Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/8e2655be-04b8-36ad-894f-889a069e37c3.roa
File:                     8e2655be-04b8-36ad-894f-889a069e37c3.roa (raw, json)
Hash identifier:          /wvtJaSjnT3kzxCpWKtnq1bgDtI0zeO3VWd4kFryKkw=
Subject key identifier:   72:21:50:8C:91:15:A0:21:DB:14:77:FB:67:75:8D:2B:94:6B:6E:28
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584DE2B5EC0C3D049121FB4DF700
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/8e2655be-04b8-36ad-894f-889a069e37c3.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     398478
IP address blocks:        107.149.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:ec:0c:3d:04:91:21:fb:4d:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=03c994f1-887d-4208-bb89-c75df31e65bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d6:c9:f7:7f:cd:60:29:3d:15:47:11:96:3c:
                    90:f8:88:b9:7f:c8:23:ff:6d:db:f8:71:56:d3:6b:
                    a8:46:b7:1b:7d:be:1b:1a:88:52:62:60:46:03:d7:
                    ff:15:39:aa:c0:c3:54:fa:06:b1:8b:c9:55:91:8a:
                    50:58:34:e4:89:4e:c3:19:73:f9:54:22:dc:e7:c9:
                    8e:b5:95:e7:15:77:a6:af:2d:a0:e5:a0:4b:63:39:
                    5f:09:83:c1:0a:11:5d:d2:a7:4d:3d:f8:76:2c:0d:
                    b8:0c:1c:e4:82:f6:90:b1:f3:bb:45:3a:6c:43:ac:
                    84:f1:8e:09:af:02:a0:55:70:5e:9d:61:8c:f0:6b:
                    85:6c:e4:aa:70:2a:53:19:3f:e1:36:6e:59:30:cd:
                    0c:24:bc:0d:b6:7f:45:df:40:94:3d:0c:4d:a0:b7:
                    00:ac:6c:af:44:56:ed:c0:1e:99:8d:ea:1e:e6:89:
                    3b:8a:34:33:6b:ee:ee:ef:74:20:ac:29:a5:a5:af:
                    85:49:b5:5e:e1:77:a2:32:8d:82:cf:51:0f:1a:f4:
                    07:9a:59:ac:55:92:87:64:34:55:2b:25:d2:a4:bd:
                    cf:7f:a2:d1:f0:ca:b8:b5:eb:7e:70:dc:79:17:20:
                    f1:88:bf:c3:b0:10:35:11:09:98:ad:4b:91:34:fa:
                    b6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:21:50:8C:91:15:A0:21:DB:14:77:FB:67:75:8D:2B:94:6B:6E:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/8e2655be-04b8-36ad-894f-889a069e37c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:66:87:41:79:98:40:bd:72:2a:11:50:cf:09:06:f2:01:97:
         a2:bc:9c:b2:09:8c:2d:c0:cb:4e:2e:e6:70:38:63:f5:29:aa:
         37:49:41:9f:43:df:75:0a:95:e4:0c:38:9d:72:41:ab:ae:b0:
         b3:ad:86:1b:34:40:c6:a5:72:5f:6a:1b:24:74:36:61:82:76:
         6b:a4:55:b2:b7:59:cc:50:a0:81:4e:71:2e:c8:c3:e4:a0:42:
         7f:a1:34:1d:7d:9c:bb:8b:df:72:87:1f:70:01:9d:56:ce:9e:
         5b:43:8e:5c:fd:8e:ce:c4:0d:36:69:e9:46:7f:b4:8b:74:d0:
         58:df:4e:4d:a2:68:98:88:93:99:2b:67:dc:b4:f5:b0:48:24:
         3d:34:d3:6c:bc:89:af:d9:f8:a5:a7:8e:d5:05:ba:c3:87:c3:
         12:04:f5:8c:e9:ad:59:c6:16:eb:a1:02:ff:c9:a3:42:ac:c8:
         fc:ce:a7:e0:9e:2a:b8:62:35:41:0e:bf:e3:9b:08:01:ab:4f:
         d9:da:50:f3:fb:98:71:12:8e:82:b4:3c:3e:cb:02:84:8f:1d:
         8e:e6:b2:08:69:b5:b0:b7:51:7f:93:07:49:02:4d:b5:e7:df:
         d1:56:3a:2e:d3:66:b9:79:42:5f:08:b5:ec:0b:1d:49:1d:a0:
         2d:1b:21:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:25:57 2026 by rpki-client