Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b24e49b1-e4a6-37f0-8615-45da70bca280.roa
File:                     b24e49b1-e4a6-37f0-8615-45da70bca280.roa (raw, json)
Hash identifier:          4taQdB20fCSk5/1n83mcDiMHdXwWmHyvN3+4FM1muZA=
Subject key identifier:   39:88:E4:6E:96:4A:C9:CA:60:84:68:C1:D6:BC:63:96:AE:DF:2A:F3
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584EEFEC8A1FB897CBF27B92BDC0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b24e49b1-e4a6-37f0-8615-45da70bca280.roa
Signing time:             Sun 23 Aug 2026 23:23:18 +0000
ROA not before:           Sun 23 Aug 2026 23:23:18 +0000
ROA not after:            Sun 22 Nov 2026 00:23:18 +0000
asID:                     198566
IP address blocks:        107.148.122.0/24 maxlen: 24
                          108.186.55.0/24 maxlen: 24
                          108.186.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ef:ec:8a:1f:b8:97:cb:f2:7b:92:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Aug 23 23:23:18 2026 GMT
            Not After : Nov 22 00:23:18 2026 GMT
        Subject: CN=be5213ca-dd07-4a8c-8218-dcaeb942155e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:da:33:50:cd:82:2b:5c:e0:c7:4a:6a:47:74:
                    63:51:76:ba:f3:b8:19:dc:e6:56:d2:a3:22:3b:7c:
                    73:a4:ac:20:98:c9:c7:1a:52:a4:8f:5f:7e:81:46:
                    bc:7d:b3:b1:f0:6f:24:a1:59:68:22:eb:17:d8:0b:
                    51:1e:b9:ee:d6:91:c5:a7:9b:45:12:60:ad:65:30:
                    8e:79:95:f5:02:7a:21:66:2a:47:43:48:de:52:d4:
                    01:76:a5:3f:2e:65:ce:a6:20:c3:2a:9c:e1:4c:34:
                    44:4b:d8:93:73:88:14:ca:f1:06:a8:d9:44:9b:04:
                    9d:6b:47:8d:92:a1:82:90:5a:87:43:75:c6:d0:57:
                    9b:e5:08:a9:63:8b:d4:71:0b:3a:67:29:99:90:68:
                    85:37:b1:a3:8c:ba:08:73:1b:fb:28:1f:f7:da:64:
                    8a:53:9d:e1:55:3d:81:2e:8a:66:53:21:8a:64:39:
                    23:59:21:fc:2a:31:f7:e7:34:e6:b1:d9:36:f3:3a:
                    bd:12:93:1b:c7:bb:32:1b:84:2a:c5:09:a6:ac:70:
                    da:9e:1e:54:e7:74:ca:35:a6:b7:4b:c6:64:98:d4:
                    c5:40:ae:05:f6:67:57:f9:63:37:c5:45:75:99:85:
                    d8:ac:c1:a8:47:59:a2:e2:ed:4c:4c:10:f4:24:cf:
                    11:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:88:E4:6E:96:4A:C9:CA:60:84:68:C1:D6:BC:63:96:AE:DF:2A:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b24e49b1-e4a6-37f0-8615-45da70bca280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.122.0/24
                  108.186.55.0/24
                  108.186.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:42:24:54:01:c0:bb:03:92:a9:1d:91:98:4c:52:0d:b6:d6:
         b2:08:42:22:69:c4:fa:55:ae:ed:a4:f5:aa:0f:10:80:ad:e7:
         4c:db:0f:b4:01:38:0e:a4:b7:45:46:b8:59:61:0b:99:36:f3:
         a4:fc:53:f7:f2:78:b3:c9:32:da:56:1f:38:67:f3:5e:d6:b7:
         ea:30:d2:2a:77:75:7c:2c:13:de:48:dc:e5:8f:d9:2f:57:5f:
         89:92:ab:12:39:a0:05:60:48:7c:30:e0:0f:0f:20:71:a7:69:
         71:2c:32:02:0d:cf:dd:30:4e:be:a6:a2:61:fb:5b:7c:fc:bb:
         72:7b:1e:b1:fe:74:ff:08:2c:05:1d:98:b5:ab:56:39:53:e8:
         3b:2f:af:f1:5a:78:9c:95:df:79:6a:b5:40:3f:19:ed:23:09:
         f4:d7:ac:6e:ae:a0:e7:a2:29:c5:a0:f3:65:16:81:2b:94:b8:
         44:d1:40:8b:7a:ef:ef:ab:f0:62:2c:ba:85:9d:9a:44:56:55:
         32:68:2e:67:e8:87:d8:e3:e9:4c:bd:01:6d:b7:1e:71:ca:9c:
         0a:c4:c5:c8:d9:12:8e:44:f5:0b:45:aa:9d:65:90:73:59:26:
         59:05:08:9c:3a:47:1b:67:41:a2:5f:17:3e:42:e8:55:5e:34:
         f4:a9:44:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:43:16 2026 by rpki-client