Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b8446571-a19a-3af3-a321-273ca1cfb516.roa
File:                     b8446571-a19a-3af3-a321-273ca1cfb516.roa (raw, json)
Hash identifier:          X8YVHRKDl2p6L7h/A2utXHHfcw3MEL5BqYXryjjPl60=
Subject key identifier:   B7:74:43:94:F7:78:85:B9:F0:37:9D:6D:CC:6D:C0:0E:19:54:71:90
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584E1A9AF7F5EC26A4D5529BEF00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b8446571-a19a-3af3-a321-273ca1cfb516.roa
Signing time:             Mon 08 Jun 2026 13:31:46 +0000
ROA not before:           Mon 08 Jun 2026 13:31:46 +0000
ROA not after:            Sun 06 Sep 2026 13:31:46 +0000
asID:                     394432
IP address blocks:        107.149.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:9a:f7:f5:ec:26:a4:d5:52:9b:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jun  8 13:31:46 2026 GMT
            Not After : Sep  6 13:31:46 2026 GMT
        Subject: CN=ec9e8590-281b-4fd4-9023-312da96f3146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2c:a1:0d:f5:56:1a:96:76:7a:82:8b:c5:f4:
                    91:bb:e3:d8:3a:53:29:2f:7f:e7:c9:0f:44:5d:4f:
                    53:ae:18:bd:46:5d:03:d6:f5:1c:de:90:cd:ef:8d:
                    b7:2c:c0:6b:a6:79:11:05:41:52:3f:d1:30:23:2b:
                    95:41:e1:52:43:cc:7c:1f:a3:cf:f8:41:46:61:3c:
                    36:8a:33:10:7f:a9:27:07:3a:99:11:99:92:6c:37:
                    32:6a:95:17:11:cc:b8:1d:f1:b9:ec:e9:84:50:98:
                    12:c3:80:01:7b:88:21:73:d6:e5:1c:59:59:46:ec:
                    a8:e1:b9:c6:59:be:c1:8c:c1:e4:7d:db:ee:43:07:
                    82:1b:71:44:49:1e:7d:44:86:c1:8b:fa:36:6f:2c:
                    40:23:0c:43:de:d2:78:e3:ec:5d:87:50:7c:d2:0b:
                    e4:e9:94:3c:11:ed:58:d3:36:05:2c:67:b0:87:77:
                    39:c9:c7:6a:a3:e7:eb:cc:ef:06:53:dd:e9:51:dd:
                    a1:76:ac:2d:4c:37:4f:0b:25:7c:97:18:d9:17:a2:
                    d1:15:68:1e:76:07:c8:a4:2e:8f:1a:f0:47:11:60:
                    22:53:4c:8f:75:99:5c:f0:f7:49:08:6a:4b:40:54:
                    13:f9:bc:24:15:6f:3e:e9:81:ba:5c:21:12:be:87:
                    dc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:74:43:94:F7:78:85:B9:F0:37:9D:6D:CC:6D:C0:0E:19:54:71:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b8446571-a19a-3af3-a321-273ca1cfb516.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:0b:d8:60:e8:eb:e5:52:a3:80:46:7a:f5:83:3a:6b:32:d5:
         75:5f:e7:d0:ae:0c:ad:c9:ca:12:86:bf:c8:14:30:f2:ef:17:
         6e:90:59:0b:34:93:80:e4:90:8a:ce:9c:d6:dd:13:2d:62:7b:
         b7:9e:bb:35:4c:d9:ca:8e:15:68:1c:d0:99:dc:05:5e:00:3b:
         86:55:32:31:6d:9c:f4:c3:70:23:da:32:2b:eb:b4:9f:ea:b8:
         6a:a6:90:83:16:d5:bb:fd:d8:98:1e:98:ab:cf:91:02:3a:8c:
         80:4f:d8:d4:83:bb:86:92:27:d7:d3:37:4e:47:59:c1:82:dd:
         4a:52:29:3f:40:b9:b2:ff:69:11:98:fd:11:1e:37:d4:7c:70:
         6d:45:b5:df:26:dd:ca:e5:b4:53:80:cf:a4:f4:d9:93:58:a0:
         6f:b0:0c:5e:67:1b:65:0d:25:87:0e:e3:94:16:64:6c:a7:c9:
         4e:e6:a9:99:b1:ec:7b:9b:94:de:00:d0:7d:e0:38:be:4d:3a:
         21:15:47:91:5d:06:cf:aa:18:2e:69:06:26:58:bd:09:21:f2:
         f0:df:b6:7b:14:6d:33:ec:0b:19:c0:1f:42:09:cc:48:d7:74:
         96:f8:f5:69:7b:f6:3b:5e:e4:43:0e:b8:06:5b:eb:8a:90:6f:
         b9:e4:98:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4amvf17Cak1VKb7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDYwODEzMzE0NloXDTI2MDkwNjEzMzE0NlowLzEtMCsGA1UEAxMk
ZWM5ZTg1OTAtMjgxYi00ZmQ0LTkwMjMtMzEyZGE5NmYzMTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyyhDfVWGpZ2eoKLxfSRu+PYOlMpL3/nyQ9E
XU9Trhi9Rl0D1vUc3pDN7423LMBrpnkRBUFSP9EwIyuVQeFSQ8x8H6PP+EFGYTw2
ijMQf6knBzqZEZmSbDcyapUXEcy4HfG57OmEUJgSw4ABe4ghc9blHFlZRuyo4bnG
Wb7BjMHkfdvuQweCG3FESR59RIbBi/o2byxAIwxD3tJ44+xdh1B80gvk6ZQ8Ee1Y
0zYFLGewh3c5ycdqo+frzO8GU93pUd2hdqwtTDdPCyV8lxjZF6LRFWgedgfIpC6P
GvBHEWAiU0yPdZlc8PdJCGpLQFQT+bwkFW8+6YG6XCESvofcvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLd0Q5T3eIW58DedbcxtwA4ZVHGQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYjg0NDY1NzEtYTE5YS0z
YWYzLWEzMjEtMjczY2ExY2ZiNTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5V5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFEL2GDo6+VSo4BGevWDOmsy1XVf59CuDK3JyhKGv8gUMPLvF26QWQs0
k4DkkIrOnNbdEy1ie7eeuzVM2cqOFWgc0JncBV4AO4ZVMjFtnPTDcCPaMivrtJ/q
uGqmkIMW1bv92JgemKvPkQI6jIBP2NSDu4aSJ9fTN05HWcGC3UpSKT9AubL/aRGY
/REeN9R8cG1Ftd8m3crltFOAz6T02ZNYoG+wDF5nG2UNJYcO45QWZGynyU7mqZmx
7HublN4A0H3gOL5NOiEVR5FdBs+qGC5pBiZYvQkh8vDftnsUbTPsCxnAH0IJzEjX
dJb49Wl79jte5EMOuAZb64qQb7nkmGI=
-----END CERTIFICATE-----
Generated at Thu Jun 11 14:18:16 2026 by rpki-client