Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7c536253-c814-35e2-bf82-bf97bfbe568b.roa
File:                     7c536253-c814-35e2-bf82-bf97bfbe568b.roa (raw, json)
Hash identifier:          L69VAKZ6lJP4202p1kYhNxOLjR9tyH3OIf8f8QNZQpU=
Subject key identifier:   2B:81:B8:55:38:11:EB:E0:A7:A5:C9:33:99:85:71:08:FC:0B:0E:2E
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584B1AD1B0C1EC87FB76E8236080
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7c536253-c814-35e2-bf82-bf97bfbe568b.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     9304
IP address blocks:        107.158.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:b0:c1:ec:87:fb:76:e8:23:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=e0c4f476-1a0a-443d-9b08-fd6ad7b74fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b1:2d:5a:19:fb:dc:c7:f0:ee:72:1c:da:a8:
                    d8:e3:3e:e2:98:b4:88:70:5f:94:84:42:51:39:04:
                    49:53:52:1e:2b:ff:1a:2e:e3:69:bf:a9:d4:48:f6:
                    93:25:b8:ab:f1:fd:06:c0:aa:08:5c:a6:82:11:14:
                    4b:fb:a8:28:8c:96:4c:98:d4:05:f7:65:7b:43:a1:
                    d5:fd:53:66:bf:bd:85:f5:21:ca:f6:2b:53:d1:de:
                    46:8c:d9:ed:a4:f6:03:ca:89:05:6f:c8:dd:5e:56:
                    96:f4:a0:b9:5f:47:ab:f0:f3:c3:d0:e7:ed:5b:94:
                    b8:8c:0c:94:7c:f3:0d:79:05:c5:95:fc:0e:a5:0d:
                    32:9a:e6:84:e8:86:60:7c:c6:95:bf:fa:dd:0b:cf:
                    28:9f:54:5b:36:93:de:bd:18:10:ce:5c:c1:22:5d:
                    f9:e1:24:0b:5d:82:dd:ec:73:99:f8:87:0c:63:25:
                    b5:f3:72:90:d2:68:b3:5a:db:48:e9:5a:45:87:eb:
                    bc:7d:a5:10:79:9e:7b:f0:c4:69:c9:b0:36:53:96:
                    c0:01:24:04:66:5b:bf:b2:3e:48:bc:b5:5e:b2:3a:
                    92:f1:91:48:74:00:21:d0:6a:d6:53:39:02:d2:9d:
                    5e:24:5e:51:e3:ee:ac:58:b7:99:01:12:25:03:35:
                    ae:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:81:B8:55:38:11:EB:E0:A7:A5:C9:33:99:85:71:08:FC:0B:0E:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7c536253-c814-35e2-bf82-bf97bfbe568b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b8:f7:70:01:c2:44:6b:97:93:4e:20:35:d3:a5:59:96:05:
         e3:e2:0e:31:7c:45:e0:d6:65:b1:41:08:22:6d:71:48:cc:88:
         1e:ec:dc:42:dc:05:29:78:d2:6b:ed:be:f9:68:ea:e7:48:48:
         d3:e7:2a:1a:b0:ca:eb:81:5f:bf:92:b6:70:77:bd:4e:0d:5e:
         30:25:9d:b3:03:88:9d:ae:17:d5:ad:23:ab:99:24:76:a1:ab:
         f7:23:e1:fe:86:a2:34:cd:18:63:92:3b:67:24:fb:ed:27:e7:
         26:82:49:90:9f:ab:11:63:dc:41:93:2c:69:d7:85:72:70:af:
         e2:65:30:8e:f3:fa:53:59:7c:b5:44:66:eb:ed:3c:3b:eb:72:
         51:25:90:cd:1b:59:18:23:da:81:6f:cb:f1:4c:0a:75:7a:4d:
         6e:64:f0:98:e5:4f:89:42:8c:e0:41:e4:1f:43:eb:52:bc:53:
         b1:c2:38:b0:92:76:a5:57:5b:fc:2f:f4:73:08:a1:e3:9d:2e:
         92:4b:a1:13:e2:62:f7:69:b2:2f:8b:af:c7:2b:e1:b0:37:d2:
         92:fa:f0:1d:9b:78:5f:84:29:dd:e5:fd:66:a8:33:16:dc:b5:
         24:53:53:7b:d7:69:a1:f8:3f:77:79:c0:ce:b3:3b:9b:34:09:
         2e:61:a0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:39:42 2025 by rpki-client