Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/cb01390c-c5ae-302a-bb93-1ed4f2d195e4.roa
File:                     cb01390c-c5ae-302a-bb93-1ed4f2d195e4.roa (raw, json)
Hash identifier:          SGrFAIcNSxPb8C//37O5t6rNXnknsfleHfnfynQQF2E=
Subject key identifier:   76:95:0F:7E:8F:66:E6:35:7D:51:00:BC:4E:2F:A5:C0:0E:77:FB:92
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584DD2C489396964BA25EF67A7B0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/cb01390c-c5ae-302a-bb93-1ed4f2d195e4.roa
Signing time:             Wed 13 May 2026 19:57:19 +0000
ROA not before:           Wed 13 May 2026 19:57:19 +0000
ROA not after:            Tue 11 Aug 2026 19:57:19 +0000
asID:                     203669
IP address blocks:        107.149.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d2:c4:89:39:69:64:ba:25:ef:67:a7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May 13 19:57:19 2026 GMT
            Not After : Aug 11 19:57:19 2026 GMT
        Subject: CN=8e6f36db-c214-407c-a421-fd070060cdb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:96:54:02:ab:99:63:75:d9:ea:6f:ad:6b:7a:
                    7d:33:c7:a3:a4:69:a6:75:d0:9a:d3:fe:6d:ec:fa:
                    9d:fd:81:ae:57:fd:ab:db:70:f9:9c:23:2a:71:4c:
                    59:8a:8c:48:43:aa:e0:ef:a0:9b:11:2f:5c:3f:47:
                    2d:c4:16:79:40:d8:98:fb:77:7d:a0:c2:a4:78:64:
                    92:c6:6a:23:16:e4:cd:23:79:dc:35:df:9a:43:47:
                    cb:a8:75:da:9b:30:5a:42:db:a8:e2:85:77:de:36:
                    74:fa:58:a8:e7:fb:97:36:1e:dc:a6:bc:a0:0f:be:
                    b2:a1:97:3f:68:4a:3b:12:4f:3c:aa:c6:dc:69:2d:
                    2c:d1:11:a9:f9:0e:f3:2c:63:93:73:a8:3b:e5:5f:
                    71:cc:e0:d6:2e:c4:d1:10:31:8a:41:fc:c0:11:06:
                    c4:79:83:6f:18:7a:c3:59:03:20:db:6a:4a:0f:68:
                    10:fd:e0:38:b8:d0:ef:7b:72:14:36:e2:59:ad:8f:
                    67:c5:8e:e1:06:d4:73:d1:d3:5b:95:3f:81:7e:e8:
                    a1:f6:d7:79:cc:85:65:00:11:fc:c3:de:65:5b:e2:
                    26:9b:ca:c7:52:35:6d:6d:b4:22:d0:d6:11:cc:ee:
                    9c:7c:23:2d:6e:47:76:71:e8:82:78:46:4d:82:ba:
                    47:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:95:0F:7E:8F:66:E6:35:7D:51:00:BC:4E:2F:A5:C0:0E:77:FB:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/cb01390c-c5ae-302a-bb93-1ed4f2d195e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:26:49:66:38:62:c9:d1:5f:98:df:1d:14:1f:fb:1d:00:c3:
         88:bf:69:93:c9:40:fe:18:a2:ad:60:e0:10:ed:09:2d:aa:70:
         80:f8:b6:9b:bc:d7:49:51:24:d9:32:08:1f:fd:1c:a8:0a:dc:
         86:f7:45:12:fe:de:52:c6:9a:ae:61:6c:8a:00:e6:25:1a:e6:
         13:f7:d7:00:6d:30:3f:9a:7a:b5:fc:a3:b5:78:2a:98:8f:68:
         b5:28:9c:a6:09:97:80:ee:cf:99:f1:9d:fd:20:86:83:37:d2:
         1c:cc:99:05:55:17:f3:22:67:7c:28:8d:52:df:97:60:f3:7e:
         4e:7f:14:14:bc:6c:46:16:b4:f6:29:51:5c:cd:77:c1:b5:d4:
         02:78:2a:44:b8:57:a9:ed:24:cf:32:47:e9:57:a1:8c:8a:1b:
         33:6b:5d:42:e3:e8:04:0e:aa:49:bb:e1:42:ee:1c:77:9c:30:
         42:e5:e8:80:89:7a:b0:9c:a1:ce:54:fd:99:29:48:19:30:d0:
         2c:f6:37:c3:73:69:68:44:f6:1d:ec:48:ad:86:b1:5c:de:99:
         49:59:f4:ef:94:2c:ea:0d:ea:81:ec:bc:35:1d:e7:cb:d6:d4:
         0e:ce:79:ba:08:bd:6e:02:42:bb:6a:a8:29:60:e1:9c:1d:bd:
         a5:c6:96:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:20:31 2026 by rpki-client