Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/95b2faab-396e-3f35-bbe7-ec5b88c751c7.roa
File:                     95b2faab-396e-3f35-bbe7-ec5b88c751c7.roa (raw, json)
Hash identifier:          gb14CX9haHQocUqrh71zZKdhTkyfhMNKFH4KpFbuc6A=
Subject key identifier:   D1:B9:09:71:F8:7B:A7:EF:2B:FF:DC:D8:24:EF:F9:F6:D2:A2:D0:0A
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584CF5B4868AC43828466CEEAE20
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/95b2faab-396e-3f35-bbe7-ec5b88c751c7.roa
Signing time:             Mon 23 Feb 2026 15:31:25 +0000
ROA not before:           Mon 23 Feb 2026 15:31:25 +0000
ROA not after:            Sun 24 May 2026 14:31:25 +0000
asID:                     5650
IP address blocks:        107.158.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:b4:86:8a:c4:38:28:46:6c:ee:ae:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Feb 23 15:31:25 2026 GMT
            Not After : May 24 14:31:25 2026 GMT
        Subject: CN=28a3cfc5-9cbe-4736-8fb9-87454ec80e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:40:43:d2:0b:b0:dd:28:fb:ff:63:a5:8b:01:
                    e8:bb:69:2a:4e:ea:68:63:8c:0a:20:0d:31:70:98:
                    37:c7:13:81:35:09:19:6d:dd:25:7d:e4:52:0e:b4:
                    74:16:76:3f:98:c1:85:07:37:64:b0:76:d5:7c:1b:
                    19:9f:ac:f2:6b:ca:d1:2c:f3:36:fb:3e:10:63:bd:
                    ba:87:5c:16:20:f5:f2:a2:81:5d:31:7d:f8:0a:a4:
                    15:e4:7a:41:6f:06:a0:ed:1a:2b:91:5a:58:99:47:
                    d3:a2:08:64:03:05:f0:c5:66:8c:8e:db:48:20:11:
                    dc:01:cf:da:14:36:a2:23:20:35:ee:ae:23:3d:22:
                    9f:57:23:e1:ab:1b:78:b3:88:b1:38:1e:dd:ee:0d:
                    ed:80:8b:29:ea:05:59:39:9f:7e:06:18:25:05:88:
                    d8:a1:9c:5a:d3:73:f9:ef:c0:70:ef:10:46:b0:26:
                    88:ec:6a:73:39:d7:04:a3:35:93:8b:f0:e7:8a:ff:
                    6a:d3:d0:5b:ce:c6:7f:be:d6:41:bc:a2:45:62:1f:
                    37:3d:2c:54:3b:00:be:9c:13:72:57:6d:47:2f:9b:
                    c9:05:f3:43:27:a3:69:e9:d5:16:c4:c3:4f:a8:7e:
                    27:13:ea:a3:5d:9d:6f:3b:d5:a6:3b:2f:0f:be:cb:
                    75:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B9:09:71:F8:7B:A7:EF:2B:FF:DC:D8:24:EF:F9:F6:D2:A2:D0:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/95b2faab-396e-3f35-bbe7-ec5b88c751c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:b4:9b:c1:5a:93:ce:a6:ed:be:c3:89:66:14:30:0a:45:0b:
         f1:dc:87:d3:6e:26:08:8b:3b:08:88:f6:47:70:6b:33:3c:25:
         2b:32:86:04:87:56:52:df:2c:bc:77:07:75:2e:c9:af:fe:a5:
         ec:49:54:41:bc:91:a9:84:64:c0:2c:ba:58:f7:85:bf:ca:60:
         3b:b4:45:de:9c:9c:8b:ec:82:fb:68:db:e0:68:7e:b7:52:98:
         bc:6b:dd:75:9c:b8:25:3d:4d:d6:d2:48:47:28:26:2e:f2:54:
         d5:e6:b8:38:6c:96:40:be:92:ab:75:b3:bc:dd:a7:bc:68:85:
         11:45:97:17:bd:9e:ee:e1:6a:12:06:42:a1:7f:7f:fa:c2:ed:
         dd:5b:ed:76:b4:bf:6e:ab:b2:e1:95:09:4e:df:2d:ba:5b:ea:
         f8:07:9e:8c:4f:19:42:8a:1a:fb:ee:17:ad:41:a9:7c:85:2c:
         49:ca:7a:55:f8:0f:4c:7c:35:2a:0c:07:cc:98:2e:fa:32:a9:
         55:ab:bc:a0:e1:0b:37:8f:02:d6:b9:68:84:10:09:51:a1:87:
         46:f5:43:0b:ff:a9:16:94:3c:10:30:ee:bc:ac:a5:48:84:6c:
         a0:ac:c6:aa:fd:b0:90:1f:8f:5e:25:5c:e8:7b:7a:3d:d2:62:
         58:60:33:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:39:53 2026 by rpki-client