Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/94e0c648-9884-3f4f-885c-89756ae4fb35.roa
File:                     94e0c648-9884-3f4f-885c-89756ae4fb35.roa (raw, json)
Hash identifier:          wcGNQ+NGXTsFK9jm2rqD/36ORHb0ItsM4MLfWoRBp5A=
Subject key identifier:   2F:15:6C:71:9D:33:DF:91:1A:8A:F7:E1:23:0E:99:D5:D0:18:19:61
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F4001E4884B5A3CD3D517B580
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/94e0c648-9884-3f4f-885c-89756ae4fb35.roa
Signing time:             Mon 21 Sep 2026 15:51:00 +0000
ROA not before:           Mon 21 Sep 2026 15:51:00 +0000
ROA not after:            Sun 20 Dec 2026 16:51:00 +0000
asID:                     2914
IP address blocks:        107.158.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:40:01:e4:88:4b:5a:3c:d3:d5:17:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 21 15:51:00 2026 GMT
            Not After : Dec 20 16:51:00 2026 GMT
        Subject: CN=16dd8db0-c7fd-48d1-ac8e-0c9554ae66aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0b:5d:f6:97:09:67:3e:9a:12:fa:f4:14:34:
                    fd:31:43:c5:b4:9f:a6:a5:27:6e:0e:b4:6b:ac:3c:
                    36:4f:a7:af:41:74:89:a1:13:eb:6a:f9:06:87:0a:
                    e2:92:81:c2:97:97:18:f4:37:d3:d7:e1:2d:9a:48:
                    dc:e6:83:05:49:f4:af:13:a1:13:05:89:ad:7f:58:
                    d6:9f:b6:91:7c:ae:c8:cf:20:86:6a:87:91:d4:e3:
                    62:bd:43:71:c2:11:ed:06:b0:54:bf:32:d2:02:91:
                    48:8f:0f:b3:f8:5f:ba:81:e8:5b:2c:9e:00:ad:63:
                    8c:72:65:0e:28:7e:e0:34:0d:ff:a8:f7:03:e9:3c:
                    32:ab:7c:5b:88:61:d0:6c:76:70:ff:cb:6c:b0:17:
                    7d:22:7e:33:ab:00:bf:e9:b0:03:bd:b3:8e:22:bd:
                    1a:27:d2:08:94:f5:cf:60:49:6c:cc:6d:39:1e:67:
                    7d:57:67:4e:9f:11:3f:98:4e:39:5f:77:20:4c:e9:
                    03:cd:9d:19:be:34:c8:ef:91:fc:c8:b5:de:55:20:
                    ec:6b:e0:8c:35:6f:d8:b5:98:14:d0:94:e8:01:6c:
                    ac:93:aa:f1:13:b1:20:52:94:5c:f7:72:34:1a:19:
                    91:c7:ef:b7:c2:1e:0b:20:bb:d7:51:68:54:d2:67:
                    30:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:15:6C:71:9D:33:DF:91:1A:8A:F7:E1:23:0E:99:D5:D0:18:19:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/94e0c648-9884-3f4f-885c-89756ae4fb35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:cc:e3:38:35:a1:2e:a0:d5:d9:9d:a5:ab:e7:9c:8c:a6:c5:
         3a:a3:f3:81:9d:57:c4:d1:2e:01:18:04:47:39:c0:19:78:ae:
         17:40:c3:0a:40:3f:3b:8d:78:ed:8e:7f:25:64:e1:2b:a8:20:
         84:42:e7:5e:17:cd:f3:b4:7f:31:f6:f2:6f:99:d9:1d:e4:b3:
         62:68:32:a5:83:4b:4c:05:61:9c:54:aa:26:4f:87:a0:45:6e:
         ec:c2:8d:48:54:f4:46:28:99:0a:d7:50:3e:de:3d:e4:14:95:
         50:11:6a:f2:8a:ae:e4:94:0b:3e:90:c9:9e:c8:df:2f:e3:d7:
         77:08:5d:15:eb:6f:1e:05:54:4d:77:ff:5b:61:91:8b:81:78:
         67:cf:ba:1b:11:1a:c2:1e:dd:97:07:76:d9:8f:71:c5:1f:be:
         69:87:ec:51:56:6c:4a:fd:91:87:b1:90:be:37:24:cf:36:b3:
         ca:53:01:15:38:3b:aa:d3:a4:7c:29:38:eb:ba:4d:58:2c:5b:
         f5:c2:c3:2d:4e:5b:f2:ca:e7:23:39:1e:dd:62:e7:5a:3e:eb:
         d7:c1:2a:c6:57:de:c2:1d:6b:6b:3e:2e:52:3d:79:be:56:c8:
         04:8b:7f:3d:c7:d3:da:ef:10:cd:f1:6a:ee:68:8b:42:ab:77:
         a8:49:0a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:21:40 2026 by rpki-client