Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3c28e33c-4477-30d5-891c-2a23219d3d29.roa
File:                     3c28e33c-4477-30d5-891c-2a23219d3d29.roa (raw, json)
Hash identifier:          UIzQBzLP0nfTTe2Cjm4vSIeecn2s+VN9gtZGhFeTDk8=
Subject key identifier:   0D:98:D8:D8:BB:30:13:CD:76:EF:F3:70:21:60:1F:9C:EC:7B:3A:FB
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584E7C2D763BCEDA57CD9F2FD0C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3c28e33c-4477-30d5-891c-2a23219d3d29.roa
Signing time:             Mon 13 Jul 2026 12:20:21 +0000
ROA not before:           Mon 13 Jul 2026 12:20:21 +0000
ROA not after:            Sun 11 Oct 2026 12:20:21 +0000
asID:                     402514
IP address blocks:        108.186.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7c:2d:76:3b:ce:da:57:cd:9f:2f:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jul 13 12:20:21 2026 GMT
            Not After : Oct 11 12:20:21 2026 GMT
        Subject: CN=1ab54dc7-cdce-4a07-bddb-981f88279c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:51:71:85:10:ce:30:db:7b:a8:48:9f:60:15:
                    93:51:5e:2b:cf:d2:d8:eb:b1:1d:1e:66:6f:00:c2:
                    e7:8d:92:ef:06:ca:de:63:54:d6:37:4d:ca:53:cb:
                    98:9e:9c:01:93:30:2b:19:90:df:a8:f9:1d:12:a0:
                    2f:22:56:d8:73:ab:20:0b:b6:5a:81:69:e2:35:7e:
                    b5:2b:6a:6d:fd:d4:6e:e2:12:14:6c:49:84:eb:ae:
                    67:29:1c:1a:83:36:bb:e0:63:e0:ba:f4:d8:64:ff:
                    20:e8:99:cc:bc:7b:e0:a7:93:1b:3f:84:90:e3:48:
                    8b:3a:9c:64:20:e7:df:6e:53:55:d4:60:9f:8a:67:
                    b4:9b:bd:39:57:cb:b6:7b:ee:87:82:fe:45:c9:75:
                    b4:b4:32:55:e0:a6:19:e8:3b:9a:63:0f:76:50:94:
                    02:ca:95:fd:b8:df:82:7f:97:87:0c:1d:55:7a:50:
                    74:93:38:bb:3c:5f:62:ad:83:9f:91:8a:c8:b7:1e:
                    88:b8:e8:d8:4d:70:c3:0a:63:d9:06:33:0d:25:a7:
                    15:2a:f0:c1:30:4f:75:6a:d1:f3:b7:df:36:32:22:
                    8d:73:e8:18:9c:07:3f:f4:80:d8:50:5c:1e:e7:b1:
                    ad:3d:b9:84:fa:49:38:36:a3:d7:59:66:b9:8f:b2:
                    17:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:98:D8:D8:BB:30:13:CD:76:EF:F3:70:21:60:1F:9C:EC:7B:3A:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3c28e33c-4477-30d5-891c-2a23219d3d29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.186.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:53:74:9b:92:16:55:d6:56:c7:45:65:96:7d:a0:3a:3c:7f:
         6e:49:5e:cd:a2:25:81:58:f1:07:a3:40:83:d7:60:35:c2:96:
         28:44:aa:74:87:a3:15:2c:9c:2b:5f:4a:d2:ad:72:5f:eb:67:
         ed:ce:ff:1b:33:d2:16:88:19:06:2c:af:03:3f:e9:92:52:d3:
         0c:d3:bf:a6:72:d1:e5:dc:29:0b:75:f9:6b:0e:c4:2d:1c:0d:
         dd:81:53:66:3f:4d:ee:dd:59:89:06:1d:1b:77:60:9e:a9:6f:
         90:74:8b:9d:1f:24:66:bf:9f:30:ed:43:29:f9:ce:c9:78:44:
         d1:3b:57:08:5a:8c:37:10:a6:6c:be:0f:f9:23:21:fa:1a:cc:
         57:8b:2b:ab:9c:57:35:e9:ee:2f:9e:3a:24:aa:49:f1:ff:01:
         38:5c:7a:55:9e:f8:62:bc:6a:b5:f0:51:5a:c2:37:f7:64:0e:
         d1:06:fa:8b:de:92:bd:27:c3:30:2b:1b:c1:f2:11:f2:2a:23:
         58:b5:c7:98:bd:b8:96:4e:71:ad:d1:d3:d1:2d:50:03:d0:0e:
         db:c2:82:95:db:16:6a:dd:3f:ed:61:79:bf:76:77:7b:85:3d:
         ec:71:c9:ed:a2:db:9a:b8:4b:61:3f:3b:e1:51:ec:0f:34:68:
         dd:76:f6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:40:54 2026 by rpki-client