Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d3b73a59-8fd1-3f94-b921-d843acfde8d3.roa
File:                     d3b73a59-8fd1-3f94-b921-d843acfde8d3.roa (raw, json)
Hash identifier:          zdvTidqLojNhdtIRzGyWj+r+xXC+ZsekdUe0uiCJ03c=
Subject key identifier:   82:7E:9E:58:78:15:20:26:BE:06:C6:FC:0D:1C:B5:12:3A:16:60:13
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584E4824B8D48440188E2E3BC680
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d3b73a59-8fd1-3f94-b921-d843acfde8d3.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     398823
IP address blocks:        107.149.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:b8:d4:84:40:18:8e:2e:3b:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=d1f41eee-c599-4b95-80ca-6cb41516c0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b8:33:84:df:e8:f0:6d:2a:af:40:09:df:b7:
                    00:db:c4:d0:b2:93:b0:aa:73:6a:5d:71:9d:be:d8:
                    39:df:cd:91:b3:7c:fd:e1:70:0b:f4:d7:16:64:83:
                    f8:9e:6b:cb:26:6f:d8:6a:73:ee:96:94:8b:3d:7f:
                    44:5f:f7:44:bb:2e:6b:94:84:3d:cc:b6:7d:87:af:
                    5c:b3:c6:60:27:cb:36:7f:6a:57:bf:87:69:d5:03:
                    35:ff:f1:f6:aa:11:2c:84:84:72:cb:72:d2:fd:92:
                    64:b6:83:bf:43:e6:62:6c:a3:5c:e5:08:c8:0c:b1:
                    27:94:5a:54:6c:a1:be:03:e7:4b:44:d2:47:6e:e3:
                    63:1a:c7:41:3c:f5:94:7d:cd:24:9f:3f:1c:ba:70:
                    8d:1c:4b:d3:92:cc:9a:00:99:5e:b7:83:90:a0:3e:
                    37:70:91:b1:d8:d8:d6:ae:7e:71:7d:53:b5:fc:15:
                    39:b5:3d:64:5d:e7:ad:2c:d6:40:ca:c5:5b:7a:db:
                    e3:cd:1b:44:87:b1:10:82:74:c2:2f:d0:94:38:e3:
                    e5:e2:dc:a9:97:34:81:3c:2d:e9:86:80:f5:4f:21:
                    4d:15:51:17:30:a7:c3:51:0d:cc:e5:d3:4b:58:66:
                    61:22:49:22:94:0d:0a:5d:e5:47:45:ac:98:5a:de:
                    e1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7E:9E:58:78:15:20:26:BE:06:C6:FC:0D:1C:B5:12:3A:16:60:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d3b73a59-8fd1-3f94-b921-d843acfde8d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:1b:c7:35:3a:c6:85:09:7b:3b:51:86:d5:d9:18:cb:f9:12:
         9a:31:44:ad:f4:73:3d:bd:ba:ef:60:41:97:7a:28:0f:98:84:
         d7:e6:bb:0b:c3:47:c8:80:2a:96:c2:cf:c3:52:c0:12:7f:7a:
         34:4a:88:f8:b0:58:7b:9a:99:cc:84:0f:9f:0a:09:38:2c:94:
         e5:f0:19:0e:ea:81:3f:7d:2e:d1:95:95:2d:70:cd:af:7d:fa:
         19:bd:1c:61:ff:87:39:45:a3:9f:22:56:a8:34:e3:45:c4:87:
         0d:fc:61:1c:3f:50:d7:b4:44:a7:8c:b9:51:99:f4:cc:66:35:
         a5:be:aa:5d:ff:26:01:85:d7:a1:ca:8c:fd:ca:5b:0c:73:8e:
         63:b0:84:4d:37:32:65:52:fa:85:91:ee:d6:19:60:8b:b6:81:
         d3:21:02:38:88:fe:53:ed:75:6d:cb:a2:57:4c:a3:2c:08:6e:
         18:46:8f:0d:c3:45:a9:c0:2a:18:75:20:4f:f3:94:3a:c4:09:
         f6:cb:b0:1b:6a:d2:bd:f8:aa:60:f8:0a:87:1b:b9:25:67:41:
         f7:75:49:95:c2:42:7e:9b:8a:61:76:14:b4:16:3d:a9:2e:ec:
         39:47:38:d0:e2:49:04:c2:85:90:81:c3:6d:ef:ea:82:c1:9f:
         f6:71:33:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:17:23 2026 by rpki-client