Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/f8086422-d1da-362e-8357-b0b8347c1cc5.roa
File:                     f8086422-d1da-362e-8357-b0b8347c1cc5.roa (raw, json)
Hash identifier:          OYCIWWyUdet6MK3MzPw45SYo6FYLNftz1MP2/M7s/Og=
Subject key identifier:   80:2E:38:95:71:A8:83:A2:22:D2:9B:E5:B8:EF:35:0B:DB:FB:BC:B0
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584DE3A4BAD1F51B5BEC6391FE80
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/f8086422-d1da-362e-8357-b0b8347c1cc5.roa
Signing time:             Tue 19 May 2026 21:01:59 +0000
ROA not before:           Tue 19 May 2026 21:01:59 +0000
ROA not after:            Mon 17 Aug 2026 19:57:15 +0000
asID:                     6079
IP address blocks:        108.186.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e3:a4:ba:d1:f5:1b:5b:ec:63:91:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May 19 21:01:59 2026 GMT
            Not After : Aug 17 19:57:15 2026 GMT
        Subject: CN=c5c92119-6cba-4bda-b081-a3ccf06fe914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:77:75:34:dc:92:66:e2:47:86:ac:f3:90:6a:
                    77:f7:d0:6d:5f:b5:41:7f:bc:dd:e1:76:35:35:81:
                    a0:65:9f:13:03:a3:64:8f:dc:52:d5:05:8b:f2:17:
                    97:45:eb:fa:9f:99:58:c7:b6:e1:0b:31:8c:75:69:
                    33:7e:0b:15:ce:5a:63:24:6a:6c:1d:a4:37:54:fb:
                    53:f8:7c:16:39:fd:0c:cd:e7:66:33:ca:9f:cb:07:
                    61:42:52:9a:e1:7d:cc:b8:41:34:3a:16:8d:85:d8:
                    3a:34:f6:bb:7e:14:ac:2a:dd:92:02:1d:f2:fc:9b:
                    50:30:db:e8:cb:15:f8:87:45:fa:e2:77:1a:b5:9c:
                    df:4f:0d:49:6e:02:5a:c3:e6:68:57:d6:b4:07:61:
                    f8:04:ee:e5:17:31:00:a0:23:11:6f:9e:3a:cc:a4:
                    f5:18:91:df:21:79:db:0f:5d:4d:4d:9c:53:bc:82:
                    a9:b1:03:86:9b:d2:88:f6:c0:f7:14:cc:93:67:c8:
                    2a:c2:05:32:12:c0:9c:a5:32:80:0f:93:38:d4:c6:
                    57:e9:d7:c7:45:00:9e:c7:82:4c:86:d8:21:28:30:
                    15:64:37:dc:34:78:67:60:79:66:58:d9:7b:fb:60:
                    c7:c7:c1:fe:55:4b:bd:80:60:54:20:69:e5:74:ad:
                    ce:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2E:38:95:71:A8:83:A2:22:D2:9B:E5:B8:EF:35:0B:DB:FB:BC:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/f8086422-d1da-362e-8357-b0b8347c1cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.186.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b0:a3:fe:fd:35:4d:b0:0f:3b:3d:3d:72:b4:78:67:dc:24:
         31:ed:4c:ac:1e:12:68:c1:e7:59:6f:e6:a8:b9:c3:2c:af:ca:
         c3:93:f4:1e:40:74:82:ae:ee:db:20:ad:df:38:aa:ec:24:27:
         cb:07:bd:7a:25:74:47:12:e1:82:51:cc:aa:52:18:00:7f:dc:
         41:8d:6f:fe:86:a9:7c:3a:00:a4:da:46:ae:bb:93:b1:9c:51:
         97:2d:7e:35:d1:aa:c2:9b:61:d6:8a:69:21:0c:d6:d3:9b:d9:
         97:b9:37:21:8a:e6:41:f1:18:34:06:a3:06:02:ab:fe:5d:7b:
         3c:aa:6f:07:e0:16:aa:06:2f:23:6a:7a:ee:97:95:f6:6b:f6:
         31:f4:c6:fd:1a:e8:16:03:71:96:9e:0b:b6:7c:63:02:c0:5f:
         b8:ea:2b:53:e9:ca:6e:cf:44:af:e1:3f:19:f8:05:14:6e:fc:
         f9:b7:49:23:78:f9:3a:95:0f:e0:c7:d0:66:d1:96:5e:c3:ce:
         7c:ef:00:59:b6:c5:24:95:54:1d:f6:d2:e4:06:00:7f:36:51:
         f4:d8:3e:d8:74:8a:73:48:f3:ff:08:0e:35:ee:b1:38:c6:42:
         e2:57:61:09:09:94:61:36:78:68:6a:68:9c:88:12:44:c1:18:
         0c:4d:50:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 06:53:32 2026 by rpki-client