Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1eecf53f-cd46-3c4e-aa64-7121345f1d81.roa
File:                     1eecf53f-cd46-3c4e-aa64-7121345f1d81.roa (raw, json)
Hash identifier:          NrTbA162FU0AhIxFM2gkLSs4VRTet2mbmNT4WWxorEQ=
Subject key identifier:   F6:BB:A7:2E:98:B0:02:84:C3:7D:0C:49:0A:ED:61:41:5F:5F:B7:C0
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E5ADD20BADCD612D8A9F00600
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1eecf53f-cd46-3c4e-aa64-7121345f1d81.roa
Signing time:             Wed 01 Jul 2026 13:56:49 +0000
ROA not before:           Wed 01 Jul 2026 13:56:49 +0000
ROA not after:            Tue 29 Sep 2026 13:56:49 +0000
asID:                     834
IP address blocks:        107.158.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:dd:20:ba:dc:d6:12:d8:a9:f0:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul  1 13:56:49 2026 GMT
            Not After : Sep 29 13:56:49 2026 GMT
        Subject: CN=1e3b30a8-15d2-4fae-8196-4e764896dbb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f8:a0:69:d3:09:0a:3f:ab:97:52:92:c7:ee:
                    ea:bb:0b:18:28:0c:a0:9a:24:ac:f7:00:ef:29:3f:
                    6c:33:c2:ab:1e:00:a2:7d:8d:42:0c:25:93:8b:f0:
                    b2:45:e6:e1:47:bd:60:56:84:64:8f:78:86:b0:7e:
                    30:d6:c4:71:06:db:5b:3e:70:31:0d:32:2a:63:75:
                    5f:8c:d5:ac:d1:eb:38:fa:15:49:91:06:91:9a:6c:
                    a7:95:4a:fd:ff:02:6e:e8:32:f3:56:8d:22:e4:88:
                    3b:f8:93:8d:7b:d6:74:58:5b:55:f0:4a:2a:65:1c:
                    a6:cd:be:97:3b:f0:c3:e6:ff:ba:6f:ff:0b:59:2d:
                    d9:d7:aa:01:b3:01:5f:82:52:71:17:f5:5d:49:f3:
                    f9:78:82:d3:70:eb:f9:e9:4b:00:87:dd:02:c3:c1:
                    b3:57:c5:25:b7:95:75:f2:1c:84:d5:92:cd:c9:41:
                    76:74:30:00:f0:29:17:7c:1e:6a:d7:12:8a:5f:8c:
                    19:21:f7:92:ee:f2:e8:5b:f3:bd:58:5a:e6:b4:c9:
                    c0:77:bb:0d:51:b5:6c:c0:69:40:0e:a1:48:db:c2:
                    4e:74:0b:07:9a:d3:c7:bd:61:a4:90:e1:75:96:f3:
                    b0:51:40:49:31:92:18:ef:49:30:c4:b3:d9:1e:77:
                    27:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BB:A7:2E:98:B0:02:84:C3:7D:0C:49:0A:ED:61:41:5F:5F:B7:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1eecf53f-cd46-3c4e-aa64-7121345f1d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:92:f0:2d:eb:f3:ba:fb:87:11:5b:c2:7a:e4:ec:f0:20:da:
         39:76:c4:70:eb:ad:9a:33:d8:92:a6:ac:f2:c2:b0:4b:7a:ba:
         2d:4c:03:83:ca:f0:82:4c:1d:d9:48:18:e5:97:99:6a:c4:40:
         b0:39:a0:0e:5e:60:ea:62:08:0f:c2:ec:83:91:e6:97:a3:12:
         f4:f6:ec:c2:a2:78:92:cb:ba:64:33:6f:58:f6:a9:6e:19:83:
         18:5f:a0:86:64:37:b7:6c:4f:00:6c:27:1b:60:63:02:86:f0:
         e4:cb:d2:44:f0:eb:ec:a5:a3:ab:62:4c:c2:dd:91:d2:22:9f:
         30:3e:25:47:1b:ee:15:89:1c:c3:ae:32:ed:c4:89:48:6f:f6:
         b1:b5:da:d4:d8:5a:07:9f:fa:79:3b:88:1a:31:a1:f2:a2:a5:
         0d:2f:d9:1c:55:55:00:66:06:aa:4b:b5:f4:54:04:48:0f:08:
         10:7e:db:79:0a:ce:90:11:ba:94:4f:66:a7:03:73:19:17:b5:
         ad:9f:3c:7b:20:49:63:7a:c3:22:06:5e:c5:4d:67:f0:20:61:
         6f:22:3d:c7:b0:8d:15:30:a2:e7:a0:9b:3a:7a:7e:b7:a3:33:
         16:7a:52:39:b6:9d:cc:41:39:73:9c:fb:d5:fa:f3:09:fb:a8:
         8e:80:bf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:24:15 2026 by rpki-client