Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0bbbc108-47ff-3791-97ee-1d77e86df94c.roa
File:                     0bbbc108-47ff-3791-97ee-1d77e86df94c.roa (raw, json)
Hash identifier:          ufrDF3ucL/ywTUkdeVkC08lB0P9HLlc2SgeXjf7uQEY=
Subject key identifier:   FB:B6:19:22:DE:4C:E0:91:5E:98:EF:4F:C5:67:63:58:5C:1F:51:D0
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584EEA8749227C797E10F6AE2D80
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0bbbc108-47ff-3791-97ee-1d77e86df94c.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     29799
IP address blocks:        108.186.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:49:22:7c:79:7e:10:f6:ae:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=f9eb966f-ae91-4dda-b797-eba3ac687799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:a0:e6:4e:1a:6d:89:99:5f:cd:d3:3a:eb:af:
                    03:66:d0:fb:2e:33:85:9f:e8:56:8d:13:7e:c8:14:
                    ab:72:68:4c:13:4f:f8:b1:1c:2b:86:0a:b7:98:86:
                    df:27:ae:80:40:46:16:aa:a7:f8:52:fa:7a:dc:8e:
                    a1:01:ce:6e:94:43:28:56:c5:7d:86:4f:99:dc:60:
                    3c:5a:20:1b:cd:6d:19:13:eb:dc:ab:3e:10:8e:33:
                    2a:18:7f:a2:a2:b0:55:3d:9c:95:58:5a:af:31:b4:
                    02:49:90:fd:40:f9:95:94:8c:90:ee:3c:db:43:65:
                    ba:91:48:8a:ad:cf:e5:0a:87:f2:21:7a:bb:47:55:
                    7b:bd:b8:2c:7c:37:8c:36:e7:7c:77:4f:51:9a:ae:
                    a1:4d:a2:dd:23:4b:87:26:83:5f:a7:43:84:c0:17:
                    a6:4a:6d:c6:cc:1b:4d:6f:cf:4e:c3:b0:eb:ee:fd:
                    19:6a:af:54:4d:98:b1:38:9e:27:e4:0e:40:c6:35:
                    98:c7:fe:71:3b:7f:07:53:02:3a:52:9f:71:99:28:
                    51:e8:b5:b6:38:33:3f:0e:9a:c9:3b:b4:ab:0d:7e:
                    f1:8f:93:d9:1b:aa:cd:70:13:dc:6e:14:18:62:cc:
                    58:78:63:8f:5a:28:6d:60:d5:13:ab:6e:e2:ef:60:
                    e1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B6:19:22:DE:4C:E0:91:5E:98:EF:4F:C5:67:63:58:5C:1F:51:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0bbbc108-47ff-3791-97ee-1d77e86df94c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.186.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:be:0f:8b:98:7f:2e:84:12:e4:1f:c0:90:3e:26:8b:54:f2:
         f8:f4:ff:30:03:b7:41:e4:4e:09:85:29:2c:b1:43:14:ae:f8:
         5a:da:dc:30:4f:11:fd:44:4e:60:0e:40:a1:9b:d0:dd:15:4b:
         e6:df:ba:18:e1:ff:a0:d8:8e:a8:20:46:3d:13:cb:6f:f2:7b:
         79:cd:86:cc:14:24:19:a2:9a:cf:1a:5a:cf:da:58:58:a0:9d:
         cb:72:b9:52:42:c9:47:98:2c:ff:02:ad:80:a7:23:7c:79:f5:
         47:4c:c3:69:5b:d0:05:b2:df:b4:e1:da:39:1e:c9:a6:63:88:
         10:73:c0:4b:e7:18:25:86:6d:01:7e:01:cb:f8:11:15:a8:89:
         8b:be:24:71:59:e6:b6:a1:af:1b:8e:85:b1:6f:ff:e6:8e:c3:
         d0:ce:bb:2c:04:af:0f:09:af:2c:58:30:a4:8e:77:ba:93:d2:
         a0:66:c7:ef:be:a1:c6:35:7c:61:aa:5c:78:a1:5c:07:f6:08:
         e6:04:aa:01:05:55:ac:79:df:29:0d:42:ee:3e:ee:bc:2d:bf:
         59:db:87:d2:ac:1b:2c:f4:0c:c9:8c:cb:0e:98:d4:75:94:a3:
         83:62:cb:32:71:55:d3:83:6b:6d:33:50:de:86:cd:c1:15:bb:
         c8:9a:90:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh0kifHl+EPauLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk
ZjllYjk2NmYtYWU5MS00ZGRhLWI3OTctZWJhM2FjNjg3Nzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9aDmThptiZlfzdM6668DZtD7LjOFn+hWjRN+
yBSrcmhME0/4sRwrhgq3mIbfJ66AQEYWqqf4Uvp63I6hAc5ulEMoVsV9hk+Z3GA8
WiAbzW0ZE+vcqz4QjjMqGH+iorBVPZyVWFqvMbQCSZD9QPmVlIyQ7jzbQ2W6kUiK
rc/lCofyIXq7R1V7vbgsfDeMNud8d09Rmq6hTaLdI0uHJoNfp0OEwBemSm3GzBtN
b89Ow7Dr7v0Zaq9UTZixOJ4n5A5AxjWYx/5xO38HUwI6Up9xmShR6LW2ODM/DprJ
O7SrDX7xj5PZG6rNcBPcbhQYYsxYeGOPWihtYNUTq27i72DhzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPu2GSLeTOCRXpjvT8VnY1hcH1HQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMGJiYmMxMDgtNDdmZi0z
NzkxLTk3ZWUtMWQ3N2U4NmRmOTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLrsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJa+D4uYfy6EEuQfwJA+JotU8vj0/zADt0HkTgmFKSyxQxSu+Fra3DBP
Ef1ETmAOQKGb0N0VS+bfuhjh/6DYjqggRj0Ty2/ye3nNhswUJBmims8aWs/aWFig
nctyuVJCyUeYLP8CrYCnI3x59UdMw2lb0AWy37Th2jkeyaZjiBBzwEvnGCWGbQF+
Acv4ERWoiYu+JHFZ5rahrxuOhbFv/+aOw9DOuywErw8JryxYMKSOd7qT0qBmx+++
ocY1fGGqXHihXAf2COYEqgEFVax53ykNQu4+7rwtv1nbh9KsGyz0DMmMyw6Y1HWU
o4NiyzJxVdODa20zUN6GzcEVu8iakHI=
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:42:55 2026 by rpki-client