Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4dc7369c-7d64-3aff-a8f4-4a208cc8fcdd.roa
File:                     4dc7369c-7d64-3aff-a8f4-4a208cc8fcdd.roa (raw, json)
Hash identifier:          c+y3gCM7Gm/b33y3V8u+y0WA8Og2ryZQETmtLerIHuY=
Subject key identifier:   F0:30:25:DA:D9:BA:92:3A:26:EF:5B:2E:B1:5A:4E:B9:F2:B5:5C:5E
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F057747A31F04FE556468B500
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4dc7369c-7d64-3aff-a8f4-4a208cc8fcdd.roa
Signing time:             Mon 31 Aug 2026 16:34:50 +0000
ROA not before:           Mon 31 Aug 2026 16:34:50 +0000
ROA not after:            Sun 29 Nov 2026 17:34:50 +0000
asID:                     399359
IP address blocks:        108.186.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:05:77:47:a3:1f:04:fe:55:64:68:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Aug 31 16:34:50 2026 GMT
            Not After : Nov 29 17:34:50 2026 GMT
        Subject: CN=d957c6b4-b449-42d7-b0e4-c685ddb48f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:88:2d:78:17:7a:1a:ea:da:3c:aa:5b:90:7d:
                    fd:cd:c4:8a:47:c2:01:b2:af:18:5c:d3:fc:b8:d0:
                    01:1f:31:ae:7a:bc:2a:ce:ce:37:f8:71:c1:bb:1d:
                    c5:df:c2:41:4a:3e:96:d7:da:f5:1d:96:e0:09:52:
                    1c:dd:da:af:86:7f:18:04:b3:e1:5c:ff:64:2f:50:
                    44:82:24:2d:35:35:47:74:85:c7:a2:dd:8a:9a:7d:
                    3b:9e:24:06:51:79:fb:87:21:c6:f4:7c:f9:31:b3:
                    88:f1:04:5b:ef:6d:86:a2:28:02:17:d4:40:14:5f:
                    b6:66:db:95:45:32:71:55:d8:76:c1:de:dc:13:d4:
                    e6:32:56:27:29:1a:c9:87:21:90:fd:f5:fd:7d:bb:
                    9c:d7:7a:93:5d:d4:c8:3a:42:26:5e:aa:88:13:31:
                    5a:96:7b:49:ab:ef:e4:e9:69:e6:4c:58:71:00:7d:
                    62:6a:b8:2d:e1:aa:03:86:0a:8a:c2:f0:49:53:35:
                    77:2b:e9:ef:e0:c2:6a:ef:7b:28:27:c0:7d:fd:10:
                    02:22:cf:a7:9d:d6:73:bc:1f:ff:3b:0d:62:fd:92:
                    cc:bc:67:bf:67:6c:1f:cb:a5:37:c9:88:c0:64:95:
                    fa:a4:7f:dc:c4:0b:a2:51:db:2c:3e:1a:83:23:1d:
                    f2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:30:25:DA:D9:BA:92:3A:26:EF:5B:2E:B1:5A:4E:B9:F2:B5:5C:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4dc7369c-7d64-3aff-a8f4-4a208cc8fcdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.186.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:8c:7f:30:f9:08:e0:ef:0b:ca:51:52:31:21:8e:e4:2c:28:
         ae:12:e0:36:3d:32:36:54:d4:68:80:a6:97:18:60:c0:33:63:
         63:68:65:2e:7d:34:4f:eb:fb:7e:e5:9b:21:7f:70:22:b6:38:
         7e:b4:92:68:e9:4e:ea:be:38:4c:af:b1:d0:a0:36:5a:71:6b:
         91:16:19:e0:dd:e0:60:23:a4:b4:53:19:06:82:55:31:c4:2a:
         18:b1:91:2f:fc:89:52:3b:ab:5c:a4:41:ed:a1:63:8e:98:39:
         95:4f:63:17:7b:9c:05:b5:9f:db:9a:4e:c4:88:62:b3:b9:08:
         69:2c:89:57:6d:5d:20:af:54:75:73:1a:83:25:f5:d9:17:fe:
         6d:44:cb:09:fc:73:0b:b2:d0:9b:37:23:38:53:9c:1e:3d:fb:
         3c:be:16:c9:e7:5b:39:13:20:2a:92:d5:67:6e:6f:d2:ad:06:
         03:4c:08:f0:f1:15:97:21:f0:21:b1:91:ce:35:f6:9d:aa:b8:
         af:c0:bc:59:67:39:ec:e1:c4:32:74:f5:97:4b:62:21:a9:a9:
         b2:32:56:86:a1:5b:f4:08:a2:cf:e7:ce:1f:78:dd:4f:cf:07:
         28:a9:60:c6:66:16:1a:a4:19:a4:e7:b9:5a:9e:1d:dd:bd:3f:
         19:40:d0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:42 2026 by rpki-client