Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ebf8982c-8642-3cff-bc7e-3c3f11442754.roa
File:                     ebf8982c-8642-3cff-bc7e-3c3f11442754.roa (raw, json)
Hash identifier:          2CQlU7Z211e57+Qoqd3Yd7DrVGJ0gB86mTgcSPqFSq0=
Subject key identifier:   5A:1B:EF:98:43:BE:7D:F8:15:B2:92:B2:EF:99:FB:3A:94:4D:DA:B7
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F119CF6EB532DCDABD83C0F40
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ebf8982c-8642-3cff-bc7e-3c3f11442754.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     398478
IP address blocks:        107.148.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:f6:eb:53:2d:cd:ab:d8:3c:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=c1fbd57a-942e-4120-9f0e-aa4f495f3dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:65:f5:86:d7:e2:a1:40:f5:5b:86:9a:a7:37:
                    a5:3b:a6:f8:23:59:5c:01:da:d1:4d:55:c2:ea:e5:
                    37:63:33:d0:3f:ac:d0:5b:b2:fc:14:5f:cd:7a:d6:
                    be:cb:14:1b:22:8d:15:d8:0d:ce:8b:4d:c4:13:cd:
                    e0:30:9d:c2:ad:30:5e:dc:54:2e:3d:df:2e:7c:17:
                    72:d1:d4:43:81:b0:ea:bd:ee:0e:e6:f6:40:5f:6b:
                    5c:1c:8b:2b:37:5c:9c:3d:53:5d:8f:c3:f9:f3:55:
                    bd:68:54:ad:76:ee:ce:07:0a:e7:eb:4f:cf:a2:02:
                    fc:47:a9:26:53:ee:27:e0:74:14:16:73:0d:24:c7:
                    82:dc:b9:c9:35:e3:e7:a5:a1:b9:95:69:a4:db:bb:
                    43:ea:88:8f:95:8b:9a:59:f1:10:39:56:25:15:9a:
                    02:90:cc:e1:60:37:ba:39:3c:54:a2:79:0a:79:cd:
                    27:e8:da:b6:58:8a:ee:12:be:6f:bf:85:b0:09:bd:
                    fa:a6:d8:e8:1c:34:96:ab:41:34:89:47:04:de:b2:
                    60:16:50:5d:0e:c2:0a:7e:71:ba:32:8a:22:f1:a6:
                    85:84:e2:8d:c5:38:8e:48:29:d4:63:b8:e6:2f:7f:
                    a4:8a:26:65:5e:8a:b4:26:9a:a9:70:b3:f7:d0:90:
                    2c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1B:EF:98:43:BE:7D:F8:15:B2:92:B2:EF:99:FB:3A:94:4D:DA:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ebf8982c-8642-3cff-bc7e-3c3f11442754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:59:e2:a3:64:db:e4:a4:bd:ec:9c:30:1d:ad:29:e3:e9:e6:
         4a:5c:44:8a:a6:fe:44:e7:00:26:99:d8:a7:31:c5:9d:6c:6f:
         77:c0:51:13:f6:61:5d:be:3e:ce:db:26:ff:3a:4f:6d:e3:7b:
         8a:e0:80:0f:0a:99:12:22:d4:2c:5a:c8:c0:02:61:0c:f5:85:
         26:6b:0d:19:9b:02:8f:2b:4f:15:f5:4f:a0:9d:f4:13:3b:1e:
         d9:09:3b:42:01:b2:62:c5:e8:ba:fc:32:9b:5a:fb:40:a1:eb:
         87:0c:25:ba:ce:b5:25:3b:57:3d:79:de:38:cd:ef:70:fe:dc:
         4c:81:04:76:cb:5c:36:50:d0:3d:aa:72:02:ae:b4:94:95:d7:
         d1:b9:02:f5:d1:71:c0:c5:af:20:68:15:f1:d7:8b:be:fa:ff:
         ab:32:d9:7f:d0:1b:1f:1d:8d:de:e5:7b:9a:12:c3:25:81:a4:
         95:76:66:77:5a:ea:e9:96:12:ef:e9:2a:cb:1d:41:26:99:a6:
         08:1b:96:21:34:5a:49:f7:bd:59:e7:8d:ee:7a:f5:eb:9a:5b:
         86:40:0e:92:7a:27:18:55:bd:e7:b8:d5:c9:8d:07:35:35:5f:
         79:1a:6f:dd:71:4e:25:9b:3b:49:b2:e1:b5:e6:d1:72:43:92:
         ee:1d:31:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPbrUy3Nq9g8D0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
YzFmYmQ1N2EtOTQyZS00MTIwLTlmMGUtYWE0ZjQ5NWYzZGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWX1htfioUD1W4aapzelO6b4I1lcAdrRTVXC
6uU3YzPQP6zQW7L8FF/Neta+yxQbIo0V2A3Oi03EE83gMJ3CrTBe3FQuPd8ufBdy
0dRDgbDqve4O5vZAX2tcHIsrN1ycPVNdj8P581W9aFStdu7OBwrn60/PogL8R6km
U+4n4HQUFnMNJMeC3LnJNePnpaG5lWmk27tD6oiPlYuaWfEQOVYlFZoCkMzhYDe6
OTxUonkKec0n6Nq2WIruEr5vv4WwCb36ptjoHDSWq0E0iUcE3rJgFlBdDsIKfnG6
Mooi8aaFhOKNxTiOSCnUY7jmL3+kiiZlXoq0JpqpcLP30JAsswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFob75hDvn34FbKSsu+Z+zqUTdq3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvZWJmODk4MmMtODY0Mi0z
Y2ZmLWJjN2UtM2MzZjExNDQyNzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5QMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAINZ4qNk2+SkveycMB2tKePp5kpcRIqm/kTnACaZ2KcxxZ1sb3fAURP2
YV2+Ps7bJv86T23je4rggA8KmRIi1CxayMACYQz1hSZrDRmbAo8rTxX1T6Cd9BM7
HtkJO0IBsmLF6Lr8Mpta+0Ch64cMJbrOtSU7Vz153jjN73D+3EyBBHbLXDZQ0D2q
cgKutJSV19G5AvXRccDFryBoFfHXi776/6sy2X/QGx8djd7le5oSwyWBpJV2Znda
6umWEu/pKssdQSaZpggbliE0Wkn3vVnnje569euaW4ZADpJ6JxhVvee41cmNBzU1
X3kab91xTiWbO0my4bXm0XJDku4dMew=
-----END CERTIFICATE-----
Generated at Sat Sep 19 04:05:52 2026 by rpki-client