Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4e162d8c-3e2e-345d-a5bf-9cc3266003bb.roa
File:                     4e162d8c-3e2e-345d-a5bf-9cc3266003bb.roa (raw, json)
Hash identifier:          tF83AUZqDXNApH55GBo9w64rBii0LCcEFZ556CGgIdw=
Subject key identifier:   CE:73:22:B9:B7:A3:73:33:07:68:1E:F4:DC:E4:AB:ED:CF:88:AA:A0
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F305277B68F28292AD5857250
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4e162d8c-3e2e-345d-a5bf-9cc3266003bb.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     398478
IP address blocks:        107.149.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:77:b6:8f:28:29:2a:d5:85:72:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=28afec3c-5d48-4049-bec1-ea80e79c16dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:17:21:35:62:03:15:d8:ac:84:50:06:09:cd:
                    df:d9:fd:0b:87:ed:c9:07:c0:4c:1f:41:a5:93:ef:
                    35:c1:8d:89:36:25:3c:77:67:ce:60:9b:3c:ac:33:
                    2f:e0:dd:2e:89:6f:c4:e4:95:5e:6d:9c:4d:97:19:
                    ca:13:78:52:54:7b:c4:9e:7c:94:f5:7c:be:a8:74:
                    30:92:f0:7f:8c:2b:89:7b:b2:76:9a:c8:61:62:5c:
                    94:f3:a9:f6:ad:8b:81:5f:fc:6d:e2:80:b9:e5:88:
                    94:2c:82:97:c5:45:96:c0:43:40:2a:c1:ee:1e:f0:
                    c8:f6:65:a8:33:e2:ac:79:ed:8d:c3:2c:8d:a7:6c:
                    cf:66:a9:1a:69:9b:53:c0:ad:ea:9f:c8:54:5e:7a:
                    41:6f:47:52:2b:5a:da:24:f3:b8:ae:3d:db:10:45:
                    cd:88:de:11:7a:93:6e:16:3f:da:12:ec:4a:b5:a9:
                    15:19:cf:36:32:60:30:5d:1f:1a:98:b5:d9:6b:48:
                    82:3a:e9:bc:3f:08:40:22:b8:a0:0f:ef:b9:b4:e9:
                    8d:c1:6a:15:99:57:2e:46:39:e3:25:4f:19:c0:bb:
                    aa:d5:a4:1b:75:78:ed:f4:b5:eb:c7:c3:77:f2:ef:
                    9e:a2:03:82:7f:ab:19:73:78:cf:9c:c0:73:ca:dd:
                    00:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:73:22:B9:B7:A3:73:33:07:68:1E:F4:DC:E4:AB:ED:CF:88:AA:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4e162d8c-3e2e-345d-a5bf-9cc3266003bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:2f:ce:ff:a5:8f:d7:87:ef:d5:33:db:bd:4e:0a:32:da:ee:
         f8:79:d5:3d:cc:59:5e:b6:98:5f:ac:0a:6f:07:32:aa:65:fb:
         44:bb:d8:92:52:9c:8b:c5:da:c2:b3:02:af:18:7a:5c:04:06:
         40:b8:c9:eb:b9:5d:5d:41:18:13:cd:0e:db:6f:c2:05:01:26:
         e1:00:e6:92:f5:b0:5b:f6:47:c9:e0:bf:98:06:41:94:46:67:
         30:67:ce:bc:39:df:97:2b:96:1b:e2:4f:e4:96:18:34:8d:f9:
         dc:da:ca:e8:08:7b:d6:7d:1a:27:61:c8:64:8d:22:40:26:ac:
         e2:9c:c7:d4:fb:d6:10:52:1a:37:06:84:d9:1d:df:e3:da:91:
         4a:97:96:bf:ff:a8:d2:58:e3:43:00:42:d6:d7:32:3f:33:55:
         3a:23:41:b0:92:52:78:67:8d:49:e1:1e:3e:51:6d:1a:9b:e4:
         da:40:8d:bf:08:91:ca:5b:2d:8e:5a:cf:f1:44:92:1d:f2:c2:
         be:63:53:4e:65:38:de:c7:5b:27:6f:1a:d9:f9:47:43:51:35:
         49:02:cf:86:d2:a9:91:1c:66:e1:b0:b2:3c:bf:e5:ab:f2:a7:
         33:77:7f:5a:bd:9a:0e:a2:6d:d2:ef:9d:44:27:6a:58:5d:59:
         5c:93:70:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:07:55 2026 by rpki-client