Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/9f0cb292-c0ff-3b27-86e3-1eb37ed775e0.roa
File:                     9f0cb292-c0ff-3b27-86e3-1eb37ed775e0.roa (raw, json)
Hash identifier:          JDUl6mVFxPlY4JwbrCsVii+vLirqyZs8q+6v/UfEaDA=
Subject key identifier:   9F:9A:84:22:AA:2B:36:04:43:3B:F1:EB:7D:E5:FC:60:5A:84:82:10
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584E84B5D6146CC5FE1487CF5900
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/9f0cb292-c0ff-3b27-86e3-1eb37ed775e0.roa
Signing time:             Thu 16 Jul 2026 13:41:36 +0000
ROA not before:           Thu 16 Jul 2026 13:41:36 +0000
ROA not after:            Wed 14 Oct 2026 13:41:36 +0000
asID:                     14618
IP address blocks:        108.186.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:b5:d6:14:6c:c5:fe:14:87:cf:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jul 16 13:41:36 2026 GMT
            Not After : Oct 14 13:41:36 2026 GMT
        Subject: CN=e817d453-7dcb-4286-b50c-0392ae4aa235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:03:38:9a:01:e3:2a:6c:87:fe:e4:c8:0e:
                    2d:ff:94:86:b5:69:cd:54:57:2c:f8:42:75:d9:7b:
                    16:72:d0:74:6b:60:84:a9:38:8a:88:6d:fb:a1:0c:
                    2c:21:91:28:70:68:e9:6a:c2:8f:1c:a6:2e:ac:99:
                    e7:14:41:ed:d4:68:c6:72:18:c4:4b:d8:73:a9:22:
                    ec:bf:12:e7:fd:4e:21:ba:31:15:4f:f9:17:42:8a:
                    22:df:5a:3f:41:9f:57:7a:b3:6f:c2:c2:85:d1:74:
                    44:82:3c:01:e5:7e:12:75:3b:0b:f1:15:38:15:d8:
                    a4:d4:11:5c:38:83:f8:28:e1:c1:60:88:88:c0:52:
                    59:f7:4b:9d:e3:d1:a0:38:ad:27:6e:73:d6:58:52:
                    a8:88:8d:71:63:b5:0d:bd:0b:94:5e:4c:90:fe:f5:
                    e6:4d:5d:b5:d4:31:5b:6f:a4:43:3c:c5:93:63:76:
                    36:98:a7:53:c1:a3:0b:ea:4a:b7:fa:e7:9e:86:3a:
                    db:53:ae:cb:31:0e:11:0c:74:5a:91:dd:e5:1e:a7:
                    7d:0d:c3:cd:ec:26:8d:37:f2:a7:e1:92:3c:99:df:
                    2b:df:d1:03:32:2c:bb:86:8c:1d:1d:0b:98:05:66:
                    46:c1:16:63:64:e0:12:6a:71:c8:2f:0f:ca:a1:20:
                    24:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9A:84:22:AA:2B:36:04:43:3B:F1:EB:7D:E5:FC:60:5A:84:82:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/9f0cb292-c0ff-3b27-86e3-1eb37ed775e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.186.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:6c:ea:2a:05:f4:61:b9:f5:00:8e:7b:22:30:2a:09:58:56:
         33:3c:c5:08:37:48:9b:37:b7:97:62:0d:ce:61:fc:cb:93:54:
         e3:c1:47:c0:5b:fa:1d:33:df:b8:0f:1f:b5:95:91:cf:75:1c:
         aa:e1:f0:9e:58:55:d2:e3:aa:67:83:8e:c6:ff:11:3b:2e:9b:
         59:75:1d:79:20:26:ae:01:62:d2:f8:7e:b7:89:0e:fe:1f:86:
         f6:21:7e:cc:7d:b7:2a:90:15:4c:e5:ac:8c:69:6b:a7:b1:63:
         67:2d:a0:9f:a2:67:b0:31:db:ef:be:b4:be:cf:3a:5f:65:95:
         ce:c2:71:f1:f5:09:e4:f6:4f:13:90:97:af:34:48:e8:9b:3b:
         e7:4b:76:9d:f7:e5:5b:c1:43:f4:73:4f:f9:56:05:62:22:cf:
         96:27:9f:4a:e1:1f:a9:c9:dc:b8:da:93:5c:1c:87:18:d6:5e:
         e4:2c:a0:dd:f3:75:57:fd:ca:e5:0f:a0:cd:9c:0d:5b:dd:d9:
         28:da:cf:b2:b0:20:4c:f3:26:81:2c:2f:4d:ef:a7:5b:25:b8:
         60:15:b6:10:00:21:41:88:92:29:36:ad:c1:44:00:21:30:99:
         b0:99:aa:99:54:e4:66:e3:70:72:68:c8:28:16:88:a4:52:40:
         66:91:dc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:56:17 2026 by rpki-client