Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/e676a379-a8ce-3cce-a10b-2fab086de474.roa
File:                     e676a379-a8ce-3cce-a10b-2fab086de474.roa (raw, json)
Hash identifier:          NSfGlJWgbpFhiBnkxBScCKAu2rbcXxwdh4ie7X0O7tU=
Subject key identifier:   61:AF:72:20:D1:FD:11:B1:FD:43:61:5F:CF:D9:FC:7D:DB:03:F9:91
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584D14AB989C6CEFEE7750C619C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/e676a379-a8ce-3cce-a10b-2fab086de474.roa
Signing time:             Fri 06 Mar 2026 17:43:29 +0000
ROA not before:           Fri 06 Mar 2026 17:43:29 +0000
ROA not after:            Thu 04 Jun 2026 16:43:29 +0000
asID:                     25198
IP address blocks:        108.186.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:ab:98:9c:6c:ef:ee:77:50:c6:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Mar  6 17:43:29 2026 GMT
            Not After : Jun  4 16:43:29 2026 GMT
        Subject: CN=98babd77-f6b3-4e60-a2d6-fa4fc90e6de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6c:67:2a:6f:bf:1f:09:6c:e8:43:16:41:fe:
                    32:ae:77:39:79:e6:e4:bf:c1:d0:b6:ed:ec:ea:11:
                    5d:cf:b9:fe:e2:09:b9:67:8a:f2:19:57:51:e3:eb:
                    c8:c0:4b:87:45:65:64:6a:f9:ee:f5:aa:b5:a6:09:
                    62:7a:34:6b:01:6e:ce:4d:a6:15:14:16:ff:21:92:
                    b9:d7:85:b2:69:5d:40:93:93:80:e3:2a:23:dc:87:
                    78:60:81:82:58:3b:d2:ad:8e:a6:34:70:22:07:d8:
                    9c:2b:7f:8d:71:e8:aa:a5:ff:7b:58:65:10:39:63:
                    ff:be:e8:42:73:7a:70:a5:26:ff:f6:d3:b3:e6:b7:
                    51:fe:6e:53:03:07:96:a0:b5:1f:f6:74:5b:73:fa:
                    cf:d1:4d:9e:ce:e9:75:a5:26:c4:78:a5:3a:e3:ed:
                    f0:18:f4:5b:b6:36:f0:f3:c8:ca:0f:8f:48:73:2b:
                    79:d8:06:65:cd:f3:fe:f8:be:c2:ed:0a:82:48:65:
                    75:30:d9:ed:b7:39:17:a0:ff:6d:26:c9:ed:6f:36:
                    c5:87:a8:2a:84:33:ed:a2:d7:87:0a:2f:4b:41:a1:
                    c5:de:07:49:78:82:c5:c8:dc:fb:1f:ea:35:60:20:
                    c7:92:89:20:3e:aa:57:e5:33:83:e9:d5:1a:11:43:
                    a4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AF:72:20:D1:FD:11:B1:FD:43:61:5F:CF:D9:FC:7D:DB:03:F9:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/e676a379-a8ce-3cce-a10b-2fab086de474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.186.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:b9:7b:24:97:94:8f:eb:ae:51:88:00:be:7c:82:27:44:3f:
         b7:f0:fd:6e:48:30:18:a6:00:ca:60:8e:24:a5:03:60:48:b5:
         5e:7d:c0:53:52:81:87:16:ab:6f:4e:47:6c:23:f7:a6:97:81:
         bb:d7:ab:e9:d1:1d:84:2d:f8:f7:75:3c:e0:a4:52:0a:ea:f0:
         ed:d0:e4:05:54:35:6f:b3:ca:86:5c:60:a0:76:e9:28:15:ee:
         3f:74:a3:45:a1:f4:f2:ab:5a:a8:58:fa:cb:b6:8f:c3:3b:44:
         e9:77:c6:1f:81:b2:a4:71:92:81:43:16:49:c5:71:cd:ad:2a:
         9e:1a:9a:6e:3e:e3:37:e8:f9:68:1c:59:b4:b6:3f:df:36:ec:
         d7:95:c7:a7:1b:15:48:36:f5:d2:cc:58:66:5a:2e:6c:b2:c7:
         0d:54:61:14:00:76:20:7d:ff:32:da:74:c7:df:51:3a:29:63:
         c2:d0:80:db:c2:68:f5:95:ea:62:98:70:2d:54:8c:8d:4f:e2:
         d3:14:de:60:47:51:fc:58:7d:2a:da:14:be:4a:5a:d2:d2:3d:
         41:dc:5f:a5:9e:e8:fe:43:00:09:94:4c:b4:19:35:52:7a:d5:
         3a:e7:0b:e6:43:70:e5:24:01:12:30:c3:e8:e9:e3:d3:6e:7a:
         23:29:97:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 12:22:43 2026 by rpki-client