Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6b688d4e-c797-3aac-b0af-921879acc57c.roa
File:                     6b688d4e-c797-3aac-b0af-921879acc57c.roa (raw, json)
Hash identifier:          X5WuT9We3gErfVkRxXEuoJAX6aQ8PzVTNpJI9VCG+dM=
Subject key identifier:   03:69:D3:F8:BE:F3:1E:50:8C:41:A4:D3:9F:12:5E:01:17:1C:37:F0
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584D0217ADFB38624DF52212A200
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6b688d4e-c797-3aac-b0af-921879acc57c.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     398823
IP address blocks:        107.149.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:ad:fb:38:62:4d:f5:22:12:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=dafa800d-8877-47e5-8253-efb3d24a0d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:08:7b:02:4a:f0:2c:2d:d8:3d:87:79:e9:a6:
                    25:5a:81:46:1f:d4:43:b3:13:d5:1e:d3:08:f9:a1:
                    17:84:a1:2b:5d:98:30:a4:08:81:54:b9:26:65:12:
                    dc:9e:b5:e6:4e:9e:86:f0:00:04:4f:6c:a1:59:16:
                    5d:79:9a:0a:9e:69:62:b6:62:01:4f:66:b7:65:81:
                    f5:7a:7c:c0:bc:60:3c:f8:eb:f7:c0:06:6a:c5:e7:
                    86:0f:50:05:4e:65:1e:41:7c:46:f0:17:99:ac:ee:
                    2e:44:db:dd:a9:c2:5e:27:23:9f:2d:a8:65:de:d7:
                    c6:20:92:f9:9a:a6:ff:64:fc:53:97:cb:9c:11:2b:
                    a2:1d:e0:8d:61:9a:52:ff:61:24:a4:b5:70:e0:82:
                    ab:1c:fc:f5:fe:f4:62:6f:6a:61:a3:d7:68:48:49:
                    d6:a1:42:22:8f:c5:7b:0b:90:e5:61:8a:b3:50:45:
                    a9:3e:8f:91:60:c4:06:8e:e5:a0:ec:8c:47:29:a2:
                    44:c0:97:b1:e4:86:0b:ff:50:7c:3e:fb:f3:e8:e2:
                    32:ce:d6:93:19:24:b0:f1:2e:70:5d:97:0d:76:c3:
                    29:28:25:d0:be:a3:0b:ae:73:4d:96:01:71:90:69:
                    f8:db:e2:f0:1f:d2:d6:a7:8c:d0:0e:0b:7f:88:09:
                    aa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:69:D3:F8:BE:F3:1E:50:8C:41:A4:D3:9F:12:5E:01:17:1C:37:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6b688d4e-c797-3aac-b0af-921879acc57c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:8d:65:c2:ae:43:79:f0:56:7e:57:0f:95:af:fa:09:59:be:
         b1:32:f4:d8:52:cf:f9:93:67:a8:8a:b0:ac:02:9c:14:8a:e0:
         e9:68:67:2f:fc:6f:9b:68:5a:7c:b8:ca:89:04:44:ab:4e:7b:
         f9:90:d9:f0:36:73:92:ae:9c:63:07:04:56:db:34:19:7d:b5:
         40:e3:3f:be:68:e0:cc:12:91:d9:96:2d:a2:12:ce:e9:2a:24:
         c3:0b:af:9c:fb:ad:9d:9a:de:5c:78:a6:77:88:8c:e2:b7:3b:
         90:95:f9:6d:23:44:4a:3c:6e:d8:c1:56:42:48:38:7f:f8:6b:
         0a:25:54:d5:c7:08:40:36:32:c6:14:01:50:2c:7d:11:bd:04:
         12:2a:6c:88:8d:63:c7:57:14:43:0b:0c:84:e7:1b:30:e8:d7:
         aa:5c:38:b6:01:b1:0b:11:c7:5a:11:bc:7e:f6:67:08:29:6f:
         0e:6b:36:f4:60:9f:b7:5b:da:ae:6a:89:da:aa:51:37:41:aa:
         88:2a:a6:a7:e1:55:d3:e5:a3:5d:40:74:8c:03:7d:40:1e:a5:
         2d:b2:fe:24:5e:ff:44:1e:f9:eb:d9:64:83:06:a3:49:85:e0:
         63:18:8d:8c:b2:b2:b7:60:9f:5a:35:0f:ea:d0:da:5f:58:14:
         d8:3f:4a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:26:47 2026 by rpki-client