Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ef256bf0-a315-3525-8579-34ea1bd8cc38.roa
File:                     ef256bf0-a315-3525-8579-34ea1bd8cc38.roa (raw, json)
Hash identifier:          i/Xb0JSaNM6m4MZ992RMunZBMn59+vpUPmTVt70o+vM=
Subject key identifier:   8A:6D:D1:CD:ED:8D:92:B6:7F:89:C8:0A:C1:9B:8E:77:55:5F:73:75
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F5EA2C63AC216B31F6F465F00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ef256bf0-a315-3525-8579-34ea1bd8cc38.roa
Signing time:             Fri 02 Oct 2026 15:09:24 +0000
ROA not before:           Fri 02 Oct 2026 15:09:24 +0000
ROA not after:            Thu 31 Dec 2026 16:09:24 +0000
asID:                     13335
IP address blocks:        107.149.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:a2:c6:3a:c2:16:b3:1f:6f:46:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Oct  2 15:09:24 2026 GMT
            Not After : Dec 31 16:09:24 2026 GMT
        Subject: CN=bb57b1c2-3e79-4bf7-bfe7-e0bf3afdb52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:15:fc:f8:3c:d2:01:fe:f3:d7:ec:f1:83:5e:
                    a7:c3:cc:ce:8d:a0:a6:b9:f0:fb:67:b3:d1:95:79:
                    8c:4a:62:44:80:06:ce:58:d4:9b:56:01:de:ab:be:
                    a8:7a:3f:c7:52:d6:b1:49:73:2c:b2:ca:c1:35:b9:
                    71:c7:37:54:f4:b2:29:81:6d:df:34:85:c2:ca:cf:
                    45:7a:6a:ea:ad:e8:23:4c:42:7e:98:54:30:23:4c:
                    ec:40:fa:bf:5c:08:f1:b6:ed:e5:f2:10:b3:1d:ef:
                    5f:42:8d:9b:ae:b1:e0:40:e4:bf:8f:12:af:f5:9e:
                    96:3d:a8:61:7e:dc:a8:90:eb:0d:f6:30:1a:0b:f9:
                    97:1d:26:27:73:5b:80:36:88:88:c3:fa:39:fc:0f:
                    ed:6e:14:1b:9e:db:0a:8b:b2:9d:6b:59:e4:ca:3a:
                    c4:a1:3e:31:dd:4e:9c:d3:82:1c:cb:a0:cd:22:42:
                    68:e6:de:43:ac:a9:a3:88:f3:41:1a:95:98:4e:04:
                    83:6f:ae:38:23:a2:58:17:c9:57:37:44:a8:6d:b2:
                    ff:16:f4:da:63:b2:70:33:9b:3a:b7:4c:ba:82:66:
                    07:3d:24:e3:35:22:96:0d:ce:1c:f4:1d:67:b6:e5:
                    ae:d4:83:83:8e:6a:39:31:9e:b8:ad:55:3d:3a:b1:
                    72:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6D:D1:CD:ED:8D:92:B6:7F:89:C8:0A:C1:9B:8E:77:55:5F:73:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ef256bf0-a315-3525-8579-34ea1bd8cc38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:13:3b:96:f4:96:6b:e3:76:f0:50:82:cb:f2:7a:ac:30:45:
         40:18:77:da:2a:75:f7:7f:90:01:17:25:25:2d:6c:9d:33:f8:
         7f:f3:1d:8b:32:d4:ad:9e:93:35:38:63:b6:3d:ab:1d:bf:c4:
         fc:71:8f:98:27:70:71:d5:71:d5:a7:df:16:d9:d3:04:00:2c:
         a9:8a:37:34:a2:19:3d:76:50:d0:ad:a4:7d:cd:59:c6:61:6c:
         0a:fc:27:7e:9c:83:0f:c3:00:c6:cc:53:07:0b:0d:e1:8e:4d:
         84:7c:12:5e:df:36:97:c1:52:9f:63:fd:a5:8e:54:7a:e7:88:
         31:a0:49:e2:82:71:13:4d:cb:b1:21:6a:ae:90:c1:27:11:cc:
         76:07:93:da:df:34:27:71:92:5d:c2:56:dc:3b:2e:d4:fb:fd:
         10:fe:4a:0b:29:bb:7f:ca:9b:49:a4:1c:e8:09:ff:ff:a4:88:
         4f:f9:6e:8e:a0:c9:69:60:11:86:68:1c:2b:50:d4:fd:09:8d:
         33:1e:4e:b7:e5:79:8c:ab:b5:30:16:41:e3:78:e2:9f:36:08:
         6b:9b:56:ed:8d:14:12:68:6e:3e:61:ed:b5:86:fa:33:2b:13:
         ed:24:6b:a3:d8:49:62:54:91:6c:59:30:21:cc:26:17:94:f7:
         7e:e4:1e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:00:33 2026 by rpki-client