Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b2d4bdc7-b678-3e84-ab0b-2bc3439b55e2.roa
File:                     b2d4bdc7-b678-3e84-ab0b-2bc3439b55e2.roa (raw, json)
Hash identifier:          hN1RttDIFIQG12gQFB8O5Qo65dJk695cMmrmABzoW58=
Subject key identifier:   8D:08:7E:66:53:9D:05:40:94:6B:20:CB:E3:EA:D3:74:C8:D8:09:7D
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584DE2B5EB8EFFA673FD41619380
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b2d4bdc7-b678-3e84-ab0b-2bc3439b55e2.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     398823
IP address blocks:        107.148.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:eb:8e:ff:a6:73:fd:41:61:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=d8c771ef-5231-4a04-b6c8-45c6dfad0674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5f:42:e8:6a:b3:22:d0:d5:7f:4b:f6:ab:c4:
                    73:b7:b4:e6:05:0b:aa:68:02:cc:e2:45:43:4b:d0:
                    cb:9b:34:60:f2:fe:64:37:66:23:6d:18:60:19:30:
                    58:6e:90:8d:bc:69:af:ac:16:58:73:44:56:67:8c:
                    83:c5:76:96:91:e8:c8:b4:aa:41:d7:3e:16:f7:7c:
                    f4:80:77:9e:66:b7:84:27:b6:a4:0e:e6:78:a8:bc:
                    e8:aa:77:c9:a5:a7:96:74:45:72:c2:f9:cd:49:1e:
                    08:14:c2:2b:5d:32:85:66:f5:f1:d1:05:99:95:e9:
                    8e:0d:c1:91:94:4f:42:d4:36:ac:ed:bf:7e:2b:a2:
                    ba:29:a7:ce:c1:cd:c6:5f:f1:d3:22:b2:60:61:36:
                    14:fd:1e:7a:ab:8c:56:9a:ec:11:02:1e:3c:4c:48:
                    90:0b:94:86:6d:ed:3e:49:bf:83:62:a1:82:da:20:
                    01:13:4f:44:a1:e7:41:f2:2f:c0:ed:36:69:c0:c5:
                    6c:b8:55:55:22:05:79:01:8e:0a:1a:e8:91:12:4d:
                    35:36:fe:47:11:2b:52:e2:07:18:4f:2e:83:6b:4f:
                    16:35:52:cf:04:e2:36:0a:99:c2:09:85:4b:12:4f:
                    c2:c7:4f:88:f3:df:a8:31:07:8f:6f:30:b3:5e:56:
                    1a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:08:7E:66:53:9D:05:40:94:6B:20:CB:E3:EA:D3:74:C8:D8:09:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b2d4bdc7-b678-3e84-ab0b-2bc3439b55e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:74:cc:46:72:0d:37:54:fd:1b:07:1b:7a:c3:01:13:c4:d1:
         f4:9f:37:80:a5:15:8e:cc:37:e8:89:b0:fb:10:9a:81:40:3c:
         fa:10:14:bf:0c:76:48:6c:f8:80:de:d6:f7:a5:8d:7b:1a:ad:
         28:8a:25:be:1e:04:6a:6e:6d:18:69:77:cc:41:7d:49:06:3f:
         91:c1:1d:8c:d0:2c:a8:52:63:23:4f:30:36:4f:00:76:d3:cc:
         55:34:92:37:b1:a3:67:e2:59:86:96:ed:8d:63:69:4d:bf:85:
         ba:b7:3b:f9:67:c1:ad:28:6b:a0:dc:89:ba:51:ca:e9:ed:d8:
         c7:4f:7f:56:96:40:1a:3c:27:35:ba:51:b3:c1:97:2b:41:79:
         d0:87:f0:6e:b3:bc:ef:06:59:a3:44:58:ad:04:dc:0f:36:fd:
         19:a5:2e:0d:30:4c:fc:9b:d0:9b:08:79:49:9f:90:8d:2f:8a:
         37:6e:8a:ba:0c:70:a6:41:f9:a5:fa:e4:4a:7f:0f:94:eb:bc:
         dd:fc:0d:7f:3c:71:db:7a:18:ec:53:b2:a9:b9:b5:57:4f:82:
         6e:c3:bc:9d:82:4e:7b:7a:10:f6:00:4b:59:43:21:50:84:0a:
         5c:ea:81:eb:89:ad:39:05:52:d0:c6:3b:f8:fa:5f:34:54:eb:
         04:ea:50:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:02:39 2026 by rpki-client