Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/995862e5-8418-3ea5-8c84-7a2f80c0b372.roa
File:                     995862e5-8418-3ea5-8c84-7a2f80c0b372.roa (raw, json)
Hash identifier:          u0+HT5cxfH3beHK6NS7qEdzxJfTjhkmxcJCvV4jn544=
Subject key identifier:   42:FB:9E:3B:C8:65:50:87:B9:CF:61:09:0B:C7:EB:37:DD:14:2E:E0
Certificate issuer:       /CN=0153231e-bade-4c05-b3fd-55b65671daae
Certificate serial:       010D0C9F4328584F498C241AA65B3B0214EBB480
Authority key identifier: B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/995862e5-8418-3ea5-8c84-7a2f80c0b372.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11070
IP address blocks:        107.182.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8c:24:1a:a6:5b:3b:02:14:eb:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0153231e-bade-4c05-b3fd-55b65671daae
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a6d2852d-c938-4915-966c-997dd913a719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:25:1b:4b:64:bb:48:5f:a1:e7:11:bf:50:69:
                    e6:5f:1e:99:fe:86:ff:c8:d5:0e:34:16:f9:5e:37:
                    ef:a0:d7:11:2b:1f:4d:54:f1:7d:d2:7f:cb:3a:c0:
                    3c:97:09:f4:65:9c:bd:d3:37:ad:c3:6c:69:25:0e:
                    60:ec:3a:1f:0b:15:62:6b:11:bb:f4:0b:f1:da:d7:
                    b1:fd:1d:27:ef:82:13:12:79:7b:ec:0d:b5:68:04:
                    e3:81:e5:ef:54:55:91:af:0d:ad:ae:71:a6:7a:71:
                    58:7d:1f:b2:e7:e8:c7:2c:ea:ac:82:4f:93:39:10:
                    34:e9:32:39:51:cc:f1:24:a6:0d:37:30:31:c7:50:
                    c3:97:c4:cf:3d:1a:a8:29:42:d9:d8:81:1f:8b:b9:
                    ee:3f:9e:93:e7:6a:24:47:9c:b2:63:6f:e1:d3:6a:
                    e8:cf:26:4a:41:5f:30:e3:4f:2b:8c:22:95:53:8d:
                    5d:6b:bc:ae:09:0f:7c:68:c5:7e:d4:b9:f9:c0:94:
                    f4:94:be:cb:24:41:fb:27:e8:c6:da:df:b8:fb:3c:
                    11:a1:59:9f:d6:30:dc:93:97:64:26:c4:77:9d:11:
                    93:e5:cc:e0:85:42:97:36:1b:e3:0b:68:0e:fd:91:
                    f2:f8:63:e7:2d:e1:99:a4:34:1c:b7:8b:8e:ee:46:
                    ce:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FB:9E:3B:C8:65:50:87:B9:CF:61:09:0B:C7:EB:37:DD:14:2E:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/995862e5-8418-3ea5-8c84-7a2f80c0b372.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:b8:38:ec:54:ec:00:c4:60:23:2e:cb:65:80:b4:c2:b4:b0:
         64:ad:81:0b:1a:0c:71:b6:01:8e:51:4f:3a:17:ab:a2:9d:6e:
         96:29:df:e4:6f:62:a5:cd:e9:b6:05:d7:cd:db:9b:b4:24:4c:
         6e:5b:14:96:fd:c6:39:02:d8:66:c8:76:a4:55:6a:5b:2d:af:
         39:9a:e8:b1:53:b4:55:dd:c2:39:b7:30:96:66:32:01:31:fb:
         5f:5a:20:76:44:ef:6b:50:ae:a9:34:39:9a:65:6c:ad:ac:21:
         f7:23:28:8a:3c:ba:f5:0c:7a:bb:86:e2:de:1f:6e:b7:06:1a:
         9a:e8:eb:2e:34:99:67:ae:53:7c:20:a3:58:31:b8:09:0c:44:
         2b:93:ae:1e:20:c7:bc:62:db:b6:a3:8c:f2:bf:bd:0c:f6:30:
         a2:e1:94:93:63:a9:5e:e2:09:03:b7:ad:99:9c:8e:c9:a4:c1:
         e0:54:03:ed:ff:1e:51:4c:0d:73:60:61:84:f2:9e:0d:d0:e7:
         e9:75:62:e5:79:8a:63:03:b9:0a:63:ff:ed:d3:5f:17:b2:04:
         33:1d:40:76:4f:4a:a0:0f:b5:57:72:6f:39:ad:e4:28:e1:0d:
         91:a9:e1:de:61:d4:a3:e6:20:05:6a:37:e6:c2:ed:9c:f0:46:
         30:c2:97:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:50:42 2026 by rpki-client