Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1e10ab1f-e9f7-348f-abca-72723668fea8.roa
File:                     1e10ab1f-e9f7-348f-abca-72723668fea8.roa (raw, json)
Hash identifier:          GbS1BcE8C2+wD7KQDMTOdjkwfHUmNf8z8J9RI6MP1ZA=
Subject key identifier:   EA:F1:AA:B8:96:28:0A:2B:2F:53:26:B0:A4:AC:66:05:31:79:10:19
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584EA614C0DCB6D2B8DA557D8500
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1e10ab1f-e9f7-348f-abca-72723668fea8.roa
Signing time:             Tue 28 Jul 2026 12:34:31 +0000
ROA not before:           Tue 28 Jul 2026 12:34:31 +0000
ROA not after:            Mon 26 Oct 2026 12:34:31 +0000
asID:                     219174
IP address blocks:        107.158.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a6:14:c0:dc:b6:d2:b8:da:55:7d:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 28 12:34:31 2026 GMT
            Not After : Oct 26 12:34:31 2026 GMT
        Subject: CN=56aff1b4-70c1-49d7-8b6b-c2a2fa3f8c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:61:27:3b:e4:9c:6c:de:e0:78:f2:7d:37:9e:
                    08:20:ef:4a:d9:5b:b2:97:03:d8:e6:26:10:cc:65:
                    76:10:54:31:49:03:9e:97:39:e0:c5:bf:89:90:03:
                    f6:c6:0a:e3:56:bb:a8:31:c8:ac:98:c9:90:ac:27:
                    2d:62:c8:2d:b7:59:59:ca:58:39:be:a9:b5:43:6c:
                    62:83:aa:d6:9a:10:4f:53:39:7f:53:0b:48:e5:22:
                    60:fc:c0:48:ba:fe:ed:1e:18:5a:4f:e9:87:ca:9f:
                    02:e2:4b:80:17:23:53:6e:14:31:d1:49:dd:74:e2:
                    24:bb:b4:69:d3:f8:24:c3:6d:e3:63:cd:30:d6:c0:
                    60:cb:a5:ac:89:45:2b:60:41:24:e4:80:57:9d:96:
                    26:74:8e:aa:25:8e:17:ce:64:5a:44:55:c4:0a:93:
                    8c:4e:4f:a8:82:c3:6f:9b:36:55:3c:e6:c8:39:29:
                    8c:6f:20:93:28:bd:69:7d:d3:eb:48:7e:a9:01:bc:
                    5b:b7:45:8d:18:9e:42:d9:0d:e7:9f:52:02:e8:d1:
                    7d:a7:ed:55:16:18:62:45:07:a4:eb:32:8d:bb:a7:
                    0d:95:c1:38:88:66:f3:d4:7c:6d:90:59:37:93:6d:
                    cc:89:eb:35:a7:80:c2:8b:88:ca:51:7d:7c:a7:1d:
                    1f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F1:AA:B8:96:28:0A:2B:2F:53:26:B0:A4:AC:66:05:31:79:10:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1e10ab1f-e9f7-348f-abca-72723668fea8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:f7:2a:e0:8d:5e:a4:dc:6e:d7:ed:4e:b4:67:98:6a:0b:71:
         72:ef:de:95:b4:fe:50:32:6a:49:8d:e0:0a:3b:91:8e:e8:0f:
         b0:21:cf:d6:70:26:f6:30:04:a2:2d:a3:7e:f4:a5:b8:4c:a5:
         f1:d5:6c:84:6e:ac:b3:81:ca:a8:f1:e8:61:af:ad:7d:9e:65:
         ee:55:f5:f9:c7:dc:c2:c6:6c:ae:be:56:47:3d:15:a1:82:b2:
         b1:8a:74:24:0a:ed:31:8d:9f:20:cd:69:de:83:ac:ba:20:72:
         22:3e:6c:a7:88:61:75:76:26:66:42:47:44:97:04:5b:90:13:
         00:19:16:09:26:e9:ae:b6:1c:87:fc:84:91:e6:09:b8:2d:39:
         2d:7c:ff:ec:85:d1:98:9e:49:0a:aa:54:9b:f9:d5:c8:28:af:
         dd:a4:df:9b:a4:da:2e:60:d5:7c:b9:92:7f:a9:56:23:41:7b:
         e7:b8:ce:3f:49:b9:5e:f6:c5:5b:a7:7d:9c:24:8a:7f:d6:73:
         66:c8:51:fd:9c:e5:5a:7e:20:b4:3e:57:3b:97:f7:68:3e:54:
         90:19:be:f9:a1:a8:82:29:9f:82:94:f3:ee:89:85:a9:f4:6c:
         4e:ec:cf:e5:c0:53:c1:11:d3:37:31:25:d1:c4:0f:44:0d:7b:
         35:88:1d:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6mFMDcttK42lV9hQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDcyODEyMzQzMVoXDTI2MTAyNjEyMzQzMVowLzEtMCsGA1UEAxMk
NTZhZmYxYjQtNzBjMS00OWQ3LThiNmItYzJhMmZhM2Y4YzgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9mEnO+ScbN7gePJ9N54IIO9K2VuylwPY5iYQ
zGV2EFQxSQOelzngxb+JkAP2xgrjVruoMcismMmQrCctYsgtt1lZylg5vqm1Q2xi
g6rWmhBPUzl/UwtI5SJg/MBIuv7tHhhaT+mHyp8C4kuAFyNTbhQx0UnddOIku7Rp
0/gkw23jY80w1sBgy6WsiUUrYEEk5IBXnZYmdI6qJY4XzmRaRFXECpOMTk+ogsNv
mzZVPObIOSmMbyCTKL1pfdPrSH6pAbxbt0WNGJ5C2Q3nn1IC6NF9p+1VFhhiRQek
6zKNu6cNlcE4iGbz1HxtkFk3k23Mies1p4DCi4jKUX18px0f0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOrxqriWKAorL1MmsKSsZgUxeRAZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMWUxMGFiMWYtZTlmNy0z
NDhmLWFiY2EtNzI3MjM2NjhmZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa55hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI33KuCNXqTcbtftTrRnmGoLcXLv3pW0/lAyakmN4Ao7kY7oD7Ahz9Zw
JvYwBKIto370pbhMpfHVbIRurLOByqjx6GGvrX2eZe5V9fnH3MLGbK6+Vkc9FaGC
srGKdCQK7TGNnyDNad6DrLogciI+bKeIYXV2JmZCR0SXBFuQEwAZFgkm6a62HIf8
hJHmCbgtOS18/+yF0ZieSQqqVJv51cgor92k35uk2i5g1Xy5kn+pViNBe+e4zj9J
uV72xVunfZwkin/Wc2bIUf2c5Vp+ILQ+VzuX92g+VJAZvvmhqIIpn4KU8+6Jhan0
bE7sz+XAU8ER0zcxJdHED0QNezWIHTo=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:45:03 2026 by rpki-client