Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b5be959e-b08d-3696-b7ea-1af5cb3f1dae.roa
File:                     b5be959e-b08d-3696-b7ea-1af5cb3f1dae.roa (raw, json)
Hash identifier:          +qCmUBPr3548SeDTJ9d348cjD0LRXGt6Y0MaMI55yLQ=
Subject key identifier:   A0:C8:31:1F:7F:14:F3:51:C7:D9:C2:D0:70:F0:92:CE:7D:F9:57:D4
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584E921FA630045A2C1BEB7CC900
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b5be959e-b08d-3696-b7ea-1af5cb3f1dae.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     398993
IP address blocks:        107.148.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:a6:30:04:5a:2c:1b:eb:7c:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=ebc80e38-c422-465b-b1df-b950081e0f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ed:3f:18:aa:94:e8:ef:41:71:4f:fe:ee:29:
                    9d:14:5d:cc:e4:d5:03:9b:91:38:4c:1e:b2:74:87:
                    63:e7:d3:03:c2:c7:95:b2:47:18:d8:e9:36:cf:15:
                    b9:26:22:44:1c:d4:10:00:d6:f0:bd:87:6e:47:90:
                    1a:1a:6d:33:fb:d3:c9:96:7a:09:a0:b6:75:2d:5e:
                    94:fe:48:8d:ea:e3:09:1e:62:a0:f3:c1:60:f6:98:
                    d3:7d:fb:0b:a1:07:73:da:5e:43:e3:0b:40:ae:b8:
                    de:98:04:8f:0a:9c:39:06:09:67:11:9b:3d:a1:c8:
                    a0:cd:f2:96:51:ed:57:f3:82:76:80:04:9a:22:db:
                    de:06:be:4b:fc:87:87:09:62:33:01:60:72:b6:60:
                    3d:82:45:2c:f2:ff:9d:72:18:d9:ec:d5:51:54:94:
                    5a:2d:67:03:1f:e0:dd:6d:6f:68:58:a7:ac:ff:e7:
                    1e:35:ca:d2:ec:4d:2b:55:0e:d0:49:74:60:23:52:
                    30:f8:10:b7:06:9f:2a:12:f5:9c:e8:72:05:4b:6f:
                    65:a7:a2:6e:08:40:db:51:77:19:dc:83:3d:c0:a0:
                    a3:e5:13:32:cf:ac:c0:75:93:0e:7d:cd:4b:47:fd:
                    bc:44:95:24:8d:ff:58:1e:96:6f:41:ff:a7:91:2c:
                    35:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C8:31:1F:7F:14:F3:51:C7:D9:C2:D0:70:F0:92:CE:7D:F9:57:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b5be959e-b08d-3696-b7ea-1af5cb3f1dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d3:a7:70:e8:28:6d:60:7c:c7:de:71:fd:c2:91:91:4a:4f:
         af:13:1d:81:c2:d5:a4:62:c3:4f:0a:49:c6:ba:cf:5b:f8:6f:
         61:3d:a1:63:b1:7f:2d:ca:30:77:28:7d:11:2d:68:5b:19:e9:
         d0:47:4e:f4:14:68:a7:26:d1:3c:3a:e6:5f:32:7b:3f:d9:b9:
         ac:e1:94:e4:49:e8:68:a2:46:dc:68:05:b2:ba:8d:db:09:13:
         c9:58:c8:5d:a1:8c:f9:01:37:ed:04:07:45:92:91:26:47:a2:
         a5:77:00:85:cc:59:9d:77:ac:cc:b4:0c:45:36:f1:c2:85:13:
         85:6b:94:0b:2e:28:35:41:51:14:d4:f3:c2:cc:b1:a5:0f:54:
         62:74:69:81:cf:ba:41:ff:9b:a4:6b:49:e3:e6:c9:32:31:65:
         1a:46:08:41:0b:ea:bb:26:04:d5:79:32:c2:25:3c:b1:f1:4d:
         9c:e3:3b:93:04:0a:ab:9c:93:0a:2a:9d:a7:38:13:f5:d5:d2:
         2a:8e:4f:a4:92:d8:52:8a:5c:44:75:2f:25:5d:2d:6a:fa:d6:
         56:df:4a:19:63:0d:ac:52:b4:3c:26:e1:f0:e8:9c:70:51:75:
         dc:4f:db:f9:cc:da:69:06:29:23:48:9b:81:05:f9:b4:8f:8a:
         ea:ae:fb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:56:22 2026 by rpki-client