Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ed3683fc-54d3-3b82-b2e1-f4e62a7f6581.roa
File:                     ed3683fc-54d3-3b82-b2e1-f4e62a7f6581.roa (raw, json)
Hash identifier:          0i24JmFzWkU0+IpLTig97hQgqi48gVr46jgzX/a1x9g=
Subject key identifier:   F6:2A:03:EB:EF:DC:1F:BE:13:46:76:11:94:2F:12:D8:49:05:2F:50
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584E2C39AE57ABD32C38C5D36580
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ed3683fc-54d3-3b82-b2e1-f4e62a7f6581.roa
Signing time:             Sun 14 Jun 2026 21:00:12 +0000
ROA not before:           Sun 14 Jun 2026 21:00:12 +0000
ROA not after:            Sat 12 Sep 2026 21:00:12 +0000
asID:                     399195
IP address blocks:        107.148.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2c:39:ae:57:ab:d3:2c:38:c5:d3:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jun 14 21:00:12 2026 GMT
            Not After : Sep 12 21:00:12 2026 GMT
        Subject: CN=27aa2c32-d5d5-476f-b370-2cda0551bac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:23:a1:38:64:d9:95:60:bc:da:17:ad:d8:27:
                    4d:c7:01:30:5a:ad:6a:66:56:85:7d:5e:d6:d9:c6:
                    69:c2:37:7e:a7:0e:1d:6b:7d:1d:87:c3:1f:05:48:
                    3f:f1:4a:63:40:79:27:1e:d8:e8:ae:b6:08:08:57:
                    a0:5d:78:04:b5:6b:fe:ec:85:88:6f:53:b1:1c:6c:
                    a4:63:24:96:f3:d8:d9:36:1e:ab:55:2c:6a:b2:b0:
                    6a:0b:5f:f5:19:d9:a3:53:10:90:dc:41:79:7c:fc:
                    03:c6:13:72:ae:ac:25:76:ff:a7:16:89:38:0d:a3:
                    a0:e4:68:9f:c2:66:50:b8:d0:d1:85:65:a3:94:cb:
                    96:96:c8:a9:b4:5c:41:52:ca:a5:d4:8b:5b:de:0d:
                    aa:e9:e3:22:0a:c3:08:0b:7d:b5:42:c9:1d:16:ed:
                    45:03:bc:88:3b:7d:49:85:b9:71:83:df:38:d8:d7:
                    6c:7e:6c:b6:17:72:3c:51:af:91:76:05:e3:96:0c:
                    00:bf:ff:93:e7:69:bb:ae:70:09:ba:14:6e:78:34:
                    03:63:d2:b1:e5:95:a8:ca:5a:0b:e4:0d:e0:ee:bd:
                    bc:75:d5:b5:e8:1e:6c:50:79:c1:5f:98:e5:90:60:
                    3e:79:fc:0e:ee:78:a6:1d:cb:82:31:8c:6f:30:f8:
                    ea:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2A:03:EB:EF:DC:1F:BE:13:46:76:11:94:2F:12:D8:49:05:2F:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ed3683fc-54d3-3b82-b2e1-f4e62a7f6581.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f8:b1:05:75:35:85:9d:ab:45:5a:ac:0e:c1:52:7c:ea:8b:
         ba:db:42:32:4a:44:34:7e:8d:e9:e6:74:f5:c8:f3:b6:80:e4:
         77:7e:e4:81:5e:bb:57:6f:4f:f4:12:eb:f7:92:eb:6c:7f:c4:
         82:7e:6c:ea:e8:8e:16:fc:41:0a:97:79:f0:94:b5:7f:75:ee:
         77:78:a8:1d:f9:ba:d5:e1:9c:80:d2:a1:81:ae:72:45:e2:86:
         79:ab:d5:dd:40:52:49:97:b7:dd:c0:67:8a:75:e7:d3:0c:0f:
         5b:1c:02:c1:bf:ba:63:52:7c:94:f3:d8:0f:39:f1:c5:ae:e2:
         7e:d8:e8:9d:39:62:b3:b6:5d:2a:13:d6:f6:30:62:0f:15:d9:
         ea:67:b3:31:21:50:44:98:da:44:5f:cf:1a:70:58:b3:95:d4:
         78:8c:13:12:12:a7:74:46:5e:80:18:c7:ee:a4:2a:df:d1:3f:
         3b:3e:84:56:61:cb:81:30:88:0a:98:59:22:95:8f:df:41:0b:
         cd:3f:3a:11:d5:4b:18:e2:48:a6:c7:ef:dd:bc:4d:37:ca:36:
         74:b1:3d:31:53:c2:38:6b:72:5e:20:a2:72:fd:a2:2b:b0:b0:
         be:69:5f:74:b4:41:9b:ca:f3:cf:07:5f:06:7c:7b:ea:b3:f0:
         4c:46:a8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:21:58 2026 by rpki-client