Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f0ecc1c5-0895-3510-aeca-ef4c9d4a6981.roa
File:                     f0ecc1c5-0895-3510-aeca-ef4c9d4a6981.roa (raw, json)
Hash identifier:          NFv+MVaBCdLylGt0/bIKcDSVGe063rAjxb1w3kTHdJ8=
Subject key identifier:   48:12:DE:F6:74:72:88:02:71:1B:2C:B7:71:3E:06:10:FF:BD:C8:AA
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F5941E55324BB932E4D266AC0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f0ecc1c5-0895-3510-aeca-ef4c9d4a6981.roa
Signing time:             Wed 30 Sep 2026 16:55:10 +0000
ROA not before:           Wed 30 Sep 2026 16:55:10 +0000
ROA not after:            Tue 29 Dec 2026 17:55:10 +0000
asID:                     62904
IP address blocks:        107.158.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:59:41:e5:53:24:bb:93:2e:4d:26:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 30 16:55:10 2026 GMT
            Not After : Dec 29 17:55:10 2026 GMT
        Subject: CN=dad00c7d-5701-4f5a-947e-065bd764f394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d6:24:2a:0b:fe:9e:fc:c8:67:1e:b1:fc:c7:
                    50:ad:53:33:1c:80:27:6f:e5:42:93:3e:cc:dd:c2:
                    1e:e7:7a:07:a2:c7:a6:40:17:71:cd:ab:bf:fc:61:
                    3f:4e:9e:27:9a:3d:b6:b2:a7:1d:da:4c:19:45:01:
                    83:d1:7d:a0:6d:78:0e:5e:d1:70:da:22:a0:82:66:
                    01:3a:13:2f:92:bf:0d:14:ec:54:29:0c:23:cd:41:
                    eb:0c:39:ad:22:36:32:4b:94:7e:fe:94:18:e4:c0:
                    30:22:8f:84:db:38:15:a6:17:f1:a8:bc:5f:73:87:
                    80:55:31:8c:23:1e:25:b7:8b:c8:72:59:6f:43:f1:
                    f9:e5:68:1d:14:7b:de:b8:74:6b:67:3d:66:d2:8a:
                    8f:23:65:80:e5:a0:8e:03:57:30:c4:0e:b1:b6:20:
                    3c:5b:da:0d:e0:c7:25:cd:8c:2f:61:57:00:b4:86:
                    aa:b3:e9:d9:66:21:ef:83:1d:9f:82:e8:da:0f:ce:
                    52:f4:07:62:4d:2d:33:25:6a:66:02:60:d1:d9:ca:
                    63:74:d8:a9:5e:57:0b:cb:4a:a3:c1:be:03:9b:bc:
                    07:a2:45:0e:44:c5:76:db:90:6d:ec:49:d9:12:3c:
                    73:bc:bb:a6:65:d7:5d:4a:6c:8c:22:46:28:02:0e:
                    f2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:12:DE:F6:74:72:88:02:71:1B:2C:B7:71:3E:06:10:FF:BD:C8:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f0ecc1c5-0895-3510-aeca-ef4c9d4a6981.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:d6:5a:8c:1d:d6:e9:8a:4c:bf:af:a9:80:04:8f:66:12:bc:
         18:31:20:47:36:11:c3:3a:0e:85:f1:13:d9:01:4b:4f:55:b3:
         45:ad:d2:18:d7:04:9b:61:38:f6:e7:98:97:96:d2:2f:d4:14:
         54:0e:91:13:f1:26:01:4e:d5:df:f1:0c:e0:fd:38:c2:3b:4a:
         45:80:41:6f:ac:6f:d1:04:b2:fb:54:a9:bb:fc:c6:ea:e2:68:
         56:44:07:be:27:c7:1c:d4:3b:48:c1:fa:9c:fc:38:51:7f:df:
         cd:15:13:45:e6:c3:71:47:1d:02:74:a7:88:17:7b:27:7d:93:
         fd:8f:48:fc:73:8d:d1:f4:2c:94:2d:a8:d1:53:07:c4:e0:14:
         11:8e:ac:e7:3a:03:96:39:45:45:d6:90:95:6c:05:40:26:0c:
         a2:28:49:9d:25:cf:08:49:40:4f:67:6c:3e:68:c5:8b:25:c1:
         7c:73:9a:0b:e8:1d:74:1b:24:31:94:3b:fd:08:33:44:60:f5:
         35:a5:9e:5a:26:e7:e1:07:ef:be:45:f2:b6:45:2c:57:60:87:
         41:75:d4:9c:73:65:71:69:94:5d:69:72:6c:61:6a:df:2d:9b:
         4a:72:c4:1e:50:1c:f1:51:c9:a3:e9:84:c4:c5:b7:f5:33:56:
         73:6f:4b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:41:03 2026 by rpki-client