Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ed19bcca-46e7-3e13-a90a-ad11f38a9e47.roa
File:                     ed19bcca-46e7-3e13-a90a-ad11f38a9e47.roa (raw, json)
Hash identifier:          Vo3KcJq2aH3rsE0jwaVLkwyQRhKStos5tl5uieYwKPc=
Subject key identifier:   88:43:1D:9D:93:CD:6D:56:63:73:A7:70:A4:A4:F1:8B:4B:F0:1A:CE
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F9208588DFF2FE3E76A11B3C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ed19bcca-46e7-3e13-a90a-ad11f38a9e47.roa
Signing time:             Wed 21 Oct 2026 01:00:12 +0000
ROA not before:           Wed 21 Oct 2026 01:00:12 +0000
ROA not after:            Tue 19 Jan 2027 02:00:12 +0000
asID:                     54600
IP address blocks:        107.148.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:92:08:58:8d:ff:2f:e3:e7:6a:11:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Oct 21 01:00:12 2026 GMT
            Not After : Jan 19 02:00:12 2027 GMT
        Subject: CN=e36ef8a9-d971-4634-bf23-f7b85c4478f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:94:49:98:1f:71:fd:9e:c7:6b:c6:84:7d:
                    8c:5a:4b:95:4d:d8:78:a8:9b:fe:a1:e7:59:2e:d7:
                    71:8c:93:a8:a1:9e:f8:cb:eb:9e:3a:6a:ab:1f:5b:
                    84:f4:76:d2:69:ff:ac:46:3c:2b:38:49:74:9a:21:
                    7f:e7:b4:6a:be:78:0e:66:85:e6:87:6c:7c:5d:7a:
                    23:0d:61:09:27:22:ab:81:b3:7b:b4:89:f1:25:67:
                    1e:74:f6:f1:db:aa:68:1e:ea:37:b1:3f:9a:35:8b:
                    6c:31:3a:93:0a:4f:c9:c8:98:e1:f4:41:eb:53:20:
                    0a:5e:e3:e9:45:7f:46:22:db:6e:02:b2:de:fd:1d:
                    fe:e8:ac:35:0c:9b:8b:cc:07:2f:38:f3:93:d9:de:
                    00:53:e3:57:53:8b:31:98:b4:f7:c1:20:24:4b:05:
                    cf:13:85:05:3c:1c:be:71:0b:d0:20:a4:b2:93:f3:
                    51:3e:4a:88:a8:10:40:2b:a2:af:bf:49:4c:7b:ab:
                    41:c7:ee:99:1a:62:f4:a6:49:31:db:03:55:d8:90:
                    9e:91:f4:fa:d4:3e:97:57:be:e2:66:8b:16:5f:da:
                    a2:67:40:ce:1d:9d:bf:66:dc:5d:c4:cf:c1:9d:5e:
                    60:46:67:d0:4a:0a:34:95:06:7b:af:07:91:ac:35:
                    ff:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:43:1D:9D:93:CD:6D:56:63:73:A7:70:A4:A4:F1:8B:4B:F0:1A:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ed19bcca-46e7-3e13-a90a-ad11f38a9e47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:2b:da:16:b8:e6:3a:5e:d3:07:81:93:c1:ed:1d:1b:9a:d6:
         31:5b:d5:58:c3:78:e7:34:9d:bd:bc:2f:4d:b3:6c:e6:cf:89:
         1a:d5:4f:10:b0:17:12:e0:ad:36:fb:d7:14:a5:ef:7d:81:7c:
         07:11:45:76:cd:05:fb:55:0b:15:d8:48:eb:bd:5a:9b:4f:e2:
         5d:75:41:7f:1e:4c:ef:c0:1d:5f:13:c1:cc:d5:d2:2f:bc:87:
         bf:d6:93:15:7b:23:fa:9a:68:b5:65:7a:89:68:13:e8:f8:8a:
         c0:4c:19:14:34:a1:64:49:23:26:98:85:fe:fb:10:ba:45:19:
         6d:49:3c:04:ad:3f:db:55:c0:24:e4:8d:85:95:83:5e:b4:0d:
         05:96:2c:82:a1:ee:52:a2:b5:23:91:53:fc:49:5e:02:f3:91:
         79:69:0e:98:0b:6a:47:85:b3:0e:89:20:47:3a:af:35:e1:20:
         24:bd:c6:2a:8d:51:42:84:71:73:85:39:fb:b2:61:03:e1:bf:
         45:c2:c6:88:3f:08:88:96:87:c7:05:30:8b:4e:50:70:d9:77:
         55:bb:09:87:a3:6e:94:6f:50:67:03:c1:69:0b:b4:7d:47:49:
         45:5d:1f:b6:1c:f1:de:61:7a:23:34:6a:98:00:c9:11:13:81:
         4b:7a:c3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:56:36 2026 by rpki-client