Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/edb23b91-d765-3a18-a66d-bbe4f8ea5fa3.roa
File:                     edb23b91-d765-3a18-a66d-bbe4f8ea5fa3.roa (raw, json)
Hash identifier:          ehIpNttxEhVrD7TyBUC8cpiAud9rBP8ltYeJWdmGMts=
Subject key identifier:   9A:4C:76:B8:08:33:AF:CC:38:7A:10:67:8F:76:03:2C:7C:BD:9D:EE
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584EC0A724492701320EE76CADA0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/edb23b91-d765-3a18-a66d-bbe4f8ea5fa3.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     398823
IP address blocks:        107.148.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:24:49:27:01:32:0e:e7:6c:ad:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=ac31bbcb-5225-4aeb-abf8-46aab82bf5c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c2:d6:b5:b2:e2:6c:fc:53:3f:9c:9b:c6:b0:
                    03:ee:4c:4a:78:e7:f2:71:de:75:30:d6:a8:b2:69:
                    e2:6e:df:d7:4c:6e:fd:dc:df:0d:ca:fc:91:8b:69:
                    e4:4b:f9:56:32:12:e7:e3:0d:bd:9e:c9:be:b8:c4:
                    ac:1d:a0:fb:93:e6:6c:8c:c8:e1:45:0a:6e:03:40:
                    b2:5b:d0:9c:1b:77:51:f1:7d:bd:03:db:c0:4a:85:
                    fb:cd:d7:f4:10:e1:8c:f3:84:01:68:fd:5b:04:9e:
                    0a:dd:52:be:0a:38:f5:18:8a:5b:0f:66:5c:32:e0:
                    18:2d:87:9b:07:c7:6d:94:e6:82:ba:13:a7:d8:34:
                    33:55:82:d1:8c:a0:78:70:5e:71:95:0c:68:de:f1:
                    41:1a:c3:54:53:30:09:f7:0a:87:fc:df:d7:a1:3b:
                    2a:73:dd:83:0b:73:8a:d3:d2:33:c3:35:97:b5:12:
                    22:df:99:ef:d5:03:c7:50:31:2c:17:8f:63:35:16:
                    fa:38:aa:f1:6a:dc:9a:3b:38:48:a5:c7:e6:fb:b9:
                    9e:d1:73:7e:28:fe:df:a0:26:16:51:c5:d8:74:ea:
                    27:72:05:06:78:b1:1f:55:62:57:0f:79:7c:d4:d0:
                    dc:2e:22:b2:9e:bb:fa:dc:ac:0d:99:8e:56:cd:28:
                    ca:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4C:76:B8:08:33:AF:CC:38:7A:10:67:8F:76:03:2C:7C:BD:9D:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/edb23b91-d765-3a18-a66d-bbe4f8ea5fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:18:f0:e8:47:6e:60:fa:8d:d8:bc:27:a9:be:91:2c:08:cc:
         a8:7c:50:82:ea:e6:2d:00:56:2a:2d:e7:30:f7:9d:4e:1e:5e:
         80:a7:d7:72:77:9c:f3:77:7b:68:51:ab:53:3e:e7:db:b1:8d:
         26:8b:0b:c3:f8:b8:aa:75:e7:51:79:77:d3:2f:d3:93:b9:3e:
         d2:5a:f6:30:43:8b:1a:f3:2d:60:cb:43:01:48:09:6c:5c:b6:
         dd:ac:30:d8:b3:9c:2d:d6:68:da:f7:76:78:95:85:58:24:87:
         8e:3d:72:b1:bf:3e:c1:e6:8b:0d:23:de:9e:c7:94:da:e1:51:
         d0:55:fc:e9:13:ef:71:8d:b1:3b:08:1c:48:53:61:4f:4f:a8:
         b2:da:15:1e:0d:35:76:94:8b:84:94:ad:c8:a7:97:30:8e:a2:
         20:cc:b8:0c:30:7a:e2:19:2c:c0:b4:79:c7:94:d6:d4:8a:08:
         d4:c4:2b:7e:85:a5:61:ca:32:e3:de:93:c8:f6:e8:a9:35:52:
         d7:98:57:94:f9:3c:dc:90:c7:83:4d:67:17:b8:fa:6d:48:a0:
         32:1a:cb:5b:6a:54:5b:b5:b7:41:2d:5b:0d:c2:11:9f:3a:db:
         58:c4:c2:c8:36:fa:80:9a:71:63:7a:b9:62:65:b2:5a:a3:84:
         55:a3:87:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:52:21 2026 by rpki-client