Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/edb23b91-d765-3a18-a66d-bbe4f8ea5fa3.roa
File:                     edb23b91-d765-3a18-a66d-bbe4f8ea5fa3.roa (raw, json)
Hash identifier:          Oacn83wV/mYQTfY8GB3qdxQxOJiMxeInJjvYYzFWOjI=
Subject key identifier:   64:A2:01:9B:69:7C:DB:C5:5D:75:15:3C:DB:02:95:44:B5:CB:B2:FF
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F6292D761F87D1B06365A25C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/edb23b91-d765-3a18-a66d-bbe4f8ea5fa3.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     398823
IP address blocks:        107.148.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:d7:61:f8:7d:1b:06:36:5a:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=5c5e7d3c-155d-4c59-afd4-a48c3a3923df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e7:b1:f6:81:c3:f4:b0:1a:05:60:8b:c4:99:
                    aa:82:76:35:1a:ff:72:8b:19:50:da:57:fd:25:84:
                    0f:e3:13:fe:3b:72:e2:18:e8:66:37:54:21:48:f8:
                    e4:b0:b3:0a:3d:a0:1c:fe:07:81:98:bc:0b:aa:99:
                    c2:08:d6:35:00:a6:26:aa:1e:94:e5:56:ca:e1:f4:
                    ef:b2:e1:15:16:3a:4b:a9:c2:dd:55:5b:88:21:36:
                    b6:68:69:a1:92:5e:c0:85:ba:2d:d9:c9:1a:74:63:
                    f5:31:c4:87:71:86:5b:6d:c7:e9:30:55:ed:ce:98:
                    64:65:05:2f:90:28:24:38:65:1b:40:2e:25:b4:44:
                    16:e6:f0:93:87:f8:3a:3e:8d:0f:84:9a:01:91:2a:
                    b2:3c:44:b7:e3:7d:f0:c3:c2:99:9d:f0:99:e6:25:
                    27:8f:82:fa:8e:58:0c:c9:5a:a5:0a:f1:db:df:df:
                    8d:7a:f8:a7:1a:99:9b:3c:df:35:3a:1b:d0:b4:b5:
                    d4:b6:94:f5:f1:95:65:14:79:2b:2d:2d:c6:27:e4:
                    26:76:d9:af:9d:c8:36:c1:40:6e:37:3d:e6:13:76:
                    e4:a0:37:82:44:f5:3f:13:09:ff:b1:4c:8b:18:14:
                    2b:d1:bb:c6:69:b2:4c:c1:f3:be:8c:c0:5e:70:1e:
                    5d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A2:01:9B:69:7C:DB:C5:5D:75:15:3C:DB:02:95:44:B5:CB:B2:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/edb23b91-d765-3a18-a66d-bbe4f8ea5fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e2:11:2f:46:be:55:01:84:19:82:2e:ab:c1:10:25:4f:c9:
         10:0b:ce:7c:dd:28:4b:8d:d7:3c:bb:af:e3:4b:b2:1f:28:b5:
         cf:24:97:4a:18:77:7c:57:28:a2:f1:e4:c6:24:13:7a:b4:c5:
         f3:f8:d1:ac:1a:d0:5c:3a:59:29:96:e0:ec:fa:3c:16:d8:19:
         39:3a:2f:53:b7:c1:af:68:67:f9:35:10:c3:2c:9e:01:7f:7e:
         4b:b4:ce:76:36:4f:9b:20:40:8a:cd:06:b5:6d:df:6b:51:59:
         77:2e:1e:8b:07:a8:e0:d6:46:b4:4e:b1:6d:68:4a:8a:94:fa:
         c0:b4:a3:a1:ce:11:e4:c6:ee:43:f4:f1:0d:12:81:f6:a6:c2:
         4d:64:74:52:d3:a7:a3:e1:15:49:98:e1:4e:4a:6e:7e:e5:ff:
         0e:fa:8d:f1:b7:da:2a:5a:d9:19:fa:08:b4:89:93:90:ef:19:
         5b:ed:92:91:fc:1e:07:cc:4e:88:61:87:a2:1b:04:22:e8:ef:
         a1:fc:fc:ee:f5:70:84:f1:ec:0d:84:d6:37:4c:86:7c:2b:a3:
         0e:d9:d9:13:39:10:00:5c:09:fc:62:e4:e3:3a:64:a5:05:0b:
         fd:eb:4b:6c:8d:e5:16:22:d2:e4:53:92:5c:4f:a0:35:06:e8:
         f3:a4:d1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:37:14 2026 by rpki-client