Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8c01d77b-004b-3e81-b6c4-c4d33d368011.roa
File:                     8c01d77b-004b-3e81-b6c4-c4d33d368011.roa (raw, json)
Hash identifier:          QLaTiFOlUuPwtB8+mAVRXQ1eGjGzdQ6EnXMsIXdRqjs=
Subject key identifier:   B3:8D:B9:AC:C2:CA:ED:B0:91:4C:D3:A5:19:CD:0C:57:08:BE:1D:9F
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584CB981C096A21559CF53F12FA0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8c01d77b-004b-3e81-b6c4-c4d33d368011.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     62904
IP address blocks:        107.158.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:c0:96:a2:15:59:cf:53:f1:2f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=918c3d9e-bd21-40de-9223-0966a39632b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:99:25:5b:36:46:83:9e:70:78:b1:69:11:
                    bb:e2:af:55:ad:f8:ed:c5:80:56:1a:ca:1a:48:0d:
                    5b:c7:7f:f1:6f:18:15:ff:31:53:51:64:d5:8f:e8:
                    c8:86:fe:1e:f9:48:33:e7:ba:f6:5e:7b:4d:54:f3:
                    58:b6:13:78:7e:a4:b6:8f:e0:33:44:18:bf:f2:02:
                    17:52:16:29:9d:a7:2a:62:98:a7:01:17:84:e6:04:
                    ed:2b:75:4c:80:be:34:ca:d8:50:42:e4:36:20:2b:
                    1b:ab:2c:5f:78:07:9c:39:a4:b6:f7:d3:a4:56:de:
                    8c:d0:4f:69:fd:a3:b2:b4:60:10:5a:42:65:67:eb:
                    ef:65:4c:9e:43:30:8c:c2:d4:ab:fd:03:41:82:a4:
                    94:97:9d:5c:fb:32:ec:3a:29:ab:12:70:a2:8d:a8:
                    0a:3f:17:ef:ac:ea:50:b6:c0:69:2d:7a:43:db:76:
                    d9:a5:55:d5:f5:64:35:8c:1b:c8:e3:45:c0:2b:f0:
                    a1:8e:0e:13:0a:1f:18:fe:bc:5f:2e:1c:b1:98:aa:
                    ff:51:ef:c6:64:0e:d8:6b:7c:ca:de:9b:b7:6a:93:
                    14:d9:a8:8c:2e:a2:88:3b:fc:d9:c3:a5:e8:38:79:
                    f9:88:ec:f1:df:93:87:bb:46:37:b7:80:26:5d:ca:
                    80:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8D:B9:AC:C2:CA:ED:B0:91:4C:D3:A5:19:CD:0C:57:08:BE:1D:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8c01d77b-004b-3e81-b6c4-c4d33d368011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:be:87:10:ef:d1:54:60:4f:e2:2a:c0:b6:d3:67:fb:54:bc:
         d3:e7:60:70:ba:93:64:06:a4:bd:6b:81:9b:0c:98:e8:d3:ac:
         66:bc:d1:14:c3:e4:fa:99:81:5f:35:23:4a:4c:75:cb:6e:82:
         fc:f5:02:fc:c0:27:53:36:11:55:b2:71:d6:3b:81:62:e2:9a:
         bb:08:7b:a7:2d:22:dd:27:70:72:6d:1a:b3:d1:f1:f7:53:4f:
         f8:7c:b7:ce:22:aa:aa:be:af:6e:98:96:ae:0f:32:b1:b7:fc:
         98:41:e6:4c:97:7d:9f:f1:26:6d:08:75:3a:1e:df:ec:73:b8:
         62:05:1e:c3:fd:52:4f:0e:65:10:ac:79:8d:15:e8:ac:b9:e7:
         3c:63:79:ec:a0:cd:65:31:a3:45:5b:79:5e:b3:cd:3d:17:dc:
         55:63:3e:93:63:d2:14:64:a3:98:3b:bc:9e:ce:34:a8:55:8a:
         df:fd:ff:67:95:af:5b:02:47:14:02:a6:d9:b0:ee:b8:84:b3:
         d3:d6:25:a5:34:8e:6c:90:eb:24:d3:b9:43:74:5d:f5:6f:d4:
         a9:34:cf:d7:e2:04:ec:66:cf:8f:68:e6:3b:68:bb:c0:56:60:
         62:ed:c3:ba:3d:ed:f5:70:e9:9c:17:02:5a:07:dd:c9:ad:50:
         49:3d:e9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:10:33 2026 by rpki-client