ec:4c:cb:c7:25:95:16:ea:5f:ac:18:77:bc:5d:f0:
                    a7:0d:27:99:77:08:46:90:74:5a:28:58:73:bf:fc:
                    87:ef:16:cd:00:0d:f3:00:7d:8c:77:a2:ba:c0:89:
                    64:16:bf:07:5e:44:c4:eb:1d:72:e8:77:86:6c:fb:
                    27:73:29:65:fd:1f:13:25:aa:c5:9f:f8:08:4f:58:
                    5a:e0:0e:0b:bf:6e:6c:1a:9b:b4:e2:12:c9:17:49:
                    8f:b0:7a:e5:d3:62:e5:97:ab:c0:c2:95:91:fe:52:
                    ff:34:fe:44:d1:81:16:5f:7a:56:a6:75:5a:e5:58:
                    81:ee:8b:4b:2d:a8:76:9d:7d:74:25:55:3a:0c:70:
                    ec:db:49:1b:10:ff:75:a0:d2:20:35:1f:cf:f4:12:
                    77:1c:08:2d:74:50:4e:8f:32:b8:65:da:1c:bc:e5:
                    6e:e2:be:d0:a3:f3:97:bc:7d:83:9b:08:55:30:09:
                    a7:c0:9c:f5:7e:de:91:1e:4c:6c:f9:0f:52:e3:f8:
                    93:39:6b:22:2e:63:9d:ff:44:24:ea:26:b8:8e:1b:
                    14:2d:45:52:15:6f:9d:97:04:6d:30:9f:e9:00:2e:
                    87:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A7:50:17:EF:DA:96:E2:3D:6D:47:29:DA:CB:BD:80:73:2D:AC:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/eaa3e99e-19e4-30a8-8380-ff15e0a03b3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:84:67:c9:c7:73:e4:69:3b:e1:ba:8a:51:06:d2:a7:31:ae:
         f1:05:a2:bd:c8:1c:82:3f:76:c1:8c:10:dc:ac:4d:e1:6c:7b:
         dd:cc:f6:bd:b6:0d:74:55:75:a4:b5:da:5f:ab:68:01:f0:92:
         03:e3:23:2e:76:d4:ae:ce:95:ef:49:56:a4:e9:52:cb:b6:f3:
         47:69:b9:9a:35:14:21:49:8c:76:ac:7a:90:0e:6c:0d:af:bf:
         67:3a:d3:8f:b2:72:30:a0:87:45:8d:76:3d:ba:e6:3e:f8:d5:
         c5:70:87:5f:1f:c7:dc:59:50:2e:dd:7a:7d:32:01:6c:8d:c8:
         ef:b7:2e:9d:15:4c:2e:3b:21:2e:3d:9a:be:f9:c6:2d:39:04:
         e1:be:6a:88:e6:47:80:78:a7:c7:02:1e:83:f5:80:81:ee:7d:
         77:67:d5:ed:85:c0:07:63:7d:8c:8f:66:29:73:93:57:5d:87:
         95:01:f4:27:c0:b0:5b:8c:e7:91:0f:15:38:7a:b1:f2:fc:2a:
         0d:d3:7b:57:36:1f:b3:b2:e9:58:0b:fe:4e:7b:45:06:a1:b0:
         2b:9e:86:20:42:c5:d7:24:88:bd:d0:4a:3b:e0:78:0f:50:d8:
         9f:8d:3b:90:1c:fd:92:86:b8:c0:db:34:0a:41:70:9e:8f:d5:
         bc:3c:aa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:14:11 2026 by rpki-client