Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/00958fbb-cdb2-3f43-9f67-476393d7f9fb.roa
File:                     00958fbb-cdb2-3f43-9f67-476393d7f9fb.roa (raw, json)
Hash identifier:          M8oJbgpcNj4kSRJZO9SXp15cTMIIVkS50C5m6GZr5+4=
Subject key identifier:   EE:0D:D3:CC:85:87:DE:DE:BD:A3:7F:35:F7:D6:AA:10:CD:A1:E7:02
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F7A7C7DD98744E240FDB51080
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/00958fbb-cdb2-3f43-9f67-476393d7f9fb.roa
Signing time:             Mon 12 Oct 2026 14:34:54 +0000
ROA not before:           Mon 12 Oct 2026 14:34:54 +0000
ROA not after:            Sun 10 Jan 2027 15:34:54 +0000
asID:                     218919
IP address blocks:        107.148.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:7c:7d:d9:87:44:e2:40:fd:b5:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Oct 12 14:34:54 2026 GMT
            Not After : Jan 10 15:34:54 2027 GMT
        Subject: CN=4847bac3-3ccd-4b9e-b6b3-cd3c84468ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:28:b4:d7:e9:72:d0:70:14:29:18:64:1e:12:
                    dd:e0:44:25:ee:16:5d:ad:25:bc:62:54:db:86:6e:
                    31:68:52:97:64:74:67:b7:d0:bb:9a:33:1c:30:7c:
                    6b:8b:c2:6b:19:dd:28:61:b5:d7:d6:5b:41:a2:4a:
                    3e:5e:9a:33:b4:99:ae:45:a2:96:fa:e7:61:33:69:
                    1e:44:9d:7d:d6:06:91:1f:69:5f:1b:92:e3:82:b8:
                    f8:06:1e:ae:59:a8:d5:12:69:3e:67:da:c6:d6:08:
                    ef:d8:18:78:1e:d9:9e:ad:86:18:11:4b:07:66:3a:
                    61:ea:04:b2:6f:3e:4f:72:f2:39:af:72:30:42:3f:
                    3f:71:e4:df:90:69:bf:bd:8a:04:78:42:52:1e:4e:
                    74:0b:38:06:08:fc:8b:9f:6d:86:76:52:1e:35:50:
                    5c:28:7c:ac:6f:5a:bc:53:30:5e:fe:56:0d:64:31:
                    f4:70:5b:62:29:16:fc:6c:3e:b8:9e:98:b6:51:9f:
                    ca:b8:04:38:6f:5f:6b:77:03:65:e1:a1:dc:f9:14:
                    ee:ff:f3:c5:4d:62:c6:8a:ed:86:97:27:05:37:25:
                    9f:97:c2:5f:32:14:2e:01:7f:81:c3:e5:ae:c3:48:
                    f8:c3:0c:3b:a3:f2:9b:3e:ee:cb:4d:21:d9:29:03:
                    c5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0D:D3:CC:85:87:DE:DE:BD:A3:7F:35:F7:D6:AA:10:CD:A1:E7:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/00958fbb-cdb2-3f43-9f67-476393d7f9fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:27:a6:7d:8b:82:be:11:83:dd:47:1b:ea:ff:d4:0b:2c:57:
         22:8a:b6:07:18:91:cc:aa:d6:24:e2:af:4c:3d:6b:e2:9e:dc:
         e7:ae:45:d7:22:ae:ec:45:7c:9f:1a:c0:68:91:a0:79:d9:6b:
         19:31:2f:f9:eb:5e:14:9e:1f:25:30:59:5b:f8:96:fe:33:c6:
         46:fa:06:00:35:02:b3:c5:6c:53:2d:1e:a4:28:ba:8b:17:2c:
         76:6e:56:1e:b5:82:99:82:52:d7:86:4e:e2:64:09:27:2e:a2:
         36:bb:00:60:2a:42:dd:e4:e5:1a:4f:c7:da:5d:27:d8:b6:95:
         40:59:8b:ca:df:79:ba:5d:27:a0:7a:a1:c0:96:58:82:1d:2a:
         29:70:98:02:45:cc:6b:88:86:64:dc:a1:ba:d9:85:77:fc:f2:
         30:03:40:56:bc:f6:63:be:ba:d7:0a:0d:36:97:b5:a2:17:40:
         a5:97:9e:2e:46:8a:c2:1a:42:0b:30:f2:87:bc:53:29:17:f2:
         be:15:01:1c:60:53:3b:f6:a6:b1:c0:ff:14:5d:96:89:0e:af:
         f5:42:84:74:e3:d6:01:ff:1f:0f:d7:ac:d9:1a:92:a2:21:dc:
         4d:03:a8:3d:3f:43:b5:9c:5a:ce:25:26:76:a2:ae:90:f3:a5:
         ec:c0:2f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:32:19 2026 by rpki-client