Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/9acedfa8-9b7e-3ccb-aaf9-55ce050ba9ec.roa
File:                     9acedfa8-9b7e-3ccb-aaf9-55ce050ba9ec.roa (raw, json)
Hash identifier:          MxQpsmFE0fYLy81KeMPrRnUSPFV41/ba96AzZPMbSIU=
Subject key identifier:   14:80:63:9E:67:5B:1F:94:A1:23:48:2B:DD:A9:F6:48:FE:D1:90:6F
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F889246A3905E1C9AE48D9340
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/9acedfa8-9b7e-3ccb-aaf9-55ce050ba9ec.roa
Signing time:             Sat 17 Oct 2026 15:40:07 +0000
ROA not before:           Sat 17 Oct 2026 15:40:07 +0000
ROA not after:            Fri 15 Jan 2027 16:40:07 +0000
asID:                     147281
IP address blocks:        108.186.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:88:92:46:a3:90:5e:1c:9a:e4:8d:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Oct 17 15:40:07 2026 GMT
            Not After : Jan 15 16:40:07 2027 GMT
        Subject: CN=a36d54c3-d172-40ac-845a-51f630e79ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ed:33:3e:9a:3d:dd:b9:26:ce:b7:5c:83:ff:
                    2f:45:3b:24:72:c8:74:2b:c1:fa:fd:1f:bc:4b:b0:
                    06:12:37:c1:ed:1a:ec:ac:26:df:81:c1:21:bf:15:
                    a9:5e:51:d6:7b:20:65:ea:d0:ec:23:99:c3:0b:bc:
                    cc:cd:81:4b:4b:9a:47:5a:09:06:ec:73:30:a8:be:
                    91:fa:10:88:4d:34:ed:1f:77:51:a5:75:25:88:4e:
                    b8:a8:3e:18:28:7f:56:8e:1b:40:f5:8d:77:34:9e:
                    7c:c5:60:1e:5b:fc:26:56:df:88:6f:f7:46:9d:37:
                    1c:fa:a9:ab:91:09:ca:ca:5c:e5:07:fe:ca:bf:08:
                    fe:6e:7e:5f:8d:ae:0a:8b:7a:a0:a6:f1:f3:f3:92:
                    54:5e:b4:99:4e:7f:0f:d3:d9:04:03:b9:04:b3:78:
                    93:a8:ea:32:3b:df:2a:a4:96:c2:db:3c:eb:01:89:
                    8f:c1:c4:f0:76:40:2f:3d:06:56:df:b2:80:29:3f:
                    f3:f2:1c:48:6c:74:05:e3:61:63:c3:01:6b:ec:8c:
                    4c:62:8e:71:48:c6:b6:13:0b:48:63:5f:dc:de:c0:
                    3d:18:5d:55:92:71:de:78:e9:81:9a:28:c3:7a:eb:
                    38:40:f6:e7:60:60:33:d1:87:e7:77:d5:8e:89:1e:
                    00:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:80:63:9E:67:5B:1F:94:A1:23:48:2B:DD:A9:F6:48:FE:D1:90:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/9acedfa8-9b7e-3ccb-aaf9-55ce050ba9ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.186.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:86:24:af:5a:36:36:47:76:e8:9a:fa:27:e6:72:d4:f9:f0:
         fc:8a:d9:70:86:9a:8b:7a:c2:ba:f6:49:57:80:b5:0b:76:95:
         90:b0:ae:7b:5f:20:d4:f8:6a:6d:37:ed:a7:cd:ed:d4:6a:0b:
         4a:da:1e:b6:79:44:aa:87:ed:42:fe:b6:4b:6f:13:2d:d7:ad:
         8e:98:f2:b9:e2:cc:1d:20:94:2e:eb:11:ee:43:4d:dd:59:87:
         c6:45:03:04:53:d9:6a:04:dc:2b:a0:cf:77:c2:d6:a0:86:e5:
         51:4c:29:d6:6a:b8:1e:20:5b:04:e2:08:13:18:96:6a:90:df:
         08:49:6f:2a:6f:74:b0:ac:fa:39:61:f9:82:5d:59:97:18:11:
         9d:b3:8c:aa:70:4c:75:2d:85:08:7c:0a:19:81:c9:c0:6c:38:
         ee:75:55:72:b7:c7:9a:76:8b:cc:ff:e6:86:8c:5f:f6:a1:66:
         ed:d5:37:b0:2b:e1:ab:76:4b:b0:f3:34:67:a3:2d:79:a1:da:
         28:7f:71:eb:3e:7a:f6:32:73:22:8b:02:d0:8b:b6:02:d5:0d:
         36:5b:30:9d:85:80:1c:20:1c:73:ed:0d:1a:27:29:af:fa:57:
         2a:0b:b7:bf:3d:0a:29:5e:04:3d:26:76:3f:b5:11:92:37:97:
         3d:14:20:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:24 2026 by rpki-client