Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bd708d29-c024-3d17-9d72-55200c16758e.roa
File:                     bd708d29-c024-3d17-9d72-55200c16758e.roa (raw, json)
Hash identifier:          scRGhuAE0j00myVpXU0kB1nky6iWvtvwR1xkG1gviJ8=
Subject key identifier:   14:BF:77:74:AF:28:8D:72:1B:02:5D:0F:92:EE:8B:71:8E:E6:D9:43
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F3A569B84DD36C0D93EEB76A0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bd708d29-c024-3d17-9d72-55200c16758e.roa
Signing time:             Sat 19 Sep 2026 15:06:50 +0000
ROA not before:           Sat 19 Sep 2026 15:06:50 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     19949
IP address blocks:        107.149.6.0/24 maxlen: 24
                          107.149.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:56:9b:84:dd:36:c0:d9:3e:eb:76:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 19 15:06:50 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=c630c982-96f2-472f-a92a-bb46c5457bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:68:1e:50:2a:1a:da:6a:23:6b:f5:34:1b:
                    a5:0a:5c:4f:8a:7d:d8:1d:a4:01:a2:78:53:c0:b8:
                    86:10:46:b7:54:25:58:82:b5:62:22:1e:6b:8e:1c:
                    eb:ca:44:1b:08:ca:1f:62:7e:63:27:c4:ff:73:9f:
                    8f:40:95:0e:27:59:60:83:88:8e:44:07:eb:c0:25:
                    8a:ea:2a:17:0b:0b:ea:b5:18:03:07:b3:b4:a6:e8:
                    78:56:72:37:f1:9a:f4:7f:b1:b1:b3:c3:8c:7e:af:
                    92:be:f9:c7:eb:23:83:a3:29:60:a8:06:3d:6d:23:
                    28:25:c8:86:48:fa:ba:83:75:af:d7:35:f3:80:38:
                    91:ff:12:2e:4b:fd:d3:14:a6:50:f6:a3:b2:7d:d9:
                    bb:a2:b9:9a:4d:ee:4b:37:0f:67:a6:77:8e:8e:20:
                    af:ee:ca:fd:f7:c7:cd:5a:62:26:38:55:4b:c5:cb:
                    23:da:22:53:26:f6:8b:8a:1a:02:3b:6b:f3:42:04:
                    1f:83:ec:50:ad:49:17:8d:11:67:83:45:a5:1f:46:
                    e2:12:20:4e:34:7a:fd:16:1d:0c:e4:ca:f4:ba:e2:
                    01:ac:72:22:4b:a4:2b:63:3c:0f:cc:e9:ee:4f:fb:
                    b2:b8:1d:3c:e2:e0:f8:6b:f0:3d:52:e8:15:bd:be:
                    89:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BF:77:74:AF:28:8D:72:1B:02:5D:0F:92:EE:8B:71:8E:E6:D9:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bd708d29-c024-3d17-9d72-55200c16758e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.6.0/24
                  107.149.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:79:51:94:16:8d:50:0a:e9:08:b3:5a:e4:91:9a:42:3d:67:
         19:45:f8:c3:ff:04:bf:60:41:6b:a9:2e:92:42:d3:cb:f3:9f:
         f8:ee:d4:5d:e9:78:73:93:cd:34:5e:54:60:2b:20:c0:87:aa:
         91:c9:21:cc:be:ad:e9:a9:44:87:54:f0:24:1f:db:27:c5:ac:
         6f:6f:cc:48:21:a3:3b:02:b4:b1:a7:b5:2e:49:ec:4e:f2:75:
         5c:a9:38:91:23:ba:f0:3e:4a:29:34:a4:76:cc:89:87:53:fc:
         cb:01:2e:43:9d:e7:ff:91:10:70:7b:28:59:81:c0:42:03:3c:
         ac:e7:85:dc:7a:b1:ef:cb:1e:b8:f9:5e:22:ff:3d:6d:bc:15:
         6e:83:5c:1f:08:89:87:85:dc:c6:c4:1a:92:63:64:f0:48:e4:
         69:a1:a8:76:68:ff:22:22:12:ba:43:fb:31:87:73:07:fe:7b:
         97:60:bf:a2:83:3e:c0:4b:f2:69:2d:5c:11:3f:26:ba:a2:7f:
         8a:7a:c1:73:aa:49:6e:8a:86:2f:e4:1e:c9:a9:d5:1d:71:87:
         93:21:47:ff:9b:c9:e2:d6:13:b7:41:76:fc:75:e0:a3:19:1c:
         cc:55:29:7c:5a:05:d8:ba:5e:d3:a0:ec:11:aa:e0:d0:b7:e3:
         c7:dc:0e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:36:57 2026 by rpki-client