Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ebf8982c-8642-3cff-bc7e-3c3f11442754.roa
File:                     ebf8982c-8642-3cff-bc7e-3c3f11442754.roa (raw, json)
Hash identifier:          TUP03oBMH87RRYo4R+gjFpZcFOGEhIs5qN4AKUKzoow=
Subject key identifier:   E9:E4:2F:6B:BB:E8:5A:D2:6F:88:94:1D:28:50:DF:0D:14:64:37:7C
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584FB3A66F9DD6C42BAA3A74CD00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ebf8982c-8642-3cff-bc7e-3c3f11442754.roa
Signing time:             Mon 02 Nov 2026 02:00:13 +0000
ROA not before:           Mon 02 Nov 2026 02:00:13 +0000
ROA not after:            Sun 31 Jan 2027 02:00:13 +0000
asID:                     398478
IP address blocks:        107.148.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b3:a6:6f:9d:d6:c4:2b:aa:3a:74:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Nov  2 02:00:13 2026 GMT
            Not After : Jan 31 02:00:13 2027 GMT
        Subject: CN=7437cf1b-bc26-47f9-8070-8f3fd95cd303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:36:0f:2a:f5:00:ad:3d:82:42:04:9e:46:56:
                    46:d5:76:31:d4:4a:e2:77:39:4d:74:65:2f:ec:c2:
                    85:31:42:ac:a2:eb:e1:ea:75:33:4a:f1:9d:7e:54:
                    7b:58:79:1b:33:f1:3c:ea:51:6c:ba:25:02:1f:64:
                    32:5b:3d:04:26:77:eb:8a:1a:f0:14:77:8b:e3:6e:
                    2e:c4:51:ec:db:f5:42:f9:82:0d:71:26:ad:d7:43:
                    f9:9f:8a:1a:bc:67:82:bb:fd:2f:37:48:68:dd:b1:
                    67:ed:fa:3d:3a:a4:1a:3e:ce:76:62:28:29:ed:d8:
                    4e:70:3b:4b:6a:5d:11:33:74:70:43:84:6d:38:c2:
                    e4:95:7e:81:b9:02:1b:1e:73:58:2e:79:46:77:a9:
                    93:68:76:60:d5:59:34:73:a4:2e:3d:46:42:dd:1f:
                    f3:5c:35:3d:8e:cd:0f:71:c3:68:ef:c3:63:ef:d9:
                    54:67:a5:2e:80:fd:a4:3a:ac:cc:ae:83:f8:8f:f1:
                    91:0c:3d:17:b6:ef:1e:56:66:41:95:4b:ac:f3:03:
                    80:a1:96:e2:bf:05:83:42:88:e1:7d:d7:75:7c:b1:
                    74:2c:31:40:d8:77:b8:74:19:08:90:a8:20:b5:7f:
                    4b:ff:4c:9a:01:f5:13:09:9f:6c:84:27:00:57:0b:
                    77:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E4:2F:6B:BB:E8:5A:D2:6F:88:94:1D:28:50:DF:0D:14:64:37:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ebf8982c-8642-3cff-bc7e-3c3f11442754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:17:52:54:93:26:9e:c1:62:d5:43:c4:34:31:99:94:5d:1c:
         e2:80:26:42:cc:6b:b8:cc:c2:eb:aa:21:2c:06:47:35:1f:b4:
         aa:80:72:14:a5:0c:0c:aa:6f:51:ec:06:61:20:f0:4e:a4:a8:
         2b:c5:05:02:71:8e:7b:54:9b:29:f7:96:bf:bf:db:22:02:f4:
         32:f4:c7:1e:63:e4:f9:63:0e:f2:25:c6:d2:51:d3:3a:f7:b4:
         f5:82:10:d9:ed:33:e5:30:75:56:f5:50:7e:1d:72:a4:bc:d8:
         c4:db:58:26:6e:91:1f:f0:27:5a:a2:0e:16:c0:5b:d1:e1:cc:
         16:0f:27:62:2a:87:68:d3:a4:b8:f7:c9:41:e8:a7:59:e3:a9:
         12:30:50:91:3a:1b:95:5b:8f:9c:9e:a6:c0:4f:56:60:31:c9:
         8f:4d:44:e9:2a:77:63:57:4b:c0:61:df:3b:e1:b5:4b:1e:34:
         21:fd:36:07:3c:f1:5f:30:dc:ea:61:ac:4d:26:4d:26:cc:7c:
         7e:70:d9:b3:dc:33:b6:92:3d:a6:b6:99:ea:23:da:cf:a2:49:
         d1:90:3a:3a:89:f1:fa:96:2e:51:6a:eb:c6:ce:77:aa:09:a3:
         b2:96:7f:2b:8b:57:da:c7:64:54:33:a3:e5:69:2c:a6:4c:16:
         22:d8:7f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:21:18 2026 by rpki-client