Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5998c0c3-5276-3fcc-b201-93639fada4c8.roa
File:                     5998c0c3-5276-3fcc-b201-93639fada4c8.roa (raw, json)
Hash identifier:          5jD2K7YdTrJou/fBd6i598n58B3tyELwWSQCY/Lrrcg=
Subject key identifier:   C9:A5:8D:AB:26:4E:E0:E7:76:5F:CA:90:F0:63:E0:4B:E5:E1:CF:6C
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584DCCD70ED130A9C686F9B21D80
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5998c0c3-5276-3fcc-b201-93639fada4c8.roa
Signing time:             Mon 11 May 2026 16:59:48 +0000
ROA not before:           Mon 11 May 2026 16:59:48 +0000
ROA not after:            Sun 09 Aug 2026 16:59:48 +0000
asID:                     46011
IP address blocks:        107.148.6.0/24 maxlen: 24
                          107.148.200.0/24 maxlen: 24
                          107.149.98.0/24 maxlen: 24
                          107.149.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:d7:0e:d1:30:a9:c6:86:f9:b2:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May 11 16:59:48 2026 GMT
            Not After : Aug  9 16:59:48 2026 GMT
        Subject: CN=3343e731-69de-40c2-b3d1-d58dfd77be20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:81:75:cb:4e:ed:7d:f9:23:d9:99:fa:81:02:
                    18:24:4c:7f:f4:1a:5c:11:d9:c4:12:87:a3:88:a0:
                    85:64:75:fc:b5:d6:af:15:44:d1:df:e2:bc:8a:cc:
                    0e:61:0c:2b:15:be:75:c4:af:54:55:c4:01:48:fa:
                    73:46:e1:33:17:d7:b6:06:8d:f6:af:79:3b:0c:be:
                    3a:4c:df:57:ec:d5:de:25:b7:44:67:3a:11:22:8c:
                    8a:df:66:38:eb:7f:a4:06:51:6a:73:86:38:9e:ff:
                    ee:ff:57:61:f7:ca:2c:33:cb:76:c1:01:a8:7f:b2:
                    80:fc:3c:83:27:5f:ee:92:57:72:51:cb:b8:fa:40:
                    cc:4b:08:1d:b3:0d:bb:6e:2a:a3:b5:81:41:c1:30:
                    fe:87:e9:73:37:53:be:5b:6e:f7:f6:05:39:48:a5:
                    ff:82:71:47:02:d6:7c:2a:79:a3:2f:f0:90:04:ef:
                    17:f2:1d:bf:ac:e6:40:0e:39:31:34:7c:28:7f:79:
                    e4:38:48:6d:73:c7:c5:d4:f4:1b:44:73:c0:6b:17:
                    b5:23:0e:12:53:99:e4:90:3a:be:b3:24:80:9a:ed:
                    96:8b:f0:76:63:3d:8d:c8:7c:19:6d:66:1d:04:64:
                    cf:44:79:72:4d:63:ca:6f:bc:df:42:7d:e2:27:95:
                    55:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A5:8D:AB:26:4E:E0:E7:76:5F:CA:90:F0:63:E0:4B:E5:E1:CF:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5998c0c3-5276-3fcc-b201-93639fada4c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.6.0/24
                  107.148.200.0/24
                  107.149.98.0/24
                  107.149.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:52:aa:f4:56:89:1d:16:22:ce:4c:20:d1:6b:94:55:b4:d9:
         a8:63:84:ad:a6:7a:4c:48:24:b8:f9:22:77:8f:e9:f0:55:e7:
         5a:8c:63:4b:ac:cd:42:3f:a5:70:10:9c:7a:59:14:31:cf:3e:
         27:17:b6:bc:ef:2a:23:23:7f:0b:c3:de:6e:a8:f9:c7:07:e6:
         da:e6:f3:7b:27:3b:0c:d8:88:de:4d:bb:7d:be:79:2e:61:e5:
         32:a9:b3:77:20:f7:64:f3:73:28:0a:11:b0:e2:2d:9f:d7:2b:
         2b:3c:b3:a3:f9:7a:82:fe:b5:b2:eb:56:1b:10:0a:6a:52:7d:
         84:5d:a0:f4:e1:f1:c1:df:8a:5b:ad:9e:9e:75:03:81:b4:0d:
         d0:7d:e4:c6:8c:82:49:a5:30:70:e4:54:22:5c:c6:59:fd:9c:
         61:ec:af:95:d1:1b:22:7b:89:51:f2:db:a6:df:20:38:69:52:
         c3:8c:a0:c2:43:6c:dc:1c:17:11:14:39:cb:9f:d8:dd:e6:23:
         d0:81:1e:9c:97:12:3c:84:6d:eb:0b:10:86:ae:e9:ac:1f:b7:
         7a:74:66:4d:15:96:09:77:64:a2:9c:67:fb:15:7d:6a:1c:22:
         ec:64:27:97:cf:bb:c1:9c:c0:f9:a1:6c:eb:4a:9b:a8:dc:00:
         60:bf:be:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:51:57 2026 by rpki-client