Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f94831f0-f54f-3ddd-9eaa-e0c16148b69c.roa
File:                     f94831f0-f54f-3ddd-9eaa-e0c16148b69c.roa (raw, json)
Hash identifier:          zrs60OV3nOU4AgN811L/cy3nHV65WV59rlGigQIwUwY=
Subject key identifier:   42:28:9E:03:68:69:80:00:61:A6:EF:5B:60:53:2A:44:91:0D:79:C7
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F593D07FA98328DD9C36C4E00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f94831f0-f54f-3ddd-9eaa-e0c16148b69c.roa
Signing time:             Wed 30 Sep 2026 16:45:22 +0000
ROA not before:           Wed 30 Sep 2026 16:45:22 +0000
ROA not after:            Tue 29 Dec 2026 17:45:22 +0000
asID:                     62904
IP address blocks:        107.158.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:59:3d:07:fa:98:32:8d:d9:c3:6c:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 30 16:45:22 2026 GMT
            Not After : Dec 29 17:45:22 2026 GMT
        Subject: CN=0a6b0a1f-19b7-4d91-80ee-f0b561437b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:17:0e:b9:dd:a0:41:5b:77:0f:f3:12:d6:76:
                    e8:61:26:19:a4:2b:0b:7e:4b:48:dc:56:c5:04:ea:
                    23:5c:86:f8:ff:e2:2f:2b:51:b9:1d:a3:3e:6c:0d:
                    96:07:e9:bb:b9:62:89:bd:f6:8d:f8:4d:ff:72:00:
                    59:a8:a8:47:83:b6:2e:ba:10:58:33:7b:ea:7e:47:
                    88:49:ec:7f:33:91:23:2b:46:92:e9:2b:48:56:db:
                    6d:39:32:b1:4f:59:0d:4f:4e:38:07:b7:e0:9d:2a:
                    cf:4e:57:95:5d:d6:7b:b7:56:4f:33:f2:75:10:84:
                    3d:73:5a:94:65:15:0b:ee:9a:f8:c7:1a:b6:a5:95:
                    0e:d4:fb:67:b4:c0:23:81:dc:3f:d4:86:e1:20:f4:
                    87:99:3f:a9:b7:3b:16:59:5a:bf:da:98:0b:78:d1:
                    4c:69:3e:45:09:78:3c:21:68:0a:94:05:89:3f:4a:
                    e4:d5:cf:0c:aa:e8:a3:96:58:df:21:6d:0f:ed:8f:
                    09:69:67:41:d1:9e:77:76:66:60:11:58:d6:84:a5:
                    08:93:bd:c5:59:c8:0d:f0:be:53:b9:9c:92:e1:36:
                    e9:a9:b6:52:49:b1:1a:cc:27:4d:54:67:60:ba:9e:
                    58:e7:16:7d:0d:b4:0b:f3:fe:d0:65:db:49:5a:7c:
                    56:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:28:9E:03:68:69:80:00:61:A6:EF:5B:60:53:2A:44:91:0D:79:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f94831f0-f54f-3ddd-9eaa-e0c16148b69c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:5e:80:c4:63:a2:02:6b:59:8a:00:02:9d:c4:90:b1:c9:a9:
         10:b5:99:74:a0:fc:aa:38:5b:37:e5:5e:2c:f1:e2:9b:98:e6:
         7f:17:78:09:d7:49:d2:85:d9:e9:91:97:66:79:44:63:13:6a:
         4f:52:82:4e:19:d1:11:b4:05:f6:57:68:0d:d2:b7:40:73:aa:
         be:fe:e5:51:fa:97:83:24:46:71:3d:a2:c7:7a:60:68:f9:0d:
         ff:53:8c:8a:1c:bf:29:a0:f5:b2:a1:09:ae:e9:e1:f6:94:2d:
         6e:31:48:34:6e:78:0c:90:1a:5c:08:aa:80:73:27:0e:d9:32:
         bd:b4:9d:b8:38:56:60:27:48:6d:9a:3f:86:25:a6:7f:5f:51:
         05:fa:ee:50:77:08:1b:ed:29:b4:ce:0d:40:80:96:ec:90:d1:
         2e:ef:e6:2e:29:aa:a2:e4:a8:93:47:38:1d:66:1e:16:50:68:
         4c:09:e9:78:f1:db:bd:94:49:42:4a:e5:01:fd:06:c7:8d:99:
         66:1b:d9:87:59:ff:cb:ec:82:0f:d1:a0:db:8c:f0:2d:76:cf:
         ed:93:39:5a:25:dc:e8:45:32:51:92:a7:75:81:55:34:3d:0f:
         1f:65:60:51:27:e8:e8:b1:69:ed:9b:cd:6d:0e:0b:3e:bd:39:
         2a:b4:81:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:51:22 2026 by rpki-client