Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ab63f12e-c2b8-341e-b6cb-0502af8c153c.roa
File:                     ab63f12e-c2b8-341e-b6cb-0502af8c153c.roa (raw, json)
Hash identifier:          k9JgC4AfyQFpGguikekV65NrSNhEEBn+Qww10R43SHU=
Subject key identifier:   3A:DB:C3:AB:96:D9:D3:0C:00:DF:2B:58:59:47:BF:FF:2D:7D:3E:65
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F6FA041905712C22F0C130D1A
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ab63f12e-c2b8-341e-b6cb-0502af8c153c.roa
Signing time:             Thu 08 Oct 2026 17:13:04 +0000
ROA not before:           Thu 08 Oct 2026 17:13:04 +0000
ROA not after:            Wed 06 Jan 2027 18:13:04 +0000
asID:                     141255
IP address blocks:        107.149.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:a0:41:90:57:12:c2:2f:0c:13:0d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Oct  8 17:13:04 2026 GMT
            Not After : Jan  6 18:13:04 2027 GMT
        Subject: CN=25877d14-2bb2-4012-921e-aee0a9e625f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1b:ef:3a:3a:40:2a:b3:98:b5:a0:e5:89:ba:
                    47:d8:e5:5e:5e:36:b4:50:3d:b4:3f:8e:2a:ea:c7:
                    44:37:e2:5c:d3:20:a9:b5:d6:3e:f0:bf:e9:75:39:
                    01:02:8d:73:e7:17:83:81:9d:4f:bb:c6:db:78:5b:
                    b8:79:09:2b:45:a2:94:15:55:7a:2b:eb:36:85:e7:
                    26:25:8f:dc:ef:d4:53:c8:aa:23:fe:83:97:cc:6a:
                    d6:d3:56:43:dc:6d:5c:f4:6c:e8:01:ca:ed:cd:d8:
                    01:15:50:06:b1:72:eb:ac:48:f9:ab:3e:6b:b4:e2:
                    16:9e:13:52:cb:e8:63:5a:c0:f9:e7:90:ca:53:e4:
                    cd:60:22:bd:3e:82:b3:70:22:e7:3b:99:48:2c:89:
                    a0:36:f6:4d:1e:a4:33:04:81:6c:45:a6:3d:c5:93:
                    63:6a:9c:36:2e:93:cf:9b:44:6a:0f:04:f7:5f:3b:
                    b7:b9:15:36:0d:06:79:08:80:5e:b0:01:eb:cf:2b:
                    45:3f:97:39:48:80:f4:d9:f9:06:a1:a4:35:51:d8:
                    6a:45:c4:31:7c:f5:9a:1f:38:b9:a5:95:68:20:7e:
                    d8:bf:7c:02:98:e7:4d:f9:18:d7:ff:55:4e:2f:e6:
                    49:30:36:38:c4:82:24:48:bc:3a:28:69:41:15:b0:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DB:C3:AB:96:D9:D3:0C:00:DF:2B:58:59:47:BF:FF:2D:7D:3E:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ab63f12e-c2b8-341e-b6cb-0502af8c153c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:d1:99:e3:b9:71:7f:62:b9:17:08:7b:0f:57:33:f3:b5:5e:
         86:30:7f:c5:41:4f:bc:5a:ac:d4:38:a7:85:62:89:48:58:7e:
         87:7a:f5:fe:d4:9b:8a:b9:23:a0:a9:7b:36:bd:6c:ea:04:d8:
         c5:24:e6:6e:13:dc:31:3b:3f:ee:bc:24:2e:71:8c:af:a1:9d:
         a8:b3:d3:af:3e:31:f0:d1:75:1b:97:0c:85:65:f4:aa:97:74:
         4d:fc:db:2f:c7:c4:83:fe:01:7d:5a:32:c8:f1:29:76:fc:e5:
         8c:59:79:3b:83:cf:89:de:6f:5e:73:40:ba:d8:0d:29:5d:83:
         36:05:03:8c:4a:b8:55:e1:e4:c3:07:f5:6a:bf:e0:57:87:62:
         cd:4e:47:19:6f:d1:df:67:19:20:9d:38:ea:e2:43:05:66:fb:
         8a:64:ff:24:28:c3:55:e4:b5:83:f1:cc:c7:c5:88:51:fa:20:
         64:d7:f6:cc:54:74:eb:08:a6:40:84:80:f0:60:c5:02:62:f0:
         cf:62:f9:69:57:97:56:70:23:9f:cf:c1:6b:11:2d:8c:45:62:
         cb:9d:94:1e:09:58:c7:91:6a:20:8e:a9:49:ef:72:33:70:29:
         ad:e4:e3:76:34:e9:a0:6e:da:f3:6f:15:11:aa:b2:a5:fb:b8:
         06:17:65:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:44:50 2026 by rpki-client