Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57e59a80-25de-3a88-8329-a612aabbf07a.roa
File:                     57e59a80-25de-3a88-8329-a612aabbf07a.roa (raw, json)
Hash identifier:          uYYJteZWR/Nl+oGfPiDSp4xbhVtajFJfjEu1Yz3GCfc=
Subject key identifier:   BD:9E:A2:D3:63:01:92:6D:B4:7B:D6:3E:EC:45:A2:A7:C8:E9:32:12
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F4976B0CAA1182D3802BE5340
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57e59a80-25de-3a88-8329-a612aabbf07a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398478
IP address blocks:        107.149.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:b0:ca:a1:18:2d:38:02:be:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d93f049a-c924-4945-911d-1acd00c069d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bf:cc:67:10:40:9f:3a:ba:de:0b:4c:36:54:
                    3d:62:88:c2:0a:98:a0:41:4b:19:3c:0b:de:79:6c:
                    cc:c6:f1:44:50:e1:1f:e6:8f:0d:29:fc:a5:84:fb:
                    41:43:0e:6a:71:ed:22:de:48:6c:c1:6b:0b:29:ad:
                    43:6e:2c:8e:2a:cd:5a:61:19:a6:61:e5:34:73:92:
                    bb:f9:0d:a9:c6:8c:d4:c5:8e:d7:e2:79:cb:ba:f8:
                    50:0f:1b:e3:b6:48:59:58:91:3e:aa:0a:d4:18:7a:
                    fa:a7:3d:fe:1b:af:9d:ad:14:e6:de:83:45:60:8d:
                    bf:8d:59:e4:54:04:8a:ca:6b:18:f0:c7:32:23:d3:
                    52:ae:6c:bd:81:a2:fb:cd:43:7c:71:a3:88:d0:1f:
                    88:46:c1:0c:49:7f:ec:34:b9:12:3c:a3:c2:b7:dd:
                    b8:5f:dc:60:27:ab:f3:f9:ca:99:f5:37:2d:b3:ac:
                    1b:2c:c1:43:2d:27:18:23:6f:f1:76:bb:36:7c:b4:
                    9b:ea:9f:f8:39:26:d9:51:3d:12:6d:d2:05:08:d0:
                    ac:5c:14:41:8d:cd:28:30:4c:93:61:2c:1a:d9:ac:
                    d6:2a:e1:66:c1:23:77:3a:45:80:e4:6b:6a:05:e9:
                    a2:23:5e:96:0e:c0:b5:2a:07:d6:54:1f:1b:ce:14:
                    ca:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9E:A2:D3:63:01:92:6D:B4:7B:D6:3E:EC:45:A2:A7:C8:E9:32:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57e59a80-25de-3a88-8329-a612aabbf07a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:0c:0f:8e:40:f2:71:69:14:64:19:8e:56:23:f9:e9:e2:cc:
         60:33:ca:02:73:4d:f9:17:94:2b:26:48:85:51:c4:70:70:63:
         8b:e1:63:55:37:75:97:ad:06:71:18:a1:62:82:e9:c0:de:66:
         cd:92:5b:3a:f6:05:49:74:86:7d:21:03:02:67:03:df:89:d8:
         5b:56:50:9b:0b:f3:85:71:49:70:ec:85:1d:e1:7b:91:a6:72:
         b0:9c:fa:e6:69:04:cb:32:50:2d:ed:86:18:22:cf:ca:1f:8d:
         ee:1b:81:c0:ca:f7:4b:8a:7a:09:39:f8:38:57:76:7d:f2:26:
         cf:4f:9c:f4:12:98:c3:80:ae:98:1c:51:95:cc:7f:a1:2e:c7:
         b8:6e:19:78:c8:28:e5:0a:87:45:c2:ac:ff:7a:02:d4:da:87:
         bf:73:5a:2f:f6:ec:18:67:4d:66:ab:49:d6:75:74:e8:3c:a3:
         af:53:ee:06:74:e4:67:9d:57:3c:f8:d8:30:85:56:88:a9:10:
         be:4e:25:0e:e3:45:d7:9c:d9:fb:c6:9b:9c:e6:7b:c0:ce:a4:
         83:a0:a5:f1:69:06:5e:8d:a7:9f:13:77:6f:23:61:f9:82:9a:
         3c:b9:16:2d:b1:1c:9e:ba:d4:c0:05:2a:8b:86:8a:e8:1b:b8:
         90:c6:67:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:04:38 2026 by rpki-client