Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/be91a356-eac1-37d0-983b-cd03068444f9.roa
File:                     be91a356-eac1-37d0-983b-cd03068444f9.roa (raw, json)
Hash identifier:          b3Kp4jaKyQ1M7QnNwIDgxrHmZnskfGakgTWIU+5dGrQ=
Subject key identifier:   30:B4:47:2B:A5:64:C7:19:67:7A:A5:98:2A:92:6F:40:2C:10:5B:27
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F411F8A883A8801F7FCBF4300
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/be91a356-eac1-37d0-983b-cd03068444f9.roa
Signing time:             Tue 22 Sep 2026 01:26:33 +0000
ROA not before:           Tue 22 Sep 2026 01:26:33 +0000
ROA not after:            Mon 21 Dec 2026 02:26:33 +0000
asID:                     16509
IP address blocks:        108.186.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:1f:8a:88:3a:88:01:f7:fc:bf:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 22 01:26:33 2026 GMT
            Not After : Dec 21 02:26:33 2026 GMT
        Subject: CN=14c7eed1-1c37-4d29-98fd-d23d924a3e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4c:7c:63:82:84:6d:bd:d2:c6:a3:5c:af:e6:
                    9a:29:ef:b4:fc:e3:8b:d7:66:27:42:01:7d:7f:c7:
                    3b:08:4a:33:f0:e6:35:f9:ed:29:9f:9a:49:e8:b3:
                    27:25:8c:d5:01:40:b9:5a:73:f2:77:7e:d1:95:22:
                    d9:e0:c0:c6:14:60:1f:f7:f5:66:cd:20:60:08:d1:
                    15:c2:11:dd:6d:0b:a1:1b:e8:a1:89:4a:77:bc:c7:
                    8c:3d:67:d2:82:7f:2c:e4:1f:3e:b5:a9:ae:9b:bc:
                    29:b9:c5:4a:4b:09:2f:fc:a2:01:da:33:1b:03:ae:
                    1a:2d:ee:c4:da:e0:76:19:40:88:f1:fc:97:1b:b1:
                    fe:ee:e4:7d:63:79:13:87:29:62:3e:ef:9c:62:c7:
                    b4:19:2d:50:6d:52:9e:aa:a7:e1:3a:08:68:46:cd:
                    ba:72:18:12:d1:a1:a2:47:5d:e1:ce:49:bc:08:b5:
                    43:7d:0d:55:53:ad:71:92:b2:0e:a5:9a:0a:22:4d:
                    60:81:69:6e:fd:2b:65:47:c0:97:cf:c4:58:c6:4e:
                    cd:66:27:4a:47:b1:14:b2:b0:34:51:85:d3:57:43:
                    39:32:84:9e:0c:fd:d2:f5:72:6b:d5:a8:74:b1:0e:
                    b7:96:cd:19:13:b8:96:f6:54:84:89:28:05:ff:5e:
                    cf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B4:47:2B:A5:64:C7:19:67:7A:A5:98:2A:92:6F:40:2C:10:5B:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/be91a356-eac1-37d0-983b-cd03068444f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.186.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:3c:5e:ab:28:f9:40:24:85:a4:55:8b:43:13:37:f2:ae:f3:
         89:ae:29:d8:c4:67:d1:90:a5:b3:1c:3b:e1:7a:11:93:5f:77:
         18:95:d1:c9:0a:a7:60:1a:f5:04:63:07:2c:4e:6a:2e:6b:28:
         b3:5a:c8:9f:ed:e4:79:f1:02:27:1b:51:84:62:3c:94:d7:78:
         b2:3f:f1:db:41:9d:1a:f2:b4:29:7c:31:58:46:78:1f:aa:7c:
         ce:9b:0b:df:71:b3:7c:64:18:e6:4e:96:f9:d0:21:7e:32:c5:
         1e:4a:3e:66:44:ba:35:95:64:ca:16:df:dd:14:36:43:54:5f:
         b2:be:73:c7:a2:4a:fd:03:a1:b6:7c:df:75:ca:12:98:81:eb:
         0b:65:2e:fd:6d:d1:37:fe:c6:90:e1:e0:5d:99:71:df:f7:d1:
         c5:1c:44:22:a2:1c:a0:37:76:0f:0e:3a:3e:c2:2f:e0:e7:fc:
         ba:8b:43:6b:af:a6:17:b9:ae:e6:5f:f9:36:a4:9f:a7:48:96:
         a1:00:45:ae:de:79:dd:cb:2d:99:59:74:c8:20:ca:1e:b4:ce:
         fb:c5:cb:40:2d:1a:7a:2a:64:3a:b5:29:ae:82:cf:39:83:47:
         7f:e4:2a:65:59:c6:c6:2e:d3:90:c2:d7:38:d2:5c:da:35:61:
         cd:1f:b4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:11:14 2026 by rpki-client