Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c80a9781-dbeb-3685-b508-53d0ebba4764.roa
File:                     c80a9781-dbeb-3685-b508-53d0ebba4764.roa (raw, json)
Hash identifier:          NK1AaPk4COlnkgW3BpgOP8NvzhXrxuB1WUuPfn7tjkw=
Subject key identifier:   D4:6C:A2:D7:00:A2:71:8A:4F:F3:21:5B:59:58:5F:02:51:AA:6D:51
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584CB981C085D6EA7C36E858FDC0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c80a9781-dbeb-3685-b508-53d0ebba4764.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     62904
IP address blocks:        107.158.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:c0:85:d6:ea:7c:36:e8:58:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=a1f10d88-dc4d-4ae7-b044-33b27514cbca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:45:d5:ee:6e:44:c4:f9:ca:8c:5d:00:92:8b:
                    5d:b7:2c:5e:d2:c9:75:3e:cf:9a:eb:13:06:ba:d9:
                    3b:c2:8f:37:83:7c:a1:8c:4f:dc:22:ca:13:38:e7:
                    f7:ae:3e:fb:6d:b9:5f:24:8d:aa:1b:0a:1b:3f:e5:
                    22:81:f0:76:c8:81:c6:2f:bb:64:c9:8c:c9:72:4f:
                    9b:67:53:2e:1f:05:ba:5e:5f:31:ba:ae:d2:34:01:
                    f8:50:1b:90:32:38:43:59:47:26:9d:15:41:f5:dd:
                    67:9c:12:9f:80:68:c7:85:9f:a0:99:7e:99:6d:ac:
                    60:50:48:3b:3f:c5:7a:37:79:92:80:e4:75:a6:a2:
                    18:4c:97:f4:fd:38:cb:07:9f:a8:91:b7:b7:76:fc:
                    8a:bb:5d:de:3e:dd:98:a4:f6:09:62:93:1d:18:10:
                    3a:bb:6a:b1:f8:51:aa:55:86:85:14:2b:99:a2:4a:
                    3c:f4:54:e6:2f:fe:4d:51:e9:5f:56:7d:ef:82:ad:
                    cf:97:1b:70:3b:29:d6:7e:66:49:2b:28:15:35:5b:
                    e8:61:44:3e:9f:1d:b8:4f:ec:4c:3c:14:75:cf:ef:
                    a9:fd:1b:92:63:4a:77:8c:2a:18:6f:26:3a:2f:36:
                    ef:6d:83:89:f3:f0:f2:cf:29:15:a0:e8:7d:a0:89:
                    3c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6C:A2:D7:00:A2:71:8A:4F:F3:21:5B:59:58:5F:02:51:AA:6D:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c80a9781-dbeb-3685-b508-53d0ebba4764.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ad:4f:0a:eb:11:38:32:40:23:ed:d1:0a:46:84:5b:f1:86:
         32:99:91:af:1c:9a:43:57:01:21:c9:7c:d1:54:28:53:55:b5:
         60:73:64:55:a1:c1:fd:ae:75:aa:24:3a:b3:37:d6:79:5f:9f:
         00:39:27:4e:fc:fd:06:5d:0a:9d:50:21:59:98:f3:07:e5:66:
         1e:2f:a4:83:fa:25:b1:42:55:91:36:8a:3a:8b:14:91:d5:d1:
         78:e5:ad:a4:74:ea:33:cc:17:b6:aa:63:46:cd:46:f3:88:fd:
         7f:2d:4e:1d:4a:b2:94:58:2f:9f:65:e3:56:69:5a:2d:60:57:
         08:26:35:ab:00:34:72:fe:15:c9:cb:95:a9:52:bb:7b:4e:c5:
         ed:73:16:a5:e7:79:1e:f4:2f:65:d5:23:d5:b4:d3:0a:5d:10:
         09:29:41:96:56:b3:4f:80:30:c2:56:ce:0d:39:26:01:03:c9:
         36:75:53:74:18:f4:ef:2c:dd:c2:ae:e9:bb:96:9f:e0:89:ab:
         42:f2:ea:8a:de:e4:9f:17:30:3c:f0:db:2a:01:eb:06:10:a2:
         cd:75:1a:56:85:45:b7:aa:59:c8:6a:3f:77:ec:aa:93:7c:d1:
         a3:6b:f8:5d:67:ec:4d:c9:28:30:97:0e:65:ef:a3:a0:28:46:
         4a:44:45:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gcCF1up8NuhY/cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk
YTFmMTBkODgtZGM0ZC00YWU3LWIwNDQtMzNiMjc1MTRjYmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EXV7m5ExPnKjF0Akotdtyxe0sl1Ps+a6xMG
utk7wo83g3yhjE/cIsoTOOf3rj77bblfJI2qGwobP+UigfB2yIHGL7tkyYzJck+b
Z1MuHwW6Xl8xuq7SNAH4UBuQMjhDWUcmnRVB9d1nnBKfgGjHhZ+gmX6ZbaxgUEg7
P8V6N3mSgOR1pqIYTJf0/TjLB5+okbe3dvyKu13ePt2YpPYJYpMdGBA6u2qx+FGq
VYaFFCuZoko89FTmL/5NUelfVn3vgq3PlxtwOynWfmZJKygVNVvoYUQ+nx24T+xM
PBR1z++p/RuSY0p3jCoYbyY6LzbvbYOJ8/DyzykVoOh9oIk87QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNRsotcAonGKT/MhW1lYXwJRqm1RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYzgwYTk3ODEtZGJlYi0z
Njg1LWI1MDgtNTNkMGViYmE0NzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa540MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADOtTwrrETgyQCPt0QpGhFvxhjKZka8cmkNXASHJfNFUKFNVtWBzZFWh
wf2udaokOrM31nlfnwA5J078/QZdCp1QIVmY8wflZh4vpIP6JbFCVZE2ijqLFJHV
0XjlraR06jPMF7aqY0bNRvOI/X8tTh1KspRYL59l41ZpWi1gVwgmNasANHL+FcnL
lalSu3tOxe1zFqXneR70L2XVI9W00wpdEAkpQZZWs0+AMMJWzg05JgEDyTZ1U3QY
9O8s3cKu6buWn+CJq0Ly6ore5J8XMDzw2yoB6wYQos11GlaFRbeqWchqP3fsqpN8
0aNr+F1n7E3JKDCXDmXvo6AoRkpERWA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:01 2026 by rpki-client