Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a497ecbd-c3ae-3533-aba1-fa0bfa8a33aa.roa
File:                     a497ecbd-c3ae-3533-aba1-fa0bfa8a33aa.roa (raw, json)
Hash identifier:          Snd9yIDV/WR5fXJ/J4Kra5A1scgxDkqJhZqut+5js74=
Subject key identifier:   F0:96:A7:C9:C3:70:4D:1F:6C:F8:14:E5:3F:53:AC:96:6C:AF:5C:DA
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584DE2B5EB757DA01968DED2FF20
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a497ecbd-c3ae-3533-aba1-fa0bfa8a33aa.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     398823
IP address blocks:        107.148.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:eb:75:7d:a0:19:68:de:d2:ff:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=8841a514-863b-44a8-af9d-9fca65ce5f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:67:e0:e9:09:21:b0:61:88:fd:e3:ee:15:f0:
                    c2:32:1c:c5:44:95:9d:5c:c2:43:76:77:63:f3:1b:
                    63:c3:27:fa:e4:27:2e:0c:8a:a2:62:1d:2b:fd:d0:
                    71:6d:17:b8:05:18:a4:10:05:ab:84:a7:a6:21:c9:
                    da:cd:f2:a8:80:29:37:e8:e6:6f:f3:ac:8c:04:ae:
                    df:95:62:e5:39:6c:c3:28:f1:65:af:65:6c:f6:d4:
                    df:21:ad:b3:f9:c1:0d:a3:63:82:c2:20:e3:af:90:
                    94:e0:53:e6:95:bb:fe:64:b9:ad:2a:25:df:cc:cb:
                    cb:1d:45:73:dc:6b:03:03:26:46:21:98:d8:17:8d:
                    20:ff:55:c1:d9:85:08:a7:fe:26:26:b8:af:21:f2:
                    39:ae:b1:f5:06:97:07:3f:48:61:c4:02:e6:08:27:
                    b4:ca:be:05:7d:3a:df:8d:9c:01:65:54:4b:dc:f9:
                    e1:da:30:fb:76:e5:92:1e:21:f7:28:97:2e:93:d7:
                    8d:43:b4:c3:30:e4:d1:9b:b1:ab:0e:5b:a5:fd:00:
                    fd:74:20:97:cb:3d:2b:59:31:e7:63:23:e3:0c:30:
                    75:1c:74:c5:20:d7:42:ae:57:a0:30:69:a2:4a:d1:
                    e6:56:9f:c3:dd:d2:ee:64:1b:41:33:3c:a9:cf:5a:
                    a5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:96:A7:C9:C3:70:4D:1F:6C:F8:14:E5:3F:53:AC:96:6C:AF:5C:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a497ecbd-c3ae-3533-aba1-fa0bfa8a33aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:9d:2a:e4:ce:99:1a:ad:05:8c:d8:bb:c0:94:aa:41:41:f6:
         07:a2:af:f4:94:55:f5:f6:71:d6:30:31:e8:d4:aa:e4:8e:c0:
         8f:0f:4f:af:1d:05:26:cc:2a:87:af:05:9a:fd:20:3c:6f:37:
         c3:f4:62:fc:ce:fb:60:2c:94:2a:fe:16:6e:e3:7c:a5:6b:24:
         cd:bc:96:97:c1:3a:7c:1f:1a:b8:5d:d6:77:e4:b6:c0:2e:fc:
         5c:2f:fe:be:b8:ed:8f:09:07:97:e8:e3:03:23:cb:b5:a7:ee:
         4f:e5:8d:b8:59:19:80:ae:69:43:05:34:1e:2b:6e:f3:af:a5:
         44:23:bc:06:c9:0c:e1:ab:40:22:d7:4c:6a:ce:49:62:ba:04:
         d1:19:18:30:91:e1:5d:72:a4:1e:fa:a7:22:c4:e7:28:8d:aa:
         3c:7e:fe:c8:4b:71:ce:47:15:5f:aa:42:8c:bf:49:24:ad:91:
         61:da:7c:74:67:fe:a8:2d:bd:f3:23:00:2a:71:b1:c8:05:21:
         bb:53:ea:29:0d:8a:5f:e0:85:d9:6d:db:19:97:57:42:fe:da:
         7a:28:6f:b2:89:12:70:a2:bb:7c:45:3d:ee:d6:54:cd:4f:aa:
         0b:4e:e0:cb:61:f8:62:ad:a3:45:c3:b1:7e:49:cd:e9:7c:92:
         da:b6:97:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:24:02 2026 by rpki-client