Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/15b3b593-df3d-3f95-a097-866b7e192335.roa
File:                     15b3b593-df3d-3f95-a097-866b7e192335.roa (raw, json)
Hash identifier:          kdToFb9m2GaxvqDv59NkloU3/gG0v7vetsXkjU0sCow=
Subject key identifier:   E1:33:8F:E3:95:20:3D:DB:64:50:61:1E:EC:96:1B:A1:07:E6:13:A7
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584ED3165502357C4FEC6DA45060
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/15b3b593-df3d-3f95-a097-866b7e192335.roa
Signing time:             Thu 13 Aug 2026 15:29:04 +0000
ROA not before:           Thu 13 Aug 2026 15:29:04 +0000
ROA not after:            Wed 11 Nov 2026 16:29:04 +0000
asID:                     140681
IP address blocks:        107.148.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d3:16:55:02:35:7c:4f:ec:6d:a4:50:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Aug 13 15:29:04 2026 GMT
            Not After : Nov 11 16:29:04 2026 GMT
        Subject: CN=20cb081c-b2d1-43fe-ad96-83cc0187e639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:61:e0:6e:64:ca:cb:ef:9a:db:99:78:6e:4f:
                    ce:57:c9:6e:6d:8b:4b:e9:61:43:fe:8b:d1:39:c4:
                    a5:d7:ea:1d:3b:59:88:15:07:9f:24:d3:a6:14:b0:
                    64:5b:60:69:10:c6:8b:74:e3:3d:fc:b8:73:4d:f0:
                    48:27:91:99:0c:ba:f3:d8:00:1d:e2:cb:62:31:e8:
                    8e:7b:ea:0a:c6:40:49:9e:64:95:7f:2c:dd:4b:19:
                    42:04:be:87:75:f5:56:79:34:a0:65:b8:07:31:60:
                    f7:75:04:33:d7:d6:68:c0:89:80:53:71:d6:c5:69:
                    d7:17:92:cf:62:a0:e7:f4:87:34:fe:9e:90:5d:74:
                    9b:81:9e:68:8a:09:a6:c7:db:75:30:0e:d0:b3:39:
                    8a:96:2c:8b:ec:d0:b5:08:68:3c:95:d0:fc:d8:9b:
                    1e:1b:e8:8b:d8:ca:c9:1c:33:fa:b9:f4:08:39:78:
                    d8:0f:5c:ab:01:ab:66:29:df:a9:49:88:85:a5:fa:
                    5a:12:5a:6d:11:96:b1:c6:d8:a4:30:9c:d1:df:bc:
                    58:83:33:d1:ec:13:d6:3d:cd:7d:c1:28:0b:ae:eb:
                    66:46:27:2d:67:e5:00:f5:f2:c0:71:91:3f:2b:cc:
                    45:01:64:21:e5:e8:96:e1:4d:63:40:ae:04:dc:d7:
                    fe:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:33:8F:E3:95:20:3D:DB:64:50:61:1E:EC:96:1B:A1:07:E6:13:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/15b3b593-df3d-3f95-a097-866b7e192335.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:21:34:9d:a8:9b:9c:fb:b0:33:59:08:11:7d:44:e1:67:8c:
         e6:cc:3f:7f:f1:5a:78:51:93:0e:49:45:d8:bc:03:2d:1c:48:
         f4:55:0f:66:29:72:85:6d:59:3b:a1:d2:e9:24:9c:df:1a:56:
         f8:55:60:54:9d:66:a1:ea:be:23:85:7a:2e:5f:b8:0e:1b:e4:
         af:5f:e2:4d:1c:ad:40:7f:5b:e6:91:a2:02:59:ae:f9:e4:89:
         9d:78:1b:85:5a:8d:58:1e:db:ac:18:c8:6b:87:2f:40:6f:9a:
         d8:b2:22:92:83:c2:ff:d7:06:19:49:87:84:64:82:2d:73:60:
         56:76:3c:41:35:2b:96:3a:67:d3:1a:1f:70:50:4c:94:55:44:
         9f:58:39:b9:1e:25:32:6f:cb:41:25:9d:80:e4:1e:e2:4d:80:
         03:04:58:e4:78:26:bf:c2:6c:d0:65:2e:8d:98:9b:6d:16:c3:
         75:9d:fc:25:1f:c4:2a:47:16:d8:f6:73:27:3a:07:38:3f:e1:
         92:df:65:8e:df:2d:73:89:8e:c2:73:28:08:10:3c:11:70:08:
         31:2c:82:90:7b:64:43:d5:6b:72:32:77:42:d8:4e:69:49:33:
         32:41:0a:57:2d:35:20:09:6c:75:b8:a6:42:e2:72:2f:ca:92:
         8f:81:3f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:54:07 2026 by rpki-client