Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6d57190e-e1e5-3a0a-b4e2-0273e1088b91.roa
File:                     6d57190e-e1e5-3a0a-b4e2-0273e1088b91.roa (raw, json)
Hash identifier:          6nV69/ZOadcvu6Tt4ql1CBwXiSA62O/orNueKdDB5Sk=
Subject key identifier:   87:36:3F:43:CF:81:62:50:01:46:A6:D9:91:3C:78:D9:78:97:59:BD
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584E81F63295EAD1E9F29FDF0680
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6d57190e-e1e5-3a0a-b4e2-0273e1088b91.roa
Signing time:             Wed 15 Jul 2026 14:03:51 +0000
ROA not before:           Wed 15 Jul 2026 14:03:51 +0000
ROA not after:            Tue 13 Oct 2026 14:03:51 +0000
asID:                     402215
IP address blocks:        108.186.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:f6:32:95:ea:d1:e9:f2:9f:df:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jul 15 14:03:51 2026 GMT
            Not After : Oct 13 14:03:51 2026 GMT
        Subject: CN=9d7d360e-b1f6-4802-b95d-28c3f925a844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:81:5a:02:11:e0:94:a6:84:09:10:37:c6:98:
                    9f:a1:f2:8e:94:9d:d3:2b:a6:80:38:3e:d1:76:e9:
                    c5:44:ac:d3:47:a7:bf:2c:da:85:c0:e5:94:c5:b4:
                    97:e2:6e:17:a2:79:8f:28:70:b0:fa:45:f7:a5:a3:
                    51:a8:fc:b6:7a:01:b8:18:eb:23:c8:58:aa:9f:27:
                    7a:52:5d:9a:ae:01:05:75:50:74:0b:2e:40:4b:fc:
                    85:cd:e2:01:15:80:db:04:1d:67:05:61:a0:b7:89:
                    8b:1b:8e:29:2c:cc:43:77:35:fe:15:e9:a2:a6:0a:
                    1e:f0:0e:1e:0b:29:cb:8d:9a:d8:c0:3d:0b:f8:05:
                    b8:56:88:76:a0:e8:14:dd:20:75:43:6b:a7:ec:e9:
                    12:a1:fd:31:b8:07:8c:06:91:ad:ba:8d:b0:56:c3:
                    10:24:c8:aa:c5:8e:21:3a:6f:41:c4:86:7c:c6:97:
                    e9:be:44:b6:b8:6c:27:37:09:50:75:1d:c9:67:42:
                    fe:d8:7b:bd:32:ae:ef:ce:37:65:32:85:60:38:ae:
                    8e:cb:99:2d:86:8e:d2:71:82:3c:68:85:a2:ed:f6:
                    c1:c8:76:3e:78:05:c5:75:6c:85:73:51:9a:4d:0e:
                    9c:78:e7:3c:70:0a:c5:e0:54:ca:c0:ce:83:92:25:
                    d5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:36:3F:43:CF:81:62:50:01:46:A6:D9:91:3C:78:D9:78:97:59:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6d57190e-e1e5-3a0a-b4e2-0273e1088b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.186.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:60:6a:9b:b3:3b:f3:bd:08:2c:51:22:9a:fb:17:ed:09:89:
         04:f8:7d:2e:c0:e8:fb:6e:be:60:ad:23:19:1b:ac:44:b8:66:
         e3:d1:7b:1b:58:40:af:7e:12:c4:a1:0d:99:30:a2:96:17:56:
         dd:6e:2f:13:88:54:fd:40:9d:a7:da:52:90:39:99:e8:b8:fb:
         e5:09:1b:d4:50:29:3d:a2:76:fd:87:5d:7f:a6:d0:13:4d:9d:
         3f:b4:8b:cf:0f:bf:9a:f6:50:0a:a1:21:29:4a:09:4d:e0:f1:
         0d:15:dc:39:13:2e:da:83:09:95:2a:5a:5a:90:6c:51:57:42:
         b5:b0:96:59:8f:0a:c6:c7:0e:5f:52:09:06:69:6b:a9:db:01:
         0c:bd:3a:46:2d:34:f6:16:2b:c4:95:32:dd:fd:88:b0:88:38:
         59:76:b1:c4:ed:6c:60:2c:c5:8a:1f:81:11:3a:7d:50:28:06:
         cf:cc:0b:b7:c1:af:df:c0:6a:bc:e4:be:ce:e3:d0:51:e8:8c:
         0e:2b:ea:fb:12:03:87:4b:52:ee:e0:d4:77:94:d2:cd:32:88:
         0c:c9:12:c0:f8:bf:b7:90:9b:3a:9b:8c:78:f7:18:7d:c8:a7:
         a0:52:66:0e:45:a0:d1:e7:44:fc:8b:4e:ca:76:8a:1e:9f:58:
         5d:25:da:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:19 2026 by rpki-client