Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6b688d4e-c797-3aac-b0af-921879acc57c.roa
File:                     6b688d4e-c797-3aac-b0af-921879acc57c.roa (raw, json)
Hash identifier:          5Gn1gM1adxBnWPpl8eUKJujbGYVSDQDyzDnntmX243c=
Subject key identifier:   1E:4A:F6:4F:0B:01:E5:E3:F2:A2:3C:21:EA:39:1F:6C:76:C4:9A:D2
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584DE2B5EBB3D4D1819F478CA540
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6b688d4e-c797-3aac-b0af-921879acc57c.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     398823
IP address blocks:        107.149.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:eb:b3:d4:d1:81:9f:47:8c:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=77a44532-4676-4732-95be-783d8ebd815a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:3f:71:82:8d:81:4b:f2:c3:59:c8:02:38:
                    c4:bc:83:43:78:75:ed:29:cc:0e:ad:6b:18:f9:4b:
                    f7:f5:48:d1:63:7b:d6:a6:91:37:0c:a1:c5:1a:be:
                    12:b8:0b:52:0f:3e:b0:79:d9:54:93:60:1b:af:86:
                    ff:77:6e:a0:40:8a:e8:18:76:aa:ed:59:8a:48:89:
                    65:ae:9e:46:6f:f7:2e:51:84:a6:e2:ef:d6:c4:c5:
                    5d:27:60:47:5b:cb:49:e9:db:47:57:6a:1b:c1:55:
                    57:dc:a7:fc:97:93:83:fc:1a:27:84:ef:2b:45:2e:
                    a1:ac:05:ce:63:a1:ef:43:70:f1:e3:d4:45:86:98:
                    e0:32:58:6a:19:b9:bd:cd:1a:df:ac:e3:7b:86:ed:
                    4f:56:ae:c2:33:a3:ad:02:a1:02:92:16:7e:1a:74:
                    65:0b:e2:38:2e:59:e4:51:0d:a1:58:19:44:1e:55:
                    c8:93:5a:8f:19:b4:49:59:22:de:40:50:e0:28:05:
                    de:31:b2:89:76:d1:41:24:2c:c5:92:b0:7b:27:cc:
                    99:de:a3:ac:8c:fb:f2:58:39:dc:7d:d5:f8:40:62:
                    2e:ae:32:cb:35:76:6d:b0:e5:af:1d:74:fb:02:0b:
                    09:86:f3:f0:1e:11:72:51:62:74:93:0e:3a:cf:14:
                    f2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4A:F6:4F:0B:01:E5:E3:F2:A2:3C:21:EA:39:1F:6C:76:C4:9A:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6b688d4e-c797-3aac-b0af-921879acc57c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:1c:16:44:b1:fc:fb:30:d7:d2:3f:24:0c:08:61:7e:f5:d7:
         99:32:61:1b:7c:7e:17:50:f6:59:b9:c0:e5:79:5c:63:6d:27:
         88:a5:c6:6e:ab:34:d4:8b:3f:ad:c4:ec:ed:01:c6:3d:f3:eb:
         47:a6:18:7a:9c:8e:95:a0:c5:66:e2:5f:43:27:c6:33:2b:bd:
         41:e9:5d:b6:33:3a:af:ef:5d:e4:18:81:1d:d6:70:db:c0:d4:
         73:47:7f:bc:3b:67:f8:a6:36:3b:94:1e:e2:eb:84:b8:0a:0e:
         2d:29:6c:7f:a8:60:31:f0:a1:7f:33:28:80:b5:fa:cb:0d:d9:
         aa:92:5b:76:ef:c0:aa:66:52:07:52:26:ec:53:a9:9e:3c:f9:
         87:64:df:bc:e8:11:c7:67:96:bc:84:94:cb:5c:b9:c8:ca:93:
         bd:c1:c7:f6:e8:50:10:11:b6:4a:d4:16:fd:f0:65:ab:1a:0d:
         97:0f:04:d0:33:f8:69:a8:46:cc:59:ef:9a:fc:49:7e:12:62:
         35:88:4b:5c:8d:07:82:43:f8:bb:fb:3a:fd:c3:04:13:04:bd:
         5f:cc:76:90:64:b0:b1:89:7c:08:4d:0d:07:35:3c:cf:c2:b5:
         20:a5:48:ad:6b:17:bf:6c:67:06:9b:ea:22:f9:a6:10:82:a6:
         77:b4:65:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:26:19 2026 by rpki-client