Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d4d26463-f61d-3d52-8ba5-91598a0f3b8e.roa
File:                     d4d26463-f61d-3d52-8ba5-91598a0f3b8e.roa (raw, json)
Hash identifier:          Z1YQEScVupPfEvUtapw+AGmMH01mgAwDBln3hkYJpkg=
Subject key identifier:   07:A6:BD:36:36:8A:0C:6A:04:04:2E:1A:F0:3A:DB:B1:1D:8D:2D:51
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F57682DA2C0B455D5FC546A80
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d4d26463-f61d-3d52-8ba5-91598a0f3b8e.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     21859
IP address blocks:        107.149.60.0/24 maxlen: 24
                          108.186.33.0/24 maxlen: 24
                          108.186.75.0/24 maxlen: 24
                          108.186.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:2d:a2:c0:b4:55:d5:fc:54:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=d0054552-97ba-4748-9db1-65d891b294da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:63:bf:98:48:a5:a3:a5:1c:70:ad:2d:65:71:
                    bb:68:80:3a:1f:17:85:d3:3d:8a:ab:2e:4c:5b:ab:
                    8c:7e:fc:61:ae:8f:d6:e5:97:7a:df:85:c2:6e:40:
                    ec:1a:dc:f0:b4:df:e6:90:7d:58:19:b2:c1:34:0b:
                    89:8f:70:97:1e:cf:0b:33:c5:1a:68:f8:50:5e:e4:
                    34:11:d5:a5:4a:84:02:06:65:8b:b3:7d:b6:a2:41:
                    f0:8a:4a:b0:e3:75:d7:74:70:3a:54:b6:75:92:b6:
                    62:a9:7b:68:c5:85:91:e4:90:e3:2d:52:f2:11:fd:
                    27:d4:ef:f4:d0:dd:3f:19:9c:af:4a:27:5c:80:f4:
                    1e:b3:08:db:2e:eb:7b:b4:00:69:07:85:a9:2f:40:
                    89:e9:c9:68:d4:38:ea:1a:04:bd:f3:cf:de:0d:22:
                    2b:ec:e6:df:c5:64:22:20:b7:d1:4c:d4:6c:33:de:
                    92:e9:90:5a:01:a7:77:ca:95:ab:d0:47:38:a8:6b:
                    b2:ab:fc:bb:5e:87:9f:c0:06:c7:ed:f5:67:4d:8c:
                    26:57:da:23:a4:25:6b:4f:09:e5:ad:e1:61:1f:5c:
                    2a:97:38:80:ca:ec:e1:dc:33:15:39:2a:51:75:b4:
                    6a:42:d0:df:4d:d6:1c:94:29:00:f7:45:13:9f:90:
                    91:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A6:BD:36:36:8A:0C:6A:04:04:2E:1A:F0:3A:DB:B1:1D:8D:2D:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d4d26463-f61d-3d52-8ba5-91598a0f3b8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.60.0/24
                  108.186.33.0/24
                  108.186.75.0/24
                  108.186.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:48:c9:99:71:9b:b8:77:40:b2:23:ac:b9:7e:b9:dc:94:be:
         51:f1:6c:50:4a:ec:ad:63:e2:7a:9b:49:0e:45:20:e1:98:21:
         fe:3f:db:26:51:5d:65:47:9a:d7:26:7a:22:21:bb:b0:6b:a2:
         8b:eb:3c:eb:25:6c:c2:0b:7a:7d:f7:03:35:6d:bb:21:a7:38:
         ed:e5:da:b8:d4:c2:82:3f:6d:23:8c:59:f2:91:20:05:74:51:
         0a:8d:9f:1a:a2:d5:e5:a5:f5:8e:ce:83:1f:2f:99:af:2b:9e:
         92:1e:a4:92:23:24:40:2d:5f:f0:9f:c5:51:c3:cd:1b:8e:2a:
         8a:24:dc:e9:39:c7:6d:bb:06:10:1e:fe:e2:c5:d1:d3:e0:00:
         7f:b1:85:ad:31:b3:20:af:a8:a0:3e:de:48:a7:88:b2:cf:3c:
         4f:7f:59:17:82:c4:d4:54:e2:c3:e7:6b:a7:c6:29:6a:f5:32:
         ea:3e:04:b2:b7:e9:37:15:75:be:e5:37:f4:32:af:0e:2e:39:
         5c:d7:c8:89:47:36:24:4b:07:6c:f0:25:f6:26:34:0c:7e:7e:
         42:fe:47:a0:97:3f:2d:69:80:d7:fd:36:e7:40:e8:8f:74:09:
         35:c6:76:e1:9d:36:dc:11:29:64:15:11:e6:e2:a6:b8:a8:ab:
         de:7d:f9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:36:19 2026 by rpki-client