Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/2dbe542c-81c2-3c0a-b0c4-1c47651bbbbd.roa
File:                     2dbe542c-81c2-3c0a-b0c4-1c47651bbbbd.roa (raw, json)
Hash identifier:          /OSec1cW4L1gFk+TWhDcO7AAuST+lAxOAqqz/PKUmUs=
Subject key identifier:   85:A9:2E:5F:D2:3C:B9:51:5E:21:1D:11:F6:89:01:B5:2A:DD:B3:26
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584DE2CEB02EBD5AD385BD0E1180
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/2dbe542c-81c2-3c0a-b0c4-1c47651bbbbd.roa
Signing time:             Tue 19 May 2026 13:50:43 +0000
ROA not before:           Tue 19 May 2026 13:50:43 +0000
ROA not after:            Mon 17 Aug 2026 13:50:43 +0000
asID:                     9009
IP address blocks:        107.149.20.0/24 maxlen: 24
                          107.149.61.0/24 maxlen: 24
                          108.186.201.0/24 maxlen: 24
                          108.186.217.0/24 maxlen: 24
                          108.186.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:ce:b0:2e:bd:5a:d3:85:bd:0e:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May 19 13:50:43 2026 GMT
            Not After : Aug 17 13:50:43 2026 GMT
        Subject: CN=b2f1febe-875f-4052-9773-860bfd66d5ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9b:a5:7e:49:ca:ed:34:7e:aa:ed:80:2f:fb:
                    c2:9e:e5:55:2c:d6:c4:a0:4e:2c:aa:56:f2:c8:00:
                    2a:87:b3:22:04:55:f3:21:60:8f:ad:cf:aa:bd:da:
                    3c:6c:69:e1:37:b8:e7:5b:e9:55:1e:bd:19:82:48:
                    9c:55:c2:2a:96:b9:ef:b1:7c:49:2a:93:80:51:26:
                    4f:ab:ad:c6:63:be:bf:ad:8f:c8:38:50:d9:29:81:
                    36:15:46:50:78:f1:31:0e:cf:04:85:f3:b8:4e:81:
                    0e:fa:94:f0:62:4b:45:79:bd:ac:97:28:53:9f:3d:
                    4d:9f:bc:e7:c5:94:80:02:b6:eb:be:e2:8d:df:ad:
                    35:13:3c:14:97:50:7d:83:72:3c:b0:a0:53:13:04:
                    cc:e6:ee:94:6f:2b:c3:04:2c:c1:0f:ca:db:68:dc:
                    dd:6b:ba:23:05:22:83:0c:6f:89:af:e5:42:8a:fa:
                    4c:09:ef:e6:21:5b:43:4b:b3:e3:26:ac:b1:e6:f1:
                    26:58:d1:2a:9a:0a:f2:ab:89:d9:8a:d6:45:0c:16:
                    d5:c3:61:e8:99:7b:0a:8f:4c:e5:b0:13:6e:73:ac:
                    d4:90:26:fc:7f:a7:7b:e2:86:1d:39:2f:c6:65:e8:
                    5c:15:f5:62:7f:14:2b:7f:f1:8d:08:c6:84:0c:4c:
                    e3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A9:2E:5F:D2:3C:B9:51:5E:21:1D:11:F6:89:01:B5:2A:DD:B3:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/2dbe542c-81c2-3c0a-b0c4-1c47651bbbbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.20.0/24
                  107.149.61.0/24
                  108.186.201.0/24
                  108.186.217.0/24
                  108.186.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a6:f9:c2:d0:37:6c:05:21:bf:03:77:8e:80:3f:91:be:45:
         3b:43:6e:fd:80:d7:00:08:be:f1:63:e5:6d:b2:c8:e5:3a:d9:
         60:14:a8:6d:c0:f1:6d:9c:28:d5:b0:b8:97:a7:8f:38:e7:fe:
         03:ce:f2:9e:78:5d:15:1d:0e:df:b8:7e:8d:ad:c7:4c:21:5a:
         23:03:7f:91:39:1c:b5:01:aa:33:53:db:00:1d:cf:c3:c2:31:
         d6:43:19:77:b1:71:44:4c:d8:ae:04:f4:ef:b7:fc:08:8a:b2:
         d9:eb:9a:43:21:ee:ad:2f:fc:3c:90:9d:3a:b3:b3:d5:40:ac:
         9a:a9:77:fc:27:2b:a1:40:ca:93:15:a5:0d:d9:cf:2c:ce:d1:
         3c:a1:1c:35:e1:44:31:08:ff:1e:26:2c:97:8b:0d:35:50:24:
         f2:f0:12:ae:be:b4:c4:7d:49:c9:ab:6b:81:d7:ec:de:a3:5b:
         e8:90:e2:39:90:46:89:fa:2f:8e:5b:64:b1:9f:ab:ab:35:61:
         b4:fd:d7:db:8c:a9:95:02:ba:14:5d:79:b7:2f:40:52:a4:f1:
         20:52:3a:f0:b3:52:c4:18:6b:02:1c:61:c4:c8:48:22:7e:72:
         d8:a1:d1:4e:86:24:81:4b:c3:7f:e6:23:0d:b5:25:61:40:e0:
         f5:f4:2c:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:41 2026 by rpki-client