Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b5013129-6f14-3d21-ade8-5c0358a93e72.roa
File:                     b5013129-6f14-3d21-ade8-5c0358a93e72.roa (raw, json)
Hash identifier:          xLWCLXEXCDk0+3hOKqOBo3TIqptRaQKg9yE+3IGcvLM=
Subject key identifier:   03:9D:BB:8E:53:78:5D:D5:DE:AD:03:B4:39:11:93:A2:A0:18:9D:F5
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584D67DFFB836605D7DC5A769980
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b5013129-6f14-3d21-ade8-5c0358a93e72.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     398823
IP address blocks:        107.149.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:fb:83:66:05:d7:dc:5a:76:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=533cf8a8-020e-4a35-abdd-e5e5d7b5e0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ef:21:c7:00:93:e6:3f:f9:d8:37:61:0f:46:
                    fb:2a:b4:cf:a5:05:3a:ae:21:a7:de:51:7f:3e:56:
                    78:19:ee:fb:e4:ec:9a:af:1a:2e:fa:12:5e:f1:d2:
                    41:6f:83:86:cb:15:c6:2c:f4:95:8a:6c:c4:35:2d:
                    0b:06:0e:8f:25:08:6b:3d:a5:4f:01:10:18:2c:f3:
                    c5:04:9c:54:00:e1:4a:74:f0:f3:b6:c7:c0:9c:9f:
                    e5:ef:d8:e4:e7:14:25:50:11:1b:b6:d7:6e:a7:4d:
                    61:16:8c:ef:2b:8e:df:b6:10:da:5d:9a:bc:81:a3:
                    c1:fc:60:77:d3:3a:b8:ef:08:8f:c9:18:33:c6:36:
                    bb:75:d5:af:ef:bc:90:b9:75:8d:bd:aa:b0:d5:48:
                    ec:75:70:2e:2c:d3:2f:b4:18:b5:4d:7b:eb:29:9b:
                    1d:65:05:e1:92:76:0f:a1:1a:f4:6f:95:43:0d:70:
                    d3:2c:6e:92:bb:f2:ae:88:63:05:ef:c9:9f:e2:4b:
                    7f:79:ca:21:92:cc:26:e9:98:84:ba:ac:99:f4:50:
                    bd:de:d8:d4:65:fc:ba:ad:e0:8f:17:4d:8e:1a:7d:
                    8b:46:42:b0:9e:6b:2a:44:fe:a3:07:61:92:61:19:
                    14:50:af:b1:60:ad:3a:60:ca:4e:62:69:bc:97:e0:
                    c8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9D:BB:8E:53:78:5D:D5:DE:AD:03:B4:39:11:93:A2:A0:18:9D:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b5013129-6f14-3d21-ade8-5c0358a93e72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:be:08:ee:84:16:6f:72:de:bc:3f:bd:66:6d:e8:08:31:81:
         52:12:c9:ae:db:93:f9:28:fb:c7:b8:7c:ee:4a:27:e5:27:2c:
         4a:2b:d3:f1:91:9b:06:8b:46:7b:1f:28:83:dd:94:c9:38:e2:
         fc:b4:7e:89:df:a2:4a:59:69:bc:51:4f:16:9c:8f:ff:43:1b:
         ad:ef:e4:b9:a1:22:70:35:6c:65:d8:c9:d9:49:99:38:8f:ad:
         c4:4f:7e:b9:2f:35:a0:43:c1:9c:2d:56:c6:e2:95:f6:56:0b:
         be:c6:50:35:63:cf:a9:95:11:01:d8:90:70:6a:eb:c8:4f:b1:
         d9:28:64:84:ec:c7:19:8c:d7:eb:1b:3c:cb:35:d3:93:6d:ca:
         64:d4:91:6f:70:70:38:9f:aa:df:bd:a9:27:6e:9a:f8:69:38:
         a6:7f:22:68:45:69:29:bb:1f:c2:4b:b9:6a:07:3a:f5:c6:b9:
         f4:fd:da:2d:f3:da:8a:80:43:64:af:1a:c8:70:98:bc:d5:3b:
         5b:d6:bd:60:bc:9a:65:96:36:b2:0b:a4:54:15:b7:0c:8d:54:
         ff:a7:d2:97:1e:bb:43:e6:ec:78:54:ed:4b:c7:f6:d8:87:af:
         de:3f:f6:16:ee:bb:e0:16:be:86:77:c8:52:90:e2:94:fd:07:
         60:5d:24:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:14:54 2026 by rpki-client