Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dd859f26-fa03-398b-b8b4-951b93c16936.roa
File:                     dd859f26-fa03-398b-b8b4-951b93c16936.roa (raw, json)
Hash identifier:          wXiuUn6WzV+JfIkZdzTSSG5hLhGrAbOiwKrnuUovLMw=
Subject key identifier:   E3:55:0E:92:D3:70:5C:B4:07:BA:B5:0D:06:4A:67:EC:76:45:1E:84
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584E4CE7407B133D66CB78F5F080
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dd859f26-fa03-398b-b8b4-951b93c16936.roa
Signing time:             Fri 26 Jun 2026 13:55:53 +0000
ROA not before:           Fri 26 Jun 2026 13:55:53 +0000
ROA not after:            Thu 24 Sep 2026 13:55:53 +0000
asID:                     154612
IP address blocks:        108.186.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:e7:40:7b:13:3d:66:cb:78:f5:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jun 26 13:55:53 2026 GMT
            Not After : Sep 24 13:55:53 2026 GMT
        Subject: CN=fbcc2a67-cce9-4651-ba39-881e6fd20224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5d:c3:ff:44:5e:e6:df:d3:f3:ad:15:a8:2c:
                    e4:b2:2e:98:0a:4b:cf:3d:0f:a9:a3:2c:ea:8e:31:
                    61:4a:e9:dd:1a:db:12:d9:a3:59:45:d1:b4:66:b6:
                    da:be:92:42:c6:12:46:dd:31:6f:31:45:1a:11:61:
                    19:b2:6b:26:d6:51:19:05:37:0c:0a:18:bc:11:bc:
                    b4:64:4f:d1:9d:54:90:7e:60:9a:7b:e6:e4:98:03:
                    1a:09:9e:7f:69:7e:07:b7:1d:b9:00:a1:2f:3a:c5:
                    79:b4:0b:bf:d4:1d:bc:5c:91:1b:14:12:f0:de:83:
                    ef:58:f8:a0:0d:e2:1a:19:44:6d:b3:94:ab:6f:95:
                    ec:55:d4:82:3d:ce:6a:e6:a6:a1:37:51:88:cf:9a:
                    5a:0b:f2:6e:a0:48:18:53:ee:37:88:5d:d7:e4:bd:
                    8a:1d:98:39:e8:31:a1:ed:f8:f5:87:58:5b:5e:a6:
                    48:05:62:41:f4:af:43:b8:a7:d4:7b:2e:5d:d9:d9:
                    c3:52:1a:e6:49:9c:ab:ee:bc:0a:82:d6:1b:2a:98:
                    2b:8f:3b:d6:76:35:b1:8e:6a:53:45:94:2c:eb:c0:
                    48:89:c7:d6:0c:c1:62:a3:fc:d0:32:a7:e6:47:9e:
                    77:a0:ee:45:f8:4d:9d:ac:4d:ff:43:2b:a3:e2:7a:
                    15:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:55:0E:92:D3:70:5C:B4:07:BA:B5:0D:06:4A:67:EC:76:45:1E:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dd859f26-fa03-398b-b8b4-951b93c16936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.186.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:b2:4e:99:17:4d:89:0b:83:19:f8:0d:3d:57:d5:64:7b:43:
         09:04:e9:10:e8:3c:9e:75:46:9c:40:09:fb:d5:05:51:1c:44:
         df:fa:2d:0d:5f:f3:a4:f4:f3:72:ef:77:81:70:47:8f:8b:48:
         d1:8f:94:e2:2c:4e:e6:d1:4c:eb:d5:5f:1b:2c:11:7f:4f:a7:
         f2:30:49:13:42:9a:a6:68:ce:1b:a4:80:b1:1b:f3:24:af:c9:
         95:20:23:00:9d:73:b1:45:39:c9:c1:1d:67:ad:79:b4:91:1f:
         0d:1e:2a:8e:8a:c7:41:62:6a:6b:23:2a:a1:81:e8:86:9a:52:
         fe:8b:7a:87:41:67:60:8e:7d:a7:88:b7:2e:8f:6e:cb:70:90:
         6e:23:bc:fc:2d:f6:b8:35:6c:51:a2:bb:59:83:9c:8f:aa:ed:
         e3:0c:b6:e5:eb:e7:82:17:f7:28:09:10:9e:03:ca:f9:c6:ce:
         8e:d1:68:56:60:bd:33:ff:ca:4e:c0:ca:be:e4:14:c7:7f:3a:
         89:34:06:a5:e0:6c:0b:86:6d:ce:f1:ff:0b:d5:03:6f:99:b7:
         1a:23:6e:22:68:6b:ff:17:3e:1c:ee:5f:2e:14:11:60:2c:96:
         7d:4c:35:e9:2a:b0:6a:28:d9:43:e6:00:67:28:0a:3e:f6:68:
         ec:c5:53:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:09:03 2026 by rpki-client