Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b74d6714-e2dd-357f-af90-1b104c54a8c1.roa
File:                     b74d6714-e2dd-357f-af90-1b104c54a8c1.roa (raw, json)
Hash identifier:          2y8Trb3CG9sj32QH+75ZB1sCVa5jJuQPsLQ6NVZmeR8=
Subject key identifier:   30:03:52:9B:1D:2B:1D:A3:2E:26:C2:7F:4D:27:EF:7A:E3:C2:6E:CD
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584DE2B5EC1936BAFC4450231FC0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b74d6714-e2dd-357f-af90-1b104c54a8c1.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     398478
IP address blocks:        107.149.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:ec:19:36:ba:fc:44:50:23:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=02d9e161-ef14-407d-9450-065e4e511c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:65:cb:0e:ac:29:d3:0c:89:d9:6c:90:86:1b:
                    ae:c3:a3:0d:c5:72:3b:d5:16:e1:68:fc:d0:7c:83:
                    ac:98:4b:57:ee:a4:7e:b3:1d:49:16:27:f8:5d:fd:
                    08:21:af:b2:c7:bc:ae:7a:97:a1:32:24:8e:7f:ce:
                    61:70:eb:f0:7d:ca:43:ca:7b:2e:0b:5c:d0:9e:f5:
                    18:b7:67:e0:0f:70:cc:8c:4d:a7:fc:ea:08:62:6c:
                    96:43:2e:97:fc:2b:ee:e2:fa:91:3a:25:6a:55:93:
                    c5:a6:28:80:02:62:e1:f9:e9:e4:05:11:cc:d8:2a:
                    c4:19:14:70:38:01:9d:f6:15:cb:c8:08:68:43:82:
                    9a:d4:da:f6:ac:11:5f:ad:21:db:cb:b5:82:b1:ea:
                    1c:83:d1:86:58:39:2d:f4:cf:bd:c0:71:cf:20:6b:
                    35:a4:22:53:a6:60:fb:2d:68:f0:5a:71:5f:86:89:
                    3f:60:1f:1c:12:72:f7:98:0b:43:9f:92:54:4d:d1:
                    19:b0:ee:64:e7:de:59:6e:94:68:26:17:42:a7:e8:
                    e3:74:2c:b6:dc:82:ba:20:6c:84:68:b4:70:a9:e1:
                    36:db:18:0d:75:cd:16:7e:99:c4:ea:59:cd:f6:f3:
                    c7:99:1b:41:55:f0:55:ac:34:3a:b5:e5:79:62:2f:
                    3c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:03:52:9B:1D:2B:1D:A3:2E:26:C2:7F:4D:27:EF:7A:E3:C2:6E:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b74d6714-e2dd-357f-af90-1b104c54a8c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:f2:d6:05:21:79:6c:cd:81:b2:8b:74:98:cd:41:aa:c3:d7:
         53:91:e8:3e:71:ab:1b:fb:6c:68:c5:81:80:95:5b:2d:f0:ac:
         75:11:ce:b0:0c:89:ab:35:bb:c1:f9:1f:95:79:48:ea:0e:13:
         5b:e6:12:7e:fd:e9:e4:db:66:af:b5:e1:25:24:44:51:82:26:
         60:d9:6a:ec:dc:fa:38:73:38:f7:1b:0c:49:dd:2e:17:a8:37:
         f0:33:2b:4d:b4:4f:4b:46:9a:d1:02:a8:49:33:79:df:32:35:
         0e:bb:45:3f:89:09:9c:89:8a:98:bb:b7:8a:68:47:9f:da:4d:
         1d:b4:2f:00:20:e8:52:79:57:29:d2:92:e0:ca:b6:44:a0:19:
         54:a1:65:28:da:8b:3f:18:f6:43:67:90:d0:09:94:c7:16:81:
         8e:f9:89:d1:1c:23:46:cf:98:1f:57:7d:c9:78:83:fc:1c:dc:
         e1:41:9c:44:12:c4:8b:e2:1b:7b:9f:a3:8f:a2:17:ce:35:9a:
         68:e0:33:e1:48:f4:83:f7:b1:02:c7:9c:66:34:dc:44:75:34:
         89:72:e6:ad:02:6f:3c:35:e2:c9:09:ef:58:86:2c:cd:2e:f1:
         08:11:32:70:8f:2a:a4:f6:d7:51:29:74:85:ee:fa:4e:e4:0f:
         7e:9c:7e:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3itewZNrr8RFAjH8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk
MDJkOWUxNjEtZWYxNC00MDdkLTk0NTAtMDY1ZTRlNTExYzIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mXLDqwp0wyJ2WyQhhuuw6MNxXI71RbhaPzQ
fIOsmEtX7qR+sx1JFif4Xf0IIa+yx7yuepehMiSOf85hcOvwfcpDynsuC1zQnvUY
t2fgD3DMjE2n/OoIYmyWQy6X/Cvu4vqROiVqVZPFpiiAAmLh+enkBRHM2CrEGRRw
OAGd9hXLyAhoQ4Ka1Nr2rBFfrSHby7WCseocg9GGWDkt9M+9wHHPIGs1pCJTpmD7
LWjwWnFfhok/YB8cEnL3mAtDn5JUTdEZsO5k595ZbpRoJhdCp+jjdCy23IK6IGyE
aLRwqeE22xgNdc0WfpnE6lnN9vPHmRtBVfBVrDQ6teV5Yi88rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDADUpsdKx2jLibCf00n73rjwm7NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYjc0ZDY3MTQtZTJkZC0z
NTdmLWFmOTAtMWIxMDRjNTRhOGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5X0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACry1gUheWzNgbKLdJjNQarD11OR6D5xqxv7bGjFgYCVWy3wrHURzrAM
ias1u8H5H5V5SOoOE1vmEn796eTbZq+14SUkRFGCJmDZauzc+jhzOPcbDEndLheo
N/AzK020T0tGmtECqEkzed8yNQ67RT+JCZyJipi7t4poR5/aTR20LwAg6FJ5VynS
kuDKtkSgGVShZSjaiz8Y9kNnkNAJlMcWgY75idEcI0bPmB9Xfcl4g/wc3OFBnEQS
xIviG3ufo4+iF841mmjgM+FI9IP3sQLHnGY03ER1NIly5q0Cbzw14skJ71iGLM0u
8QgRMnCPKqT211EpdIXu+k7kD36cfuU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:51:01 2026 by rpki-client