Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa
File:                     7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa (raw, json)
Hash identifier:          VKS3q1zFIbHcBFVGLG5xyCj14y233PMV1WI0opH2Cq0=
Subject key identifier:   81:46:C9:61:EF:11:41:02:E3:12:B1:D7:2C:94:EE:1C:5A:43:44:5B
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584D0217AE304D0653B63E5ABFBE
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     398823
IP address blocks:        107.149.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:ae:30:4d:06:53:b6:3e:5a:bf:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=3360b97b-2b2a-40c9-ad36-2d07e03619c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3f:54:c0:98:83:f1:49:35:f4:85:41:a1:de:
                    ac:9c:18:3d:bd:6d:ed:2e:62:f8:2c:c6:00:b6:77:
                    98:49:3c:93:43:39:c4:af:3b:42:5f:9e:c1:c8:d0:
                    d1:4b:93:a2:fd:af:36:bd:2a:fb:8d:5c:b4:d7:99:
                    16:89:da:42:11:65:01:95:e2:bc:2c:3f:96:01:fc:
                    22:fb:c5:b7:c7:d3:17:1a:f5:4d:d5:83:89:a1:6f:
                    68:0d:e0:3f:1a:1d:4e:6f:13:87:53:d1:9c:54:49:
                    61:a0:39:4d:54:e2:af:e8:1f:d1:76:43:fd:cc:1a:
                    88:4e:dd:c1:9b:de:a0:bf:1e:c3:eb:fd:66:8d:09:
                    fe:07:84:4a:0a:4a:5e:67:40:ce:12:ae:02:2c:36:
                    26:5a:75:62:de:cf:5c:1b:d1:45:04:e8:d4:f0:d2:
                    6f:92:fa:cb:f9:63:a6:3d:74:a0:8b:7b:7d:ce:29:
                    ad:9d:41:8f:a9:9f:31:7b:cd:d1:d6:22:f0:43:14:
                    50:31:5c:61:3d:18:1a:b8:49:f1:47:56:6a:0e:dd:
                    a6:72:5f:64:cf:f6:e7:da:ab:e3:ec:3f:0e:b6:f7:
                    f5:b0:e2:15:cf:bc:4c:06:0a:dd:9b:d6:1d:d8:99:
                    0e:4f:09:9b:d7:85:04:22:ee:4e:ca:1a:ae:8c:a7:
                    05:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:46:C9:61:EF:11:41:02:E3:12:B1:D7:2C:94:EE:1C:5A:43:44:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e1:8d:fa:00:de:27:05:31:d9:dc:2c:2b:fd:2e:81:84:2d:
         ec:4d:8d:30:79:26:6c:db:1a:d7:9c:11:89:71:e2:92:a7:0a:
         47:2a:e0:10:ca:00:15:aa:b9:cf:6f:c0:de:06:34:5f:d9:72:
         b7:df:f5:73:d0:a6:2f:17:54:95:18:ad:a5:c3:dc:69:43:da:
         21:56:f3:1c:9b:b1:22:bc:09:ec:1a:75:0e:49:3a:16:c4:3f:
         1f:6b:fa:59:60:e1:c5:45:d6:91:b4:a6:74:68:74:dd:e5:c2:
         16:dd:48:df:2d:ec:0b:da:7c:42:81:34:9b:97:9d:96:21:21:
         ea:39:dc:5c:5a:c1:da:c4:9e:e1:b5:60:a1:fb:73:39:02:e9:
         af:58:2a:1c:08:8b:f4:ca:8c:0a:2b:fd:c1:46:fd:88:0a:4a:
         fc:ae:85:f8:46:2e:f3:84:af:bf:20:0b:51:54:c8:59:f1:d9:
         08:73:26:f4:5e:6f:f7:05:bb:fa:a5:ab:29:e4:8d:65:4c:30:
         25:b6:e2:98:79:37:59:49:ee:86:8c:f0:2f:1c:cd:1c:fb:62:
         ff:14:b7:0f:38:ad:23:66:81:59:9c:25:5a:b5:d4:03:95:3b:
         bc:1e:99:d7:8e:3c:f1:9c:56:d6:70:73:cc:33:78:d2:76:4e:
         00:05:10:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:38 2026 by rpki-client