Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/14ef968c-a39e-324d-89e3-5219a1a5934b.roa
File:                     14ef968c-a39e-324d-89e3-5219a1a5934b.roa (raw, json)
Hash identifier:          /nStuPC1naL4ga6kGHaZJ3Sp1/e5Nn281Qb2ChhE67s=
Subject key identifier:   AE:CB:A1:F8:3A:20:46:29:9F:70:41:48:A7:8A:96:D2:6A:A1:9E:0C
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F8B0DA50905DF0264BA8DA9AC
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/14ef968c-a39e-324d-89e3-5219a1a5934b.roa
Signing time:             Sun 18 Oct 2026 13:00:12 +0000
ROA not before:           Sun 18 Oct 2026 13:00:12 +0000
ROA not after:            Sat 16 Jan 2027 14:00:12 +0000
asID:                     54600
IP address blocks:        107.149.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8b:0d:a5:09:05:df:02:64:ba:8d:a9:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Oct 18 13:00:12 2026 GMT
            Not After : Jan 16 14:00:12 2027 GMT
        Subject: CN=0bf7b71c-8d13-4208-9b09-5342e6bc8cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:62:74:14:b7:fb:a6:5d:01:28:7c:57:66:00:
                    5e:2c:c5:78:79:0c:dd:20:37:13:4d:31:1f:1a:26:
                    03:2f:10:cf:6b:a6:8d:2a:7c:a2:7b:75:e3:b2:b7:
                    17:03:9c:b9:2c:89:7c:be:31:a0:f2:30:2b:53:5e:
                    86:54:78:39:2d:5a:59:d6:2f:9f:7a:ad:c6:e3:bc:
                    7e:38:e1:79:82:1a:0e:d2:af:21:f3:44:6e:a8:78:
                    fc:e1:2f:81:56:a3:cb:e0:57:34:4d:e8:89:0e:b8:
                    5d:57:55:bb:d7:6c:da:23:3a:d3:7e:f1:7d:60:fe:
                    b1:62:d6:93:3d:e8:fa:9d:0e:56:5b:13:9a:2c:11:
                    35:01:c6:a4:69:62:68:03:cb:9c:a1:12:7e:8d:de:
                    9f:a6:a1:79:3f:91:b3:39:b0:23:87:f0:b8:85:ce:
                    b3:f0:95:46:ca:f3:75:5f:20:81:bc:8d:4f:fe:5b:
                    09:42:e7:16:84:4f:86:43:f7:8f:4e:bf:9f:31:12:
                    98:08:f3:c5:dc:1f:31:0d:5a:96:ad:33:45:bb:98:
                    e7:35:ce:ec:c2:d5:9c:f6:6c:8b:ee:32:46:e7:91:
                    c4:73:9b:06:a1:e8:92:7f:6d:b3:57:8d:e2:c3:6c:
                    01:95:9f:d2:55:e2:14:de:04:73:48:a9:09:36:a1:
                    13:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CB:A1:F8:3A:20:46:29:9F:70:41:48:A7:8A:96:D2:6A:A1:9E:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/14ef968c-a39e-324d-89e3-5219a1a5934b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:79:5f:c0:57:ca:28:0c:fe:99:cd:aa:b6:c4:0d:70:be:6a:
         0c:ea:a0:50:73:2c:b8:ce:6d:73:7b:21:bd:b0:a9:88:eb:3d:
         bd:e1:bc:d8:68:a0:c3:fe:fd:70:cb:17:03:1a:c7:58:f1:52:
         43:cb:09:ee:36:c2:94:09:c2:56:15:d7:2d:35:d2:d2:5a:6a:
         e5:25:aa:c4:8c:51:3e:59:49:8d:33:3e:ef:f3:b4:55:38:15:
         23:ba:8d:56:d9:5c:48:9d:b7:60:a5:e5:18:7a:00:f5:57:94:
         94:ab:09:46:0d:db:54:1e:b3:db:82:9e:9c:99:3b:f1:3a:73:
         82:79:00:e3:e5:34:4e:25:20:dd:46:aa:0f:7a:cf:d6:b3:86:
         f9:1a:29:2d:3c:f3:f5:d9:cc:6a:39:ee:25:ab:19:3a:d5:10:
         8b:94:18:5a:4c:d6:69:ed:e8:7a:74:fd:ac:6c:cf:8d:69:ed:
         dd:d7:82:fa:aa:e6:63:02:ef:57:ce:91:c2:48:93:f8:91:a8:
         84:ee:91:33:2a:51:4b:22:34:16:b5:30:a4:20:50:20:f6:ae:
         a7:59:d9:db:56:fc:ee:53:b3:e4:17:d2:31:a0:1d:95:5e:61:
         42:c8:80:ae:3b:93:46:89:86:0e:32:bb:1a:0c:4a:b8:ba:8a:
         8e:bd:b8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:15:00 2026 by rpki-client