Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a5c9dad4-799c-36c5-ae6e-3043aa1c2fba.roa
File:                     a5c9dad4-799c-36c5-ae6e-3043aa1c2fba.roa (raw, json)
Hash identifier:          VpufBm2jy41+5WB4xhj7NzBhJKdH3IbVe/wBhf5VNdE=
Subject key identifier:   6B:CC:A1:08:0A:D1:00:59:67:42:B1:89:E8:09:82:DE:82:91:7E:06
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584DFEC84D0F7F914896DFE84100
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a5c9dad4-799c-36c5-ae6e-3043aa1c2fba.roa
Signing time:             Fri 29 May 2026 14:20:29 +0000
ROA not before:           Fri 29 May 2026 14:20:29 +0000
ROA not after:            Thu 27 Aug 2026 14:20:29 +0000
asID:                     834
IP address blocks:        107.158.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fe:c8:4d:0f:7f:91:48:96:df:e8:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: May 29 14:20:29 2026 GMT
            Not After : Aug 27 14:20:29 2026 GMT
        Subject: CN=c33d7dea-9a05-4377-a3fc-7ae8af8455f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ba:65:c3:65:90:78:e3:c6:bd:e0:1c:a1:73:
                    4d:ac:c1:41:46:78:6a:e8:95:3e:60:25:30:bb:15:
                    9c:e0:f2:d6:6d:7a:9e:eb:92:5c:3c:2c:32:0b:99:
                    37:38:d0:01:02:3e:d2:30:8a:f0:79:f6:ce:d4:bc:
                    eb:f7:44:31:71:bd:00:cb:ae:d0:3b:68:59:89:59:
                    e6:0c:df:40:cb:47:33:7a:e5:bb:0f:ed:cc:be:bb:
                    0f:87:e5:5a:8a:a2:c4:3d:e2:43:40:86:df:96:81:
                    6f:5c:8b:bb:0f:7f:f2:52:f0:e5:f4:e1:43:91:07:
                    4c:ee:82:ef:f8:28:5f:89:f9:76:89:b3:a4:71:68:
                    cd:b6:61:34:69:b6:bc:0a:fe:a5:43:6b:d8:6c:5b:
                    31:42:27:fe:7f:6a:3f:8f:82:eb:b5:90:ff:64:7a:
                    bb:6a:63:d3:54:35:a5:83:5d:aa:94:b4:a5:5b:7e:
                    e2:81:f3:67:bc:6d:52:2d:fd:6c:03:82:ac:3b:03:
                    a0:14:4c:bf:12:a1:41:31:e8:cd:92:3c:02:9e:af:
                    01:d1:e3:f0:2f:a9:6c:b9:70:05:3a:2d:d2:9c:4d:
                    63:e6:8a:f6:ec:cd:c2:a9:f6:3d:18:a2:13:da:32:
                    47:dc:3e:dd:ca:53:2a:c0:45:5e:d4:46:21:1f:16:
                    0c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CC:A1:08:0A:D1:00:59:67:42:B1:89:E8:09:82:DE:82:91:7E:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a5c9dad4-799c-36c5-ae6e-3043aa1c2fba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e7:d3:a8:be:32:dc:96:44:0a:b8:37:48:7d:f0:89:25:98:
         3f:c7:98:a8:30:e9:c8:52:cb:86:9c:37:56:29:a0:53:2a:30:
         43:27:e9:e4:5e:27:c5:b7:b8:5f:86:fa:58:ba:a9:92:72:f6:
         19:22:11:24:a7:8b:b9:53:a2:7f:14:eb:ff:48:85:f2:b9:d3:
         56:56:bb:05:d3:c7:e4:88:27:f2:7f:d6:6a:63:11:68:09:30:
         33:6a:7e:a2:41:31:5e:a8:53:2e:ec:27:b2:e9:cc:3e:a5:d3:
         bd:64:55:5b:89:0f:3e:17:bc:c1:40:9f:e1:75:a8:33:40:75:
         0f:fe:dc:ca:c6:28:0b:3e:8b:eb:85:09:d7:ba:b3:d9:52:13:
         5f:8b:dd:bd:bb:08:d5:1c:b4:32:df:8e:90:72:55:0d:15:3c:
         59:b6:de:3f:97:fc:e1:68:bf:40:bc:45:88:18:e1:24:c6:53:
         73:bb:b6:39:3c:72:a3:49:c5:9d:e7:9a:25:69:40:2a:32:16:
         1b:c7:45:c2:4f:ed:f5:56:ff:29:d1:28:b4:bf:33:36:98:a7:
         c3:b4:ac:80:7b:f7:f3:86:2d:a3:4f:5f:a4:4d:16:04:b1:16:
         5e:ee:96:48:6d:ae:fa:2f:b4:e8:06:21:a0:ed:f5:25:b2:b0:
         53:26:ea:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3+yE0Pf5FIlt/oQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDUyOTE0MjAyOVoXDTI2MDgyNzE0MjAyOVowLzEtMCsGA1UEAxMk
YzMzZDdkZWEtOWEwNS00Mzc3LWEzZmMtN2FlOGFmODQ1NWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLplw2WQeOPGveAcoXNNrMFBRnhq6JU+YCUw
uxWc4PLWbXqe65JcPCwyC5k3ONABAj7SMIrwefbO1Lzr90Qxcb0Ay67QO2hZiVnm
DN9Ay0czeuW7D+3MvrsPh+VaiqLEPeJDQIbfloFvXIu7D3/yUvDl9OFDkQdM7oLv
+Chfifl2ibOkcWjNtmE0aba8Cv6lQ2vYbFsxQif+f2o/j4LrtZD/ZHq7amPTVDWl
g12qlLSlW37igfNnvG1SLf1sA4KsOwOgFEy/EqFBMejNkjwCnq8B0ePwL6lsuXAF
Oi3SnE1j5or27M3CqfY9GKIT2jJH3D7dylMqwEVe1EYhHxYMkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGvMoQgK0QBZZ0KxiegJgt6CkX4GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYTVjOWRhZDQtNzk5Yy0z
NmM1LWFlNmUtMzA0M2FhMWMyZmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa55RMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjn06i+MtyWRAq4N0h98IklmD/HmKgw6chSy4acN1YpoFMqMEMn6eRe
J8W3uF+G+li6qZJy9hkiESSni7lTon8U6/9IhfK501ZWuwXTx+SIJ/J/1mpjEWgJ
MDNqfqJBMV6oUy7sJ7LpzD6l071kVVuJDz4XvMFAn+F1qDNAdQ/+3MrGKAs+i+uF
Cde6s9lSE1+L3b27CNUctDLfjpByVQ0VPFm23j+X/OFov0C8RYgY4STGU3O7tjk8
cqNJxZ3nmiVpQCoyFhvHRcJP7fVW/ynRKLS/MzaYp8O0rIB79/OGLaNPX6RNFgSx
Fl7ulkhtrvovtOgGIaDt9SWysFMm6t8=
-----END CERTIFICATE-----
Generated at Fri May 29 17:51:39 2026 by rpki-client