Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6b688d4e-c797-3aac-b0af-921879acc57c.roa
File:                     6b688d4e-c797-3aac-b0af-921879acc57c.roa (raw, json)
Hash identifier:          X/wmhNn9nMf9JLhYuARanUvAPR0RXbuc9S+Z2yvQOe0=
Subject key identifier:   36:32:9B:B7:F1:DF:FE:5D:0C:CE:FB:50:AA:F5:45:FA:D9:76:4E:93
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F4976B08D5CCD7003B8D38430
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6b688d4e-c797-3aac-b0af-921879acc57c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398823
IP address blocks:        107.149.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:b0:8d:5c:cd:70:03:b8:d3:84:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=66aa6994-0409-4f5e-89d4-f0c20ff2c919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e8:fe:dc:8d:50:d2:7b:73:4a:c2:65:f4:fb:
                    cf:0a:e7:58:22:e1:4f:e8:78:09:47:83:60:25:7a:
                    d4:61:74:94:a7:6a:59:97:d7:d3:75:90:b0:4b:7c:
                    28:a2:9e:f2:33:d8:ca:3d:19:fe:53:e6:b7:6f:fc:
                    93:1a:aa:51:5d:f2:65:06:81:44:4c:b6:be:69:b9:
                    16:b1:3a:12:c6:d1:82:9d:c7:33:eb:cc:de:d3:8b:
                    f7:85:15:0a:a7:33:b6:13:c9:5f:ac:78:c9:6e:c9:
                    af:21:74:a8:62:13:6f:94:1d:11:8c:6b:f9:f4:cd:
                    48:1b:d2:73:6a:5d:a9:52:da:50:22:32:2e:17:ab:
                    22:85:85:c0:e5:75:0e:28:e8:77:ba:b3:b9:8c:f0:
                    c8:0b:ef:59:9d:c9:3d:cc:4c:d6:d9:bd:23:10:6d:
                    c2:6d:e3:fd:e2:3a:9a:ea:4c:5e:86:11:5c:79:90:
                    de:c0:6c:0c:82:d2:d0:cd:33:36:49:b9:cf:0b:48:
                    07:79:c0:71:ea:e6:b7:43:85:00:d5:4b:76:94:d8:
                    db:72:19:bf:d1:62:12:94:ed:11:44:96:b4:4c:cb:
                    ad:f4:76:ba:f1:4e:cf:9c:33:28:3f:e8:68:d2:19:
                    e2:87:88:05:17:9b:c0:9e:9a:8b:52:bd:73:01:6a:
                    09:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:32:9B:B7:F1:DF:FE:5D:0C:CE:FB:50:AA:F5:45:FA:D9:76:4E:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6b688d4e-c797-3aac-b0af-921879acc57c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:81:6b:16:a3:84:9e:d6:e5:37:16:e5:ef:3b:eb:f5:f2:62:
         b4:17:d4:68:c9:5d:ba:8d:39:5c:d3:cc:99:fe:ed:58:51:eb:
         d9:06:65:3b:92:81:ca:3e:38:d7:c2:4f:43:0b:d6:c1:53:cd:
         41:50:fd:3b:35:62:fa:81:d2:20:11:34:ab:81:b1:1e:b0:0e:
         9d:cf:e4:e0:7c:f0:e6:9f:fe:f5:a7:d5:50:d4:4e:7f:cd:6c:
         b1:09:0a:d6:87:51:b6:4a:44:27:db:a2:f9:5d:6e:f7:58:9e:
         94:3c:3d:2a:28:2a:d4:da:40:3c:fb:f4:a8:f7:4a:90:88:85:
         4b:63:f3:99:31:0a:30:42:9f:32:f1:1f:f3:89:8b:05:55:6a:
         0b:0a:02:d4:42:d0:64:78:bc:ce:bd:99:08:94:d5:89:1a:fb:
         31:6f:7c:ae:d5:51:6b:6c:d2:37:37:90:f4:74:ce:a5:4b:cb:
         38:42:ca:5e:fe:0a:db:33:da:8d:3e:54:c3:da:12:d5:4e:8e:
         27:1b:0f:20:ec:4e:ef:48:e2:49:37:22:dd:66:2e:40:39:c2:
         f1:82:d3:29:fe:c5:b6:71:bc:e8:7f:22:2c:ec:97:df:e6:1b:
         b4:46:d8:78:62:e8:a6:f7:a2:8c:37:d6:16:07:70:34:cd:30:
         0e:a0:fd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:08:52 2026 by rpki-client