Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/14394a37-4518-3f16-a3a4-c2bf0e6e8907.roa
File:                     14394a37-4518-3f16-a3a4-c2bf0e6e8907.roa (raw, json)
Hash identifier:          SRwhvzPPB/l6dJQLsmVH95YexvfdQ7/V0GYo3/QJImo=
Subject key identifier:   8D:15:72:82:BC:6E:50:F0:B0:CF:C3:B3:AE:50:8C:6A:24:49:03:83
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584D9A6651796131DDA360510A80
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/14394a37-4518-3f16-a3a4-c2bf0e6e8907.roa
Signing time:             Thu 23 Apr 2026 15:22:13 +0000
ROA not before:           Thu 23 Apr 2026 15:22:13 +0000
ROA not after:            Sun 19 Jul 2026 16:31:56 +0000
asID:                     395470
IP address blocks:        107.149.44.0/24 maxlen: 24
                          137.175.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:66:51:79:61:31:dd:a3:60:51:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Apr 23 15:22:13 2026 GMT
            Not After : Jul 19 16:31:56 2026 GMT
        Subject: CN=4daf9034-8e25-4d51-bc43-6ceca888c805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b8:74:22:7b:d3:7a:63:b7:fb:03:d8:f0:74:
                    3f:ab:57:3c:cb:34:b1:fa:cf:ff:aa:60:e1:9b:15:
                    1f:28:37:ee:b0:c5:ce:27:5c:65:fc:b2:f3:0e:1f:
                    73:54:3d:d6:8a:cf:d6:10:75:44:04:02:f5:31:d3:
                    9f:a5:62:a7:b7:32:97:4e:89:fb:a1:f4:78:4c:b2:
                    ac:93:31:fe:07:24:ca:8f:44:c1:11:a8:13:2e:8d:
                    c0:cc:42:0f:ad:bb:4e:fa:1b:a0:ae:7b:06:1b:5e:
                    15:03:30:0b:6c:89:1b:f1:0e:c8:30:94:9f:69:7c:
                    38:b9:40:35:13:16:77:27:ee:46:27:70:5a:d1:cb:
                    3a:5f:89:00:ed:3b:de:1b:62:d0:06:16:de:fd:e8:
                    c1:cc:54:c2:27:25:0d:ab:67:61:08:12:bf:0c:a6:
                    1e:62:64:9c:06:be:d3:ce:ca:e3:45:b2:e4:3b:be:
                    db:aa:62:62:09:b4:a8:14:ae:86:d8:66:59:6d:19:
                    de:81:81:d9:2b:1e:31:ff:eb:51:9c:ac:f5:4d:c3:
                    df:44:fb:94:16:21:e3:49:89:af:70:30:3d:cc:2e:
                    40:6c:fb:03:56:43:74:be:2f:47:50:ca:28:f4:5c:
                    48:43:b7:67:0a:c1:b4:a5:29:11:c0:a8:a8:4c:a0:
                    9c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:15:72:82:BC:6E:50:F0:B0:CF:C3:B3:AE:50:8C:6A:24:49:03:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/14394a37-4518-3f16-a3a4-c2bf0e6e8907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.44.0/24
                  137.175.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ba:84:ac:36:03:14:11:60:a8:62:a5:65:86:ef:9a:2d:c5:
         7a:d2:1b:44:f3:fd:c7:4f:37:15:36:b9:2f:4c:0f:98:22:cf:
         9f:ad:eb:a1:b4:a4:1b:b5:00:15:4a:4d:57:7f:84:ed:fc:5f:
         34:df:be:df:bb:90:0a:8e:cb:f8:22:a7:cb:4f:c3:83:c0:10:
         33:42:9f:74:50:ee:20:f1:9c:ba:0f:52:a4:6b:4a:f2:32:c4:
         95:2a:34:35:f8:dd:cf:81:e8:0c:59:b1:26:69:3f:0a:1d:18:
         a4:75:94:e3:6d:62:dd:8a:d2:95:81:f1:29:52:68:4c:74:a8:
         e5:4d:13:50:02:8a:2f:0b:0d:68:68:34:51:9c:35:0f:44:e0:
         45:7b:3a:56:21:d4:ab:60:a1:2d:13:13:5c:7e:38:f5:c1:4f:
         45:8b:b1:be:c6:20:f6:1c:f4:20:60:6e:8e:7f:3f:95:ab:9b:
         da:a0:bf:f2:7e:32:29:c6:81:d6:c8:f8:31:95:07:66:33:e4:
         42:22:74:84:b4:2d:8b:08:d6:3c:dc:e9:fe:67:f8:ee:99:a7:
         b0:73:b1:cc:5c:27:03:37:29:42:e5:d5:f6:66:67:8a:65:b1:
         94:c0:82:5a:38:ee:9f:24:b8:bd:7b:0d:fa:9c:e4:fd:03:f5:
         b5:1f:72:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 08:34:08 2026 by rpki-client