Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa
File:                     a3acc875-a509-3b7a-b1bf-996d362e2ead.roa (raw, json)
Hash identifier:          XmPAhR4Q0gBgUr16X/h/W9Ge1VhUyFfBr9+FCz58M2M=
Subject key identifier:   FE:F4:56:03:91:0C:DD:23:23:19:F6:5F:44:28:4B:5A:C9:BA:03:27
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584D0217AE9A1013CF75C0ACAE80
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     399195
IP address blocks:        107.149.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:ae:9a:10:13:cf:75:c0:ac:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=67ff9e82-4294-4a43-b1a0-dc773252e211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ec:fd:d0:cc:2e:3c:9a:c7:1c:b2:1f:d7:a7:
                    00:51:e0:3d:63:f7:05:9e:fa:dd:3c:5b:34:7b:47:
                    d8:de:ae:1f:d4:0a:a6:17:7d:23:6e:18:54:35:34:
                    dd:1c:1c:e5:5f:6d:ee:44:e6:96:3a:d8:ff:c7:75:
                    c2:bd:f1:b2:09:03:2b:e5:43:d5:c2:70:e7:22:6d:
                    67:77:c9:fa:3b:b9:ef:71:25:be:35:96:53:ae:a6:
                    b0:82:7e:c3:bb:d9:8c:20:60:36:53:e2:29:1a:1b:
                    10:e5:ee:5d:1d:2c:cc:07:ac:10:51:ca:06:5c:81:
                    19:03:bd:ad:92:89:9b:78:fc:0d:c5:4d:f3:6b:4e:
                    5c:d0:e8:4b:30:48:5b:74:53:98:57:6f:68:ee:72:
                    c9:68:0d:53:4c:b5:9d:42:75:06:df:2b:3c:8b:fb:
                    cb:11:11:c9:be:d1:00:6c:df:79:ed:6b:61:1a:da:
                    8c:b1:eb:0e:a9:02:13:8c:72:32:b4:04:fd:ff:bc:
                    cf:80:17:3a:54:92:43:6c:1c:2a:fc:2c:54:b2:55:
                    95:86:5a:54:87:10:3e:0b:fa:d7:28:45:f9:8e:50:
                    df:11:4f:10:9b:5d:1c:5a:67:c4:26:14:3f:33:b9:
                    50:c1:32:90:d3:e5:a6:f2:59:b3:33:10:4a:db:49:
                    d3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F4:56:03:91:0C:DD:23:23:19:F6:5F:44:28:4B:5A:C9:BA:03:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:87:97:d3:4e:72:53:af:33:0f:65:06:16:a5:2f:fc:3a:48:
         01:2e:93:32:0c:ba:3d:5d:59:82:99:e8:d6:5d:a8:ae:4b:af:
         45:4a:3f:90:93:3d:be:36:3e:ed:0a:3d:37:0f:7e:e4:90:aa:
         f7:68:e1:eb:52:66:1c:7a:85:31:2c:c1:87:0b:39:f3:4d:df:
         48:f6:b1:fb:2d:75:77:5f:e8:c4:84:a8:14:97:6f:ee:15:95:
         38:75:ad:a9:4a:e3:58:ec:74:52:8c:67:cc:c2:e9:65:b7:e9:
         21:05:da:f6:55:a8:07:9e:d6:36:e2:a8:35:c2:8e:6e:e3:7a:
         0f:4b:ff:bd:16:3b:cd:0f:bc:5e:7c:ea:bb:8c:b6:83:a4:f2:
         10:c6:39:98:5b:73:b5:d4:a5:39:03:a6:54:a2:e9:0e:5b:9d:
         1f:50:d4:9a:4f:16:2a:7f:a7:07:70:7d:44:14:ea:be:cc:83:
         77:58:80:dd:db:e9:34:e2:40:a1:92:da:6c:5e:87:35:1d:dd:
         99:08:43:23:4e:06:4a:ba:97:3e:7c:16:19:28:a8:a3:9c:2f:
         51:a4:1f:f3:04:ee:d3:2a:d0:8e:2b:45:06:c9:b9:0f:cc:85:
         a6:0e:b9:30:6f:23:4c:b7:0a:ff:07:c7:b0:fb:70:53:0a:85:
         56:24:56:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:01 2026 by rpki-client