Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/1c5fd803-0de0-3d3a-aac5-9a02ff3c3b0d.roa
File:                     1c5fd803-0de0-3d3a-aac5-9a02ff3c3b0d.roa (raw, json)
Hash identifier:          PwkFcj/ZeG9rDkiVTsbQ74wsJQav3xlpHWpXsCu15lw=
Subject key identifier:   CD:6D:97:35:A6:8F:76:3A:3D:92:1C:1A:06:FB:B7:9F:9F:E7:D1:30
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584D667A584C41D95B4A55DA6F40
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/1c5fd803-0de0-3d3a-aac5-9a02ff3c3b0d.roa
Signing time:             Sun 05 Apr 2026 01:00:24 +0000
ROA not before:           Sun 05 Apr 2026 01:00:24 +0000
ROA not after:            Sat 04 Jul 2026 01:00:24 +0000
asID:                     54600
IP address blocks:        107.149.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:66:7a:58:4c:41:d9:5b:4a:55:da:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Apr  5 01:00:24 2026 GMT
            Not After : Jul  4 01:00:24 2026 GMT
        Subject: CN=1948ce80-16d3-4ca9-95d3-f4efe68b3835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c9:fc:67:97:e3:34:8d:49:c9:a7:52:6d:42:
                    90:5c:1a:06:b9:b7:cb:c0:0e:25:d8:d6:92:98:97:
                    07:e0:da:4e:75:28:77:69:ba:af:ae:bc:b4:5a:d3:
                    ca:ad:8e:f1:11:a7:bc:ba:d2:2d:7a:fd:89:d5:f2:
                    1d:03:8a:20:f6:31:67:ac:94:68:f5:28:b2:18:08:
                    cd:73:a4:ef:76:67:3f:00:23:e9:34:9c:2e:b3:59:
                    94:0a:cb:27:50:a0:d5:ce:22:94:16:64:89:49:68:
                    37:51:0f:7f:ad:a7:80:d4:76:8c:e5:3d:c7:83:c7:
                    b5:f9:cd:e6:e9:49:4e:12:68:dd:32:c4:60:53:50:
                    f9:ea:f9:b7:a6:9f:69:0c:88:22:c3:74:b8:bd:b2:
                    2b:61:ce:f6:94:fd:67:1e:99:f0:86:8c:7b:97:e0:
                    00:28:ce:b4:01:94:5f:8f:4d:70:33:c2:99:a2:5b:
                    a3:ef:54:51:8a:32:e5:02:b5:d5:cc:c6:b8:3e:a0:
                    95:b0:89:b0:7b:9b:c8:52:f1:e9:44:48:0d:b8:88:
                    22:82:29:6a:88:9a:d4:76:e4:8a:83:31:06:05:a6:
                    88:d7:7a:09:58:a8:19:bf:10:b4:eb:dd:26:71:be:
                    fc:c6:db:9f:50:52:5e:e0:33:ba:fd:17:21:07:26:
                    43:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6D:97:35:A6:8F:76:3A:3D:92:1C:1A:06:FB:B7:9F:9F:E7:D1:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/1c5fd803-0de0-3d3a-aac5-9a02ff3c3b0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:5d:53:37:0b:46:a5:95:46:78:a1:6c:70:6c:2d:8f:4f:57:
         b9:d0:7b:a2:d5:8d:2c:1d:4b:bc:31:5b:e4:70:a2:78:08:4f:
         19:61:15:f2:cb:49:64:72:19:0f:00:40:c1:5f:03:de:2d:97:
         24:4f:c8:a2:9e:f3:ea:3c:50:e2:4f:54:38:a6:c9:36:17:06:
         a1:07:63:b7:aa:21:ef:62:d8:12:b8:f9:27:19:bb:fe:20:05:
         6a:6b:6e:bb:70:9f:b8:69:4d:b7:54:ba:a0:57:40:d7:3f:b7:
         ed:49:9c:1e:40:0c:bd:d1:28:4c:a2:fa:86:5a:28:39:f7:db:
         4c:fb:ac:18:4f:d1:03:1a:b4:19:c6:5d:46:a5:2d:c8:37:fb:
         c3:54:c4:f5:b2:32:38:09:26:11:cd:00:a4:ea:09:e5:16:28:
         42:02:20:fc:41:9e:28:79:d1:4b:54:03:a7:6a:a1:80:c8:1d:
         02:55:a8:c6:fc:c3:65:51:33:db:56:25:ee:76:79:77:dd:40:
         7a:25:e6:ad:10:04:ee:46:f3:79:dc:6a:08:31:d3:d8:b1:df:
         a7:5a:b7:52:df:2e:30:9a:b5:cd:54:db:f5:82:ad:6e:84:a7:
         03:12:45:cb:81:b8:c5:f6:c6:54:b8:18:d7:ea:6a:f6:c4:80:
         45:47:12:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:39 2026 by rpki-client