Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b3a0c61f-d502-3ff9-9fa3-03cfef17fff3.roa
File:                     b3a0c61f-d502-3ff9-9fa3-03cfef17fff3.roa (raw, json)
Hash identifier:          fJymTcXb9WnViIWcRSdvrVyVbst0hXRNFKZiemb/6jI=
Subject key identifier:   FC:28:D2:EA:C6:51:92:6F:FF:34:A5:21:A7:2C:91:FA:3C:C6:DB:D7
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F35E7C026FF9AC1C41B05BB00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b3a0c61f-d502-3ff9-9fa3-03cfef17fff3.roa
Signing time:             Fri 18 Sep 2026 01:00:12 +0000
ROA not before:           Fri 18 Sep 2026 01:00:12 +0000
ROA not after:            Thu 17 Dec 2026 02:00:12 +0000
asID:                     397630
IP address blocks:        107.149.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:35:e7:c0:26:ff:9a:c1:c4:1b:05:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 18 01:00:12 2026 GMT
            Not After : Dec 17 02:00:12 2026 GMT
        Subject: CN=9528b09c-5576-4ea3-9792-18576ea7520c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8f:30:a4:de:7c:80:71:8d:a1:fe:0e:6a:c1:
                    c8:8c:3a:0e:7f:d9:8e:13:b9:6f:fe:f3:b6:c9:83:
                    22:88:b5:84:f0:48:aa:54:7d:50:1c:af:55:d9:32:
                    71:ce:16:c9:74:6e:29:83:fc:dd:cd:49:46:c0:a4:
                    19:5a:bc:4c:2b:66:3a:36:78:a7:11:8e:80:39:77:
                    ce:2e:9f:d7:7f:05:94:72:04:cb:01:44:d5:17:80:
                    46:03:c0:af:09:05:07:32:9b:0b:48:28:5e:32:55:
                    32:75:8f:dd:bb:e4:7c:03:47:60:71:f4:4b:22:84:
                    c5:f3:57:65:6f:5a:00:63:8b:b6:63:41:50:65:59:
                    04:ac:80:1e:af:ca:52:aa:54:e6:53:06:39:c7:64:
                    6a:6c:bb:19:e9:0c:16:31:fc:d9:11:92:b5:0e:f7:
                    14:81:01:0a:19:b7:19:05:59:4a:95:12:b9:a9:38:
                    9a:ad:29:3f:93:48:55:73:07:90:4b:e2:18:b3:a5:
                    48:6a:5a:11:1e:01:77:df:63:61:25:11:a1:1f:84:
                    39:75:c0:8a:42:80:63:c5:94:fa:1e:9e:14:8b:dc:
                    97:e8:ea:3b:5b:48:f4:bd:5a:78:21:1f:d7:02:83:
                    95:7f:c8:f0:c8:c6:b1:71:b5:1f:ac:73:54:47:8b:
                    31:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:28:D2:EA:C6:51:92:6F:FF:34:A5:21:A7:2C:91:FA:3C:C6:DB:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b3a0c61f-d502-3ff9-9fa3-03cfef17fff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:bc:91:f8:d3:b5:f1:fd:33:55:36:9b:f8:fd:c3:73:98:67:
         03:ba:64:4d:f9:ff:ee:18:b4:42:75:c1:f2:4d:16:b7:d6:b4:
         ff:a7:66:e1:f9:8b:72:00:f1:80:54:5e:4e:c5:dd:47:68:db:
         bd:67:e9:d9:3a:0b:0f:9c:d9:d7:33:8c:d2:71:c9:7e:36:41:
         75:77:3f:ac:9f:bc:a8:08:f1:05:45:b4:93:a1:29:b3:0d:ec:
         5f:e9:15:88:51:11:cc:a5:91:2d:49:63:cd:e2:8b:72:53:08:
         53:46:75:26:7d:e8:8a:36:4f:4b:e7:6d:88:02:f8:c6:7f:9b:
         03:94:4b:6c:e6:68:52:8c:8f:31:b6:9f:c2:a3:be:30:25:2a:
         a2:07:db:49:cd:54:ef:26:bc:c6:30:f7:fd:e8:7e:86:67:9e:
         cd:fb:42:95:6f:f4:61:10:5a:87:be:f1:f1:47:a9:f0:4b:92:
         d5:1f:f3:2c:f4:1a:63:4f:f5:4d:8e:99:b4:6c:cd:55:2f:26:
         a4:94:77:2e:7b:c8:c6:51:21:2b:c1:07:f2:9a:4e:e9:cc:1f:
         32:81:0a:9c:f6:ff:fc:67:53:03:37:e7:e9:92:73:b5:de:08:
         75:1f:25:d2:82:60:39:e5:fe:4b:4a:94:3d:9e:c7:3f:0e:f9:
         60:ce:01:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:48:07 2026 by rpki-client