Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/25f6cd50-1182-306c-9664-ceecccbb6ba8.roa
File:                     25f6cd50-1182-306c-9664-ceecccbb6ba8.roa (raw, json)
Hash identifier:          3UFyXjcWJHYYwUAAAwQRtGbTGpXkuf3kOaLq+CNoBoo=
Subject key identifier:   C7:CC:6C:94:3A:0B:AC:19:6F:CB:99:56:04:E2:99:D1:F4:63:4C:62
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584EAFE6EF2E0DC04B5766DC5D00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/25f6cd50-1182-306c-9664-ceecccbb6ba8.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     398993
IP address blocks:        107.149.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:ef:2e:0d:c0:4b:57:66:dc:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=d46c402f-8d17-48d8-9497-1f4ae50a5b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:91:7c:c1:ac:df:fe:d3:02:03:f4:d8:df:e3:
                    48:13:e4:00:92:56:2f:1d:d8:4e:7f:8b:49:a4:1c:
                    12:1e:d2:b7:ac:24:ba:82:8d:1a:32:ea:16:d5:6d:
                    7c:0d:1f:b7:74:76:5f:21:b6:dc:54:03:cb:de:67:
                    84:8c:92:56:45:66:2b:8c:1a:45:89:be:d6:1f:15:
                    3f:80:cc:01:b7:6c:5b:2c:a1:98:fd:81:bf:66:da:
                    71:05:50:ae:82:07:c4:8e:78:9b:db:fe:18:f0:2b:
                    5d:2f:4d:ef:8b:2e:12:81:57:1c:ac:01:f4:ce:8a:
                    12:e5:dc:18:bb:c1:4b:5e:8d:2b:11:73:7b:ad:f9:
                    1a:fd:91:da:ad:7e:ac:bf:11:ff:67:67:3c:73:b7:
                    91:3a:47:ce:88:71:43:a9:f1:2d:a1:98:3b:1c:f0:
                    dd:e1:a5:9e:b8:a9:38:d2:ef:63:5d:52:73:da:95:
                    da:61:d4:b3:c8:1c:cf:e3:2e:f8:4a:4a:a3:fd:dc:
                    80:42:2f:72:bc:27:6b:9e:bc:c3:1c:e3:88:8a:84:
                    31:8a:60:ea:6d:69:a9:00:ac:88:45:24:0a:6a:59:
                    e4:62:3d:d4:d5:75:31:32:3e:8d:c5:51:55:bc:e8:
                    a8:64:a2:ab:19:0a:30:f7:24:3d:9c:df:1f:b9:0f:
                    91:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CC:6C:94:3A:0B:AC:19:6F:CB:99:56:04:E2:99:D1:F4:63:4C:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/25f6cd50-1182-306c-9664-ceecccbb6ba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:e8:4d:2a:fc:03:41:12:43:d6:6d:9f:80:17:44:2c:0b:15:
         27:96:29:5b:31:96:a5:54:a1:e1:a1:75:0c:0d:73:fd:02:91:
         41:14:07:aa:ef:08:7a:dd:ec:c1:c5:83:32:c8:cf:16:aa:30:
         7b:5d:cc:02:2e:d0:63:bd:dc:98:a3:06:53:a2:55:35:1d:01:
         35:4b:c6:cf:2e:cb:28:80:91:3f:25:fd:2b:0d:cf:41:d2:3c:
         eb:ac:57:45:e8:2f:8d:82:c6:8b:a2:ca:3a:f0:4d:25:d3:3c:
         10:56:b7:15:19:8c:f6:5b:ce:13:fc:65:13:bd:bc:20:6d:30:
         72:a0:6f:61:50:fb:f9:49:64:55:87:ef:9d:53:32:95:a5:94:
         76:5b:eb:f5:2e:e6:ce:c3:1d:15:fc:67:ce:aa:3c:ed:78:7d:
         91:48:c9:f0:73:54:63:b5:0d:e5:39:23:54:5e:9e:96:ce:20:
         2e:91:74:6a:96:ca:6f:8a:45:33:e1:c6:c1:25:b2:fa:e3:63:
         a8:1e:df:c5:f4:e2:6a:74:d8:73:89:6c:e6:99:d3:4a:f3:be:
         cf:56:73:07:d5:46:9f:84:f4:bf:5c:da:26:d2:80:69:66:e3:
         f6:f8:c3:08:74:58:d3:50:86:f0:c6:13:64:b7:c3:2a:c6:db:
         82:3c:cb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 03:07:39 2026 by rpki-client