Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/adc7c267-9e05-3ecf-92fb-a50a7899cc08.roa
File:                     adc7c267-9e05-3ecf-92fb-a50a7899cc08.roa (raw, json)
Hash identifier:          y8CU3rBfz4vlQ+KySAa5UYw+8QcCPUvw2JgGsp26k54=
Subject key identifier:   5A:AA:AC:A4:A5:12:85:05:8D:32:50:3D:4F:3A:61:B0:F5:DB:EC:7A
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584EF71E6B98CDB590C602CD1440
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/adc7c267-9e05-3ecf-92fb-a50a7899cc08.roa
Signing time:             Wed 26 Aug 2026 13:14:28 +0000
ROA not before:           Wed 26 Aug 2026 13:14:28 +0000
ROA not after:            Tue 24 Nov 2026 14:14:28 +0000
asID:                     402799
IP address blocks:        107.149.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:1e:6b:98:cd:b5:90:c6:02:cd:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Aug 26 13:14:28 2026 GMT
            Not After : Nov 24 14:14:28 2026 GMT
        Subject: CN=def75da9-4944-4113-98bc-8e27cbc287fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e2:b4:a4:19:0a:80:79:48:c0:bc:f8:29:40:
                    69:e4:83:df:06:1d:60:7e:9b:16:53:0a:0f:82:33:
                    45:49:84:ae:9f:19:97:39:35:18:f3:1d:bf:a3:55:
                    86:75:1d:62:9b:0f:eb:2e:c3:3d:53:f7:a0:94:f8:
                    05:44:cb:a1:5f:32:93:b9:51:38:ea:ac:28:03:cc:
                    da:77:7e:5f:0f:07:58:9d:fb:43:a1:81:6a:5e:5f:
                    32:6d:35:61:b6:b6:c3:56:56:2a:82:15:fc:71:7c:
                    5b:59:8a:2d:12:7c:ee:e3:8c:c3:07:16:d2:c5:22:
                    89:80:a2:41:dc:9e:37:67:90:ef:14:eb:c4:61:5f:
                    fe:18:3d:3a:4a:ff:88:1d:6a:6b:55:4c:13:13:40:
                    98:41:40:b4:e1:f6:09:8d:ee:ac:53:ff:82:ba:f9:
                    d2:bb:90:2c:21:f9:b4:90:8d:f7:72:64:05:38:69:
                    07:d3:8c:db:05:66:f0:6a:c9:ad:df:b5:ba:a9:df:
                    69:07:c3:c9:b9:d7:35:8b:b1:66:53:f9:55:f3:43:
                    46:b0:ad:fd:34:b1:6c:21:f3:9d:8d:77:04:4c:4a:
                    11:eb:2d:ac:b9:e5:9f:5c:b7:96:8a:3e:54:50:52:
                    ac:5d:40:35:a1:7b:67:43:e1:17:60:1f:56:16:ca:
                    bb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AA:AC:A4:A5:12:85:05:8D:32:50:3D:4F:3A:61:B0:F5:DB:EC:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/adc7c267-9e05-3ecf-92fb-a50a7899cc08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:1d:b1:b0:f6:00:d5:f2:9a:e9:45:3d:9a:6d:09:e7:0d:77:
         be:16:da:e8:60:4f:f7:8b:81:e9:7e:d7:07:71:51:c2:bb:ce:
         4f:c7:01:df:28:c5:bd:21:16:be:2d:73:fd:76:2b:90:7e:bf:
         67:f8:fe:d1:ae:0f:b7:14:85:e7:1b:b1:c5:ff:f7:ac:b2:1a:
         f2:19:ce:b1:a6:09:51:a3:73:02:49:e3:5c:34:59:e9:0c:cd:
         17:30:9a:2d:57:95:53:f5:71:00:60:23:00:8f:4b:ce:11:bc:
         c3:68:e2:fa:8a:17:82:29:10:8b:4a:de:09:12:05:6a:09:80:
         61:7b:e7:4c:e5:71:c5:da:c2:46:e2:19:c3:23:41:78:72:8d:
         ce:64:a1:c5:c7:3d:8c:38:c6:9d:2d:19:74:2d:cb:0b:01:97:
         5d:a7:1f:c4:04:64:d3:54:f6:1a:fe:ef:ee:05:ed:7d:9c:a0:
         08:eb:94:ef:f6:a8:3a:5c:f6:e4:bc:f0:bf:dc:ee:9e:33:8a:
         ad:34:d5:f4:2a:8b:2d:28:18:e3:13:c4:b8:bd:e9:94:73:49:
         30:53:e7:ca:6f:9e:b5:6f:fb:3e:ff:57:78:a4:38:4c:5b:5a:
         ed:c8:d9:46:b9:6b:7b:2b:13:74:bf:8f:2d:50:37:5c:54:b3:
         d2:22:64:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:30:44 2026 by rpki-client