Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/07729013-8473-3a4f-b5e8-3c9c3166fedd.roa
File:                     07729013-8473-3a4f-b5e8-3c9c3166fedd.roa (raw, json)
Hash identifier:          rmEgpX9M+FGGrbnEE+crly8CPscS8rvwWVXaMuov1RE=
Subject key identifier:   18:08:04:51:27:76:D7:81:38:BA:CD:1F:57:5D:E7:05:57:B0:B1:FF
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F20E324428775A3EED81E9450
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/07729013-8473-3a4f-b5e8-3c9c3166fedd.roa
Signing time:             Thu 10 Sep 2026 12:18:59 +0000
ROA not before:           Thu 10 Sep 2026 12:18:59 +0000
ROA not after:            Wed 09 Dec 2026 13:18:59 +0000
asID:                     9304
IP address blocks:        108.186.45.0/24 maxlen: 24
                          108.186.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:e3:24:42:87:75:a3:ee:d8:1e:94:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 10 12:18:59 2026 GMT
            Not After : Dec  9 13:18:59 2026 GMT
        Subject: CN=7c849df2-896d-42b7-ad5d-a719a32e29f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:54:ab:fe:11:66:b3:33:4f:3e:70:13:9d:f2:
                    72:33:3c:ca:4c:43:3c:06:1d:72:e6:c7:f5:6e:a3:
                    f4:37:be:8a:78:db:59:1d:1b:42:50:4f:3b:cc:ff:
                    c2:06:4c:85:8d:0a:cf:68:b5:c2:4d:7d:12:89:7e:
                    2c:26:fb:a2:61:42:bc:74:1a:3d:80:96:1c:af:9d:
                    10:d1:b2:a1:23:42:06:0e:cc:2e:d4:d1:a0:23:83:
                    ea:6e:7c:c4:b1:49:01:c5:a2:85:57:d1:e0:fe:7c:
                    20:45:51:1a:fe:e5:02:8f:c6:7a:95:bc:0f:44:a1:
                    96:ce:df:c3:bc:07:ad:34:54:3c:9a:00:5e:20:59:
                    80:fd:52:7a:c1:fe:20:a0:d2:89:5c:92:92:e6:f8:
                    f4:8f:20:3d:35:ae:6e:c4:84:50:d2:a2:3f:b4:93:
                    92:a9:dc:ce:7d:70:62:20:60:c9:a5:2f:2a:3c:14:
                    b0:de:0d:fc:13:1a:c5:16:3d:1a:8d:84:1a:1b:26:
                    60:1d:40:c6:82:fe:9a:43:61:ed:e9:e6:a7:f0:ee:
                    b5:1e:6c:9b:f1:8c:e5:a5:6d:07:8c:d6:69:c7:9f:
                    08:4f:b0:25:78:79:fa:12:80:12:31:68:4a:68:fa:
                    b2:e6:38:82:fc:9e:d1:2a:41:16:a7:c2:4e:77:4c:
                    6b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:08:04:51:27:76:D7:81:38:BA:CD:1F:57:5D:E7:05:57:B0:B1:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/07729013-8473-3a4f-b5e8-3c9c3166fedd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.186.45.0/24
                  108.186.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:7f:3a:74:f0:56:b3:60:ab:e7:ca:a3:64:37:12:30:12:ce:
         40:40:58:a3:4d:86:af:c8:d8:15:64:9f:5f:56:e9:17:f7:dc:
         56:cc:f8:4d:ec:d9:5e:82:1b:90:b6:76:67:00:0f:3d:af:34:
         92:63:a5:e3:bc:05:7a:b0:73:66:d4:bf:af:3e:29:dd:88:93:
         ff:aa:91:40:a8:bf:4d:4d:95:ab:86:a2:b6:6f:a6:be:fb:d7:
         8d:81:28:d8:33:6a:78:6e:09:3a:a1:83:ed:29:df:73:2d:bf:
         e0:6c:81:44:ff:40:dc:79:95:d7:39:d8:d9:63:ba:74:26:2f:
         39:ea:d4:1e:79:ff:24:d6:f0:13:b3:fb:b3:c8:ee:ef:ae:4b:
         8b:0c:03:ea:aa:30:b3:c9:f5:83:03:10:31:53:ff:ef:eb:bd:
         80:1d:d5:16:65:06:fa:39:85:58:df:cd:d4:10:38:7c:e9:b5:
         a0:e3:a2:4a:cd:df:67:f0:d1:43:e3:37:4b:b7:3d:86:fc:f6:
         2d:8f:26:cb:24:44:f3:b3:78:4c:ce:44:c3:9a:a6:55:85:e9:
         f8:9a:e6:f1:4b:03:30:82:5d:44:95:7e:3a:ed:ba:bd:b7:66:
         7a:07:fb:75:22:9d:14:7e:84:90:1d:88:0d:b1:20:1e:50:c6:
         4f:9a:db:cb
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8g4yRCh3Wj7tgelFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDkxMDEyMTg1OVoXDTI2MTIwOTEzMTg1OVowLzEtMCsGA1UEAxMk
N2M4NDlkZjItODk2ZC00MmI3LWFkNWQtYTcxOWEzMmUyOWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVSr/hFmszNPPnATnfJyMzzKTEM8Bh1y5sf1
bqP0N76KeNtZHRtCUE87zP/CBkyFjQrPaLXCTX0SiX4sJvuiYUK8dBo9gJYcr50Q
0bKhI0IGDswu1NGgI4PqbnzEsUkBxaKFV9Hg/nwgRVEa/uUCj8Z6lbwPRKGWzt/D
vAetNFQ8mgBeIFmA/VJ6wf4goNKJXJKS5vj0jyA9Na5uxIRQ0qI/tJOSqdzOfXBi
IGDJpS8qPBSw3g38ExrFFj0ajYQaGyZgHUDGgv6aQ2Ht6ean8O61Hmyb8YzlpW0H
jNZpx58IT7AleHn6EoASMWhKaPqy5jiC/J7RKkEWp8JOd0xr8QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBgIBFEndteBOLrNH1dd5wVXsLH/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMDc3MjkwMTMtODQ3My0z
YTRmLWI1ZTgtM2M5YzMxNjZmZWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbLotAwQA
bLrHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAG5/OnTwVrNgq+fKo2Q3EjASzkBAWKNNhq/I2BVkn19W6Rf3
3FbM+E3s2V6CG5C2dmcADz2vNJJjpeO8BXqwc2bUv68+Kd2Ik/+qkUCov01NlauG
orZvpr77142BKNgzanhuCTqhg+0p33Mtv+BsgUT/QNx5ldc52NljunQmLznq1B55
/yTW8BOz+7PI7u+uS4sMA+qqMLPJ9YMDEDFT/+/rvYAd1RZlBvo5hVjfzdQQOHzp
taDjokrN32fw0UPjN0u3PYb89i2PJsskRPOzeEzORMOaplWF6fia5vFLAzCCXUSV
fjrtur23ZnoH+3UinRR+hJAdiA2xIB5Qxk+a28s=
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:34:44 2026 by rpki-client