Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/38d0153e-9cf4-38d4-a394-7e72061282fb.roa
File:                     38d0153e-9cf4-38d4-a394-7e72061282fb.roa (raw, json)
Hash identifier:          AG+JOl9YCh4CBe4f+K3bsPdksEip8QMqJsIpNg0e5fE=
Subject key identifier:   68:C6:A4:66:3E:60:F4:E3:C7:D5:D2:A8:BF:22:95:4A:1F:3F:D6:3C
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584EA7964B07286DF0884B053A00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/38d0153e-9cf4-38d4-a394-7e72061282fb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     25846
IP address blocks:        107.149.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:4b:07:28:6d:f0:88:4b:05:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8f2c3c20-5e6d-45b5-897d-89590deed30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a7:1d:2e:43:98:00:05:31:b2:bb:eb:18:45:
                    eb:7c:05:0c:a2:d0:d9:f4:35:ad:a4:9c:ea:8b:a4:
                    1e:f3:66:ad:a5:8e:7b:4e:b7:62:cd:d3:11:e2:3e:
                    e3:18:35:95:28:77:3c:8e:d2:79:35:bb:d5:5a:db:
                    d2:a4:b1:95:6b:03:a0:2b:bc:0e:35:b6:4b:71:fe:
                    85:cf:f0:a3:23:5c:7b:e1:30:63:03:c9:2c:de:1f:
                    48:63:73:68:64:58:f3:db:3c:ae:90:83:a4:b3:a4:
                    8b:75:35:20:68:fc:b0:8d:f9:d2:97:3d:b1:62:ab:
                    77:81:af:99:62:64:c1:a4:7a:e0:4d:6e:b8:7b:85:
                    9e:57:45:5d:5a:b1:27:c5:42:a6:9c:4d:bd:16:e6:
                    93:b0:a5:92:3a:c8:b9:8d:f6:a1:ff:60:60:0b:bc:
                    7f:df:17:9b:9b:16:56:dc:94:e2:4c:08:ee:4d:91:
                    c0:a0:ca:df:d9:df:20:ec:d9:88:09:c4:f2:e0:76:
                    f0:b3:ce:96:2e:dc:82:1e:b2:c3:e1:12:24:e5:3d:
                    90:86:23:a8:eb:39:86:ba:52:f8:de:de:c6:03:c5:
                    59:0d:91:9e:93:71:80:11:45:88:7b:79:6e:28:0d:
                    72:ac:e0:dc:b5:db:7b:9b:fc:b6:b5:79:87:5f:3d:
                    f7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C6:A4:66:3E:60:F4:E3:C7:D5:D2:A8:BF:22:95:4A:1F:3F:D6:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/38d0153e-9cf4-38d4-a394-7e72061282fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:dd:31:c0:4f:cb:1d:02:41:c6:3a:70:27:28:16:fa:49:3a:
         12:cd:8d:0f:b2:e6:91:f0:5f:39:16:70:64:26:5a:c6:4b:a8:
         d7:e7:50:da:8a:57:a6:36:b0:63:01:dd:45:46:54:a4:e4:68:
         93:bf:7c:e0:9b:fd:c6:99:09:2c:fc:ba:b6:95:9a:1e:91:dd:
         a0:fc:94:50:9b:23:96:e9:c5:6f:f2:2b:63:cf:0a:af:d3:e4:
         9e:a3:cc:39:db:4b:09:c8:24:1f:e5:c0:bd:09:a0:96:0c:8c:
         59:f9:e6:fe:cb:58:b2:c0:64:f1:e6:8b:1b:cc:28:ef:e2:7c:
         ee:83:6b:f4:7f:b1:15:13:d6:8b:4a:1f:3c:27:91:52:e7:1f:
         ae:cb:86:c2:c7:6b:6e:33:3d:42:d7:50:2e:09:93:eb:49:ae:
         83:4b:79:3e:5d:e8:b4:31:9b:e3:fa:e0:42:f3:97:43:6a:6e:
         69:74:8e:4b:81:e2:01:d1:ad:22:ed:aa:4f:a5:a9:05:eb:a6:
         a3:2b:48:9c:eb:14:18:30:5f:d2:aa:a6:ee:fd:63:0b:d0:93:
         e9:14:85:dd:ba:74:c9:8e:ee:15:c3:ac:59:1f:7e:62:8f:b1:
         e8:b9:f5:2f:6e:6f:72:3c:5b:04:8b:35:d0:1a:6c:70:a3:66:
         3c:1d:a8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:00:20 2026 by rpki-client