Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d6f0c9d8-1869-395b-9db3-cf23cb548961.roa
File:                     d6f0c9d8-1869-395b-9db3-cf23cb548961.roa (raw, json)
Hash identifier:          9yf3ijPMOaSGwzEbpJstLQHOcNY4LG27HucGcws+4P4=
Subject key identifier:   B2:11:8F:7C:F0:4B:CF:7C:84:3C:55:3E:85:65:82:DB:33:B6:05:85
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F49759DF35900F7216A117E80
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d6f0c9d8-1869-395b-9db3-cf23cb548961.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398478
IP address blocks:        107.148.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:9d:f3:59:00:f7:21:6a:11:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=caac4d8c-b134-4ccc-becd-5f71d6e49288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7a:40:c1:b1:7a:e8:48:ff:5c:7a:2e:ed:3b:
                    10:ae:df:6d:06:fa:f4:56:a7:a8:7e:5f:1e:6b:b7:
                    f7:cc:50:44:29:d2:8a:fe:a9:a0:c8:60:03:cb:eb:
                    86:7c:51:6b:85:68:c3:95:17:52:87:5d:35:0e:b2:
                    83:66:87:31:85:b5:6e:29:f1:ac:74:b0:f2:ba:83:
                    86:88:95:d6:c6:f8:ef:a2:ea:9c:d6:cc:f6:47:41:
                    35:ed:68:a9:dc:bc:72:ab:c0:6c:a3:36:98:16:ff:
                    95:14:1e:13:93:d1:0d:1a:15:63:e4:00:ec:49:f4:
                    5f:3f:ac:fe:9a:ac:4b:c1:f7:fb:f3:0b:d0:d7:03:
                    ce:2a:bb:4e:c9:3a:bc:0a:9e:89:44:61:73:91:93:
                    c5:9e:ee:19:6c:f7:bd:0e:70:44:67:b0:14:ae:f9:
                    29:1d:14:13:fe:66:f0:c3:df:55:1b:0f:79:8c:25:
                    07:eb:66:a0:57:25:39:92:4a:2a:ce:10:2b:4b:c5:
                    c1:da:28:31:09:ca:cb:44:04:8b:08:86:b2:81:3e:
                    e7:33:70:4e:7c:14:4a:ef:96:ec:7f:bd:18:39:29:
                    64:ae:a9:19:dd:0e:9b:2e:4b:f7:6d:0e:8b:84:bc:
                    38:c7:a5:65:56:98:aa:e4:db:3c:b8:1a:16:15:a9:
                    5c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:11:8F:7C:F0:4B:CF:7C:84:3C:55:3E:85:65:82:DB:33:B6:05:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d6f0c9d8-1869-395b-9db3-cf23cb548961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:7c:b8:6a:72:4a:13:81:ff:2c:11:5b:f9:0e:cf:49:07:b3:
         66:48:cb:96:a0:e8:ed:63:71:ac:f3:5b:ed:a3:ee:a3:d7:73:
         fd:4b:9b:c0:35:72:81:7a:e6:c8:39:6f:42:ea:fa:ab:b1:df:
         06:7b:c4:fe:2f:f6:6b:3b:ae:9c:49:85:c8:30:7c:9a:ff:93:
         85:20:92:f3:8c:fa:c2:34:8f:90:5f:ae:db:76:5a:14:88:af:
         b5:2d:99:84:41:2e:41:d2:ae:da:09:c3:9f:23:9f:f7:5c:1b:
         5a:ee:a6:38:c2:1d:75:ec:b2:89:51:7f:81:27:a9:33:89:3d:
         90:5c:bc:3b:f3:b4:e2:83:e9:a0:bc:0c:1f:c4:8d:34:ef:da:
         1c:c2:2f:80:16:52:44:48:3c:f7:33:f8:d4:7f:90:3d:43:bf:
         e6:00:6f:d2:e5:ae:23:85:bb:41:01:aa:56:26:e5:76:d4:bf:
         54:12:ea:2a:ee:9b:70:66:cf:f5:91:f4:08:ed:a3:4f:af:99:
         da:31:df:47:0a:6b:75:6e:4f:c4:25:0f:07:a9:f1:2e:1c:98:
         e2:23:f7:ba:6e:ad:07:b4:88:59:c8:1e:0f:d1:cb:54:87:cb:
         99:76:bf:dd:4d:f0:9d:88:eb:36:7f:72:7a:96:33:e6:26:79:
         ab:d3:9d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:24:15 2026 by rpki-client