Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d3e8483b-0721-338e-9284-245bd8373242.roa
File:                     d3e8483b-0721-338e-9284-245bd8373242.roa (raw, json)
Hash identifier:          p0ALgcy10+kiO7slLNdVH6AYJe+Vbfbqn/rjRkdeqUs=
Subject key identifier:   96:8C:11:81:86:23:63:4C:82:81:A5:09:BE:F5:02:E0:A4:77:80:9C
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584E3069AD881ECD7EDB92A1CA80
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d3e8483b-0721-338e-9284-245bd8373242.roa
Signing time:             Tue 16 Jun 2026 09:00:12 +0000
ROA not before:           Tue 16 Jun 2026 09:00:12 +0000
ROA not after:            Mon 14 Sep 2026 09:00:12 +0000
asID:                     394432
IP address blocks:        107.149.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:30:69:ad:88:1e:cd:7e:db:92:a1:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jun 16 09:00:12 2026 GMT
            Not After : Sep 14 09:00:12 2026 GMT
        Subject: CN=3effd6c4-f05c-4498-a15b-b15f43492b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:47:9f:dd:9b:bc:7b:2b:92:80:d9:8b:7f:9f:
                    7a:3f:71:b2:4e:b7:58:bb:6b:e0:6d:28:83:f5:e8:
                    ec:26:c7:39:36:7e:a3:52:c5:66:9a:09:94:9e:bc:
                    32:0d:e1:d6:fc:29:84:17:72:3f:d7:04:23:6b:d0:
                    83:b0:17:b3:e9:1c:10:4c:cc:a4:0e:b8:f0:13:27:
                    fa:70:0b:cc:fc:ce:36:2c:31:3b:46:b6:85:01:8f:
                    44:83:a9:77:33:26:5c:5a:24:02:3b:cf:3b:3d:ca:
                    10:de:2d:73:0c:6e:da:34:92:f6:ef:37:b9:67:e9:
                    1a:74:51:7a:4d:b4:13:7a:e7:49:3f:7b:a9:68:38:
                    2d:be:f2:db:6c:81:d1:f3:97:da:ff:5f:cd:67:5d:
                    51:05:ed:aa:85:82:77:48:0d:04:bd:ca:e9:3e:46:
                    85:8a:c3:1f:3e:78:bf:f2:e5:e9:1f:f8:3b:90:ab:
                    61:01:57:da:f9:4f:db:38:f1:29:26:e5:a4:7f:4c:
                    f0:5c:dc:03:23:d8:1f:99:3f:07:81:05:45:32:02:
                    70:b4:60:6a:ca:db:c1:97:cc:f1:88:fd:35:1d:f6:
                    01:95:cd:e7:d6:db:d5:5f:47:34:3d:ff:08:8c:d2:
                    96:c4:e2:5b:bc:25:be:1a:b1:8e:c7:18:fa:c2:f2:
                    7d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8C:11:81:86:23:63:4C:82:81:A5:09:BE:F5:02:E0:A4:77:80:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d3e8483b-0721-338e-9284-245bd8373242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:75:f1:eb:ea:47:a2:4e:d9:ed:5c:1e:49:a0:31:83:c9:96:
         0d:8d:0d:35:d3:31:cc:ea:87:ba:33:23:5b:bc:c9:78:fc:7c:
         0e:65:83:3f:49:7a:f2:81:57:0c:53:d3:be:2b:7b:16:5e:52:
         6a:68:a5:4f:15:2b:90:18:3e:6e:c4:1c:4a:00:1a:b6:50:51:
         4d:af:0e:21:ee:76:d9:d0:0b:b6:6f:71:d4:43:64:11:03:33:
         21:3f:c3:4c:46:ee:2e:0b:19:11:fb:4b:a7:e6:92:9a:62:53:
         c3:20:78:05:78:e1:a2:d0:9a:36:e7:28:8c:f2:9a:51:39:3e:
         f0:b3:dd:35:af:a0:e0:fc:82:96:c1:34:e3:9d:5c:d5:d8:10:
         d7:f7:2d:7c:89:8f:7b:3c:43:7d:43:a4:1f:81:17:37:61:33:
         80:f7:c0:af:9e:fd:d3:8e:e7:16:a6:8d:97:a6:19:66:14:04:
         ab:12:db:e8:34:28:f9:82:ae:da:f8:de:80:cc:f3:db:e9:94:
         70:8c:3a:0b:43:0c:73:33:37:0f:c0:ea:82:b1:3e:27:dd:79:
         c8:d6:21:22:cd:e9:2f:ef:7e:44:bd:80:fb:6f:c5:8d:6d:07:
         c8:4b:f1:8f:7f:c9:44:5c:69:54:a3:f8:79:9b:6d:22:33:9d:
         e7:58:e8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:00:15 2026 by rpki-client