Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4e67db14-a468-33d2-aa76-c555ba67aab3.roa
File:                     4e67db14-a468-33d2-aa76-c555ba67aab3.roa (raw, json)
Hash identifier:          bE4n1SO7+p7SaRQH8DSS5iPdTJmLMA20X117UkyVJwE=
Subject key identifier:   7E:56:CA:E3:77:93:11:E4:B9:90:0A:51:DC:37:1E:A5:E9:3D:B7:86
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F0AA23158FFCDC5D0FD9AF300
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4e67db14-a468-33d2-aa76-c555ba67aab3.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     398823
IP address blocks:        107.149.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:31:58:ff:cd:c5:d0:fd:9a:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=2b813f4a-5adf-4f16-9d92-bbeccf859710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:20:11:8b:af:43:c2:f0:09:f0:50:dd:50:f4:
                    36:27:65:fe:8a:24:b2:7f:30:ab:d1:82:63:fd:0a:
                    54:75:8c:f6:4b:66:a9:39:33:ed:15:dc:08:95:f0:
                    2c:2c:48:48:df:2e:34:4a:9a:88:30:0d:8d:18:3d:
                    73:b3:b2:00:ad:9b:a7:4f:2f:4c:42:cf:0d:19:ce:
                    e5:0f:e2:47:b5:ae:80:8a:0c:59:d4:e7:30:c1:a2:
                    77:7e:95:69:ca:6a:27:31:17:cb:a9:69:5b:b7:1e:
                    1c:50:6b:3d:17:eb:4f:8b:91:cc:16:dd:6d:97:d8:
                    f3:cd:4d:7b:81:b8:59:c5:f6:f9:7e:81:42:2b:3d:
                    d4:2c:14:9d:f6:e8:3b:11:f6:22:23:e7:2f:c9:f1:
                    a2:c0:1f:bf:8c:f9:3a:f8:c8:63:7e:1e:de:33:ab:
                    b8:68:c4:45:4d:77:9e:52:ed:1a:93:12:2d:0c:7c:
                    ea:f3:f9:72:37:ff:07:97:65:36:e2:da:50:27:e8:
                    3e:8b:89:c3:28:ad:a4:33:2a:6a:b1:4b:10:66:db:
                    43:9d:b5:d7:74:b6:4e:2f:b7:d9:7c:cf:36:1c:0f:
                    9e:14:27:85:f7:83:93:8b:89:72:89:b7:53:57:ca:
                    47:34:0c:c2:34:55:3c:fe:6b:a7:72:a5:34:db:e3:
                    dc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:56:CA:E3:77:93:11:E4:B9:90:0A:51:DC:37:1E:A5:E9:3D:B7:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4e67db14-a468-33d2-aa76-c555ba67aab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:33:3c:98:8a:60:0f:58:03:77:77:5e:bc:27:ae:99:ef:65:
         a7:20:3d:7e:a5:1b:a9:79:34:ce:e2:01:bb:af:e1:65:17:d7:
         13:08:3d:a9:90:96:e2:c2:b9:ca:1e:c1:5e:da:12:29:7f:87:
         8e:6c:37:17:77:a2:ea:10:c8:4e:89:94:5d:08:43:51:a3:dd:
         b4:89:ad:3d:b9:56:85:ee:4e:d3:88:95:6c:5c:6e:28:00:25:
         6b:66:e4:94:d3:fa:b0:ef:81:b0:5c:a9:fd:8f:73:71:87:bd:
         e8:61:af:31:94:92:58:01:8d:f2:14:ab:fb:cd:38:a2:bd:08:
         b8:82:37:60:a9:a1:10:b1:b0:be:70:56:31:3b:2f:d2:41:e3:
         af:ab:e9:f2:d9:bf:04:d2:df:f2:c2:b2:84:cb:38:86:62:ed:
         97:41:69:de:ec:e1:ed:23:ec:94:97:6f:bf:d4:3a:3b:c9:46:
         c0:dc:d7:92:a4:69:c8:87:72:ea:8e:ee:b1:a1:ee:24:b1:a8:
         db:5a:e9:ed:33:16:5c:5a:7a:2e:bb:5a:55:37:d6:5e:d8:66:
         dd:b4:33:7f:47:50:80:cb:8d:a7:f3:51:f6:5c:1a:60:59:7d:
         28:80:6a:66:80:a0:17:fb:c8:b9:09:f0:b4:2c:36:11:ed:23:
         6c:11:f7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:21:24 2026 by rpki-client