Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/538f37f8-040e-3e20-a524-0fbf425aebc9.roa
File:                     538f37f8-040e-3e20-a524-0fbf425aebc9.roa (raw, json)
Hash identifier:          9Lz1nEKgjQ50ZYuWvQPDQpiIzxwO/Ki1mwOdFLc76h4=
Subject key identifier:   C0:16:E1:17:FE:E1:92:33:92:6B:22:41:10:49:3C:D2:B6:AD:F5:67
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584EE921F09ABD45F68F10736280
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/538f37f8-040e-3e20-a524-0fbf425aebc9.roa
Signing time:             Fri 21 Aug 2026 13:00:11 +0000
ROA not before:           Fri 21 Aug 2026 13:00:11 +0000
ROA not after:            Thu 19 Nov 2026 14:00:11 +0000
asID:                     54600
IP address blocks:        107.149.212.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:21:f0:9a:bd:45:f6:8f:10:73:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Aug 21 13:00:11 2026 GMT
            Not After : Nov 19 14:00:11 2026 GMT
        Subject: CN=1eea85f8-7068-4412-b32b-51f6dc646ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e5:c8:d8:9c:25:b5:82:27:f8:6b:7d:9b:ae:
                    59:90:07:e3:58:ef:e7:41:f4:6f:d4:fd:30:71:d5:
                    ca:ac:b9:a9:fd:96:7d:43:a6:a4:0b:e9:2a:24:6a:
                    81:22:17:e9:f0:b7:b6:0d:be:10:de:86:25:1b:00:
                    95:32:d8:ae:e4:3b:42:28:76:6f:c5:03:80:c4:22:
                    cb:65:82:56:24:32:77:25:45:a1:f3:0b:93:8e:48:
                    c1:f9:6d:87:4c:3a:6b:a5:a1:48:16:25:46:60:8d:
                    b6:be:2c:d1:48:9f:65:1d:62:97:96:f7:78:a9:fe:
                    30:e0:29:fa:0a:d8:fd:74:fd:f1:6c:89:d6:25:90:
                    1f:c0:f2:62:fc:e1:58:bd:55:1e:60:d1:03:b5:17:
                    a3:7a:c3:24:b0:c4:5d:d5:0a:b3:1c:da:5f:0a:a7:
                    23:cd:51:95:f4:7b:f3:8a:f3:c6:a3:e8:27:1a:5e:
                    22:33:54:67:6a:00:c4:f0:20:36:1a:52:16:ed:4d:
                    0a:53:96:08:e5:80:7f:b9:a9:6a:b1:b7:ec:cd:36:
                    f3:d8:16:a8:16:e3:de:77:d1:f4:c3:f6:fb:5f:39:
                    78:72:5c:5c:ad:d1:b3:09:c0:7e:bb:07:fc:e9:82:
                    b5:30:2f:30:62:cc:38:74:ed:ba:72:a5:f5:22:0c:
                    51:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:16:E1:17:FE:E1:92:33:92:6B:22:41:10:49:3C:D2:B6:AD:F5:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/538f37f8-040e-3e20-a524-0fbf425aebc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d3:5c:76:d7:d9:44:0e:c1:7c:fc:2b:95:16:16:4b:67:f1:
         57:01:ac:5b:5f:ed:04:32:2d:69:3b:e2:f7:fa:d7:aa:f7:0e:
         d9:85:5b:6c:b1:81:6c:32:58:fa:7f:1d:0a:27:cb:88:b4:d9:
         d8:62:45:11:b7:74:74:32:2d:30:68:19:f8:44:4e:43:77:4a:
         98:9b:59:1a:f1:d9:e0:25:d0:43:63:06:56:d1:2e:3e:aa:5e:
         49:56:07:e6:8c:62:11:9a:0e:5a:18:19:33:1d:e0:b6:81:bf:
         f1:41:00:86:52:cf:b9:07:a6:5f:23:cc:46:aa:11:4f:f5:32:
         61:8e:49:75:9e:b0:60:bc:db:b0:b7:c9:ca:8e:83:a5:6b:9e:
         fe:a9:74:2b:50:ef:86:9b:00:5d:cd:5f:4e:8c:f3:d3:14:92:
         6a:80:85:3f:18:c0:97:01:99:bd:4c:65:96:22:ef:4f:0d:74:
         7d:e2:b0:f1:0c:2b:a0:03:28:b2:91:ba:89:88:30:5f:85:36:
         3b:c9:25:49:5e:f9:46:d0:2e:43:74:db:41:e3:3c:4d:fd:c7:
         3a:46:39:99:77:06:d4:91:34:87:0f:e7:b6:c8:0a:d0:62:4b:
         f5:84:79:5a:80:7d:88:7c:d5:28:99:ba:04:d4:b7:1e:5e:43:
         b9:f0:c7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:40:23 2026 by rpki-client