Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e54b4e08-18ac-3596-bc47-074775b580d9.roa
File:                     e54b4e08-18ac-3596-bc47-074775b580d9.roa (raw, json)
Hash identifier:          uNVLY8wl99w3MeX/nSpBypuxi4zl3BgPHJ4U0vC5nTg=
Subject key identifier:   08:B5:08:50:71:E4:4D:73:F1:1F:19:04:11:7A:3B:FE:C2:C7:D7:1D
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584EF40A1918E45FD248203E0E00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e54b4e08-18ac-3596-bc47-074775b580d9.roa
Signing time:             Tue 25 Aug 2026 10:46:06 +0000
ROA not before:           Tue 25 Aug 2026 10:46:06 +0000
ROA not after:            Mon 23 Nov 2026 11:46:06 +0000
asID:                     33651
IP address blocks:        107.158.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:0a:19:18:e4:5f:d2:48:20:3e:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 25 10:46:06 2026 GMT
            Not After : Nov 23 11:46:06 2026 GMT
        Subject: CN=8f548c04-221e-4696-9994-fe471b290787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:99:92:36:ab:c6:42:1f:f2:58:05:5e:51:14:
                    89:d3:30:33:1c:ad:88:d8:b0:2b:60:53:ce:8e:8b:
                    ef:49:70:4e:0b:70:9c:78:96:b8:29:a9:0f:82:e4:
                    e5:ce:ae:49:dc:5a:af:73:2f:6d:40:16:91:e5:fd:
                    dc:53:42:42:9e:64:5c:68:d7:79:87:38:42:9f:ac:
                    96:e3:c8:f0:b4:af:94:a3:e5:5d:dd:db:f8:63:16:
                    09:11:ea:2d:1b:68:52:ae:ed:3f:16:bc:a2:6b:a7:
                    db:23:20:34:ec:cd:36:60:cc:77:ad:cf:5d:6a:aa:
                    eb:f9:39:88:63:17:09:f3:be:ac:1a:ac:3f:38:e9:
                    7b:1b:3d:81:b2:65:65:33:a6:2f:5a:ac:63:1d:31:
                    c6:93:c9:4c:9f:f7:cf:0b:3f:05:4f:2a:7d:4e:a1:
                    38:31:99:dd:3b:d7:74:53:08:77:2a:de:bf:3d:36:
                    41:20:f4:0b:26:36:fd:44:01:21:3b:9f:ad:60:4a:
                    0a:ba:f4:26:c1:9f:52:82:75:d9:d4:51:52:ae:94:
                    82:bd:7a:90:87:f6:d2:cd:d4:dd:98:66:4c:0b:67:
                    33:80:8b:11:b3:cf:f0:6b:46:ed:18:f3:06:06:6e:
                    29:f3:b2:cf:cc:27:2a:0a:9e:33:89:6c:7b:9f:ed:
                    d3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B5:08:50:71:E4:4D:73:F1:1F:19:04:11:7A:3B:FE:C2:C7:D7:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e54b4e08-18ac-3596-bc47-074775b580d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:8c:b6:ff:46:d0:29:aa:49:92:10:b6:29:a3:49:f8:c3:49:
         8f:55:5a:b2:fd:a4:30:c6:48:31:6e:4e:8e:b3:b7:9e:05:b2:
         5f:65:95:fc:13:f5:d8:1c:f5:08:68:2b:28:b2:49:36:c3:f5:
         69:60:f1:0f:c5:8a:3f:82:71:d5:75:af:03:4e:3b:e1:db:d4:
         c2:d6:7c:8e:a4:34:76:b9:49:14:d6:26:63:d8:4e:4c:7b:bd:
         30:8e:d7:4a:a7:f2:31:93:96:cf:91:5d:85:b6:d9:61:82:02:
         ca:df:ac:09:bd:a6:b8:0b:11:57:ea:4e:7e:04:b4:ff:d3:78:
         b1:1e:ae:90:5d:81:4c:9d:8d:f3:60:0d:96:8e:bd:04:4d:b9:
         04:bd:92:e8:8b:e5:17:fe:2f:87:2e:53:ec:31:99:8d:97:a2:
         d6:88:0b:d7:aa:9d:8f:ee:03:94:ab:a8:15:f1:64:a0:54:f3:
         ed:72:6a:92:b0:b7:7a:a6:c2:ec:c1:d1:0b:3d:97:9e:1d:5f:
         a8:1b:65:33:19:2a:71:fe:a8:66:44:2e:5d:ba:21:34:e3:99:
         79:b3:67:7a:44:13:11:f8:3e:7f:49:18:83:fa:c4:00:7c:e9:
         df:6a:02:b4:a3:57:e7:eb:b7:85:ee:cc:3c:01:94:d8:9f:3f:
         87:5f:f9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 05:59:50 2026 by rpki-client