Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a99705e1-497c-3c78-95c5-49a83047f72a.roa
File:                     a99705e1-497c-3c78-95c5-49a83047f72a.roa (raw, json)
Hash identifier:          sb4xtK2bGaT2ZI248C2ZXcUg3RxA/et4NTkm3/WO404=
Subject key identifier:   9D:7F:97:08:E1:4E:74:9C:42:81:D3:06:25:EF:72:8C:87:9A:A8:C5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F6292E6B04978B084AB376980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a99705e1-497c-3c78-95c5-49a83047f72a.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        107.144.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:e6:b0:49:78:b0:84:ab:37:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=65d8d9c5-bfb3-41df-ade3-d18c44681b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:da:1c:a7:2d:68:91:f8:f8:44:3a:fb:93:d8:
                    9b:f2:93:39:d3:57:c0:95:d8:60:a7:6b:d9:d2:a7:
                    0c:30:f5:b0:3a:53:ce:40:02:b6:29:f7:c7:df:90:
                    08:c8:80:2d:04:85:18:2a:90:e8:7e:2c:fc:ed:0d:
                    43:8d:bb:ef:69:70:3f:28:1b:a5:62:60:e7:d4:36:
                    99:5c:30:e4:3c:61:e3:ea:eb:fa:36:bf:e9:ff:b3:
                    f4:b5:3a:97:71:44:17:f0:85:ea:37:d2:9b:6a:55:
                    44:b1:eb:6e:a7:a3:f9:c0:51:76:2d:be:ba:b5:3a:
                    cb:9b:fc:89:09:fc:c3:36:cc:e7:2f:28:83:2b:8e:
                    60:11:eb:0e:6a:a6:de:d0:bb:3a:5b:b9:f7:8c:75:
                    27:e4:28:3d:b1:c7:68:eb:b8:ad:36:d4:92:85:b4:
                    23:03:3d:0d:73:0f:80:89:75:17:f0:3c:e2:d7:1f:
                    33:f3:a2:52:ff:a6:21:38:aa:99:65:d3:7a:c0:f4:
                    6d:57:e3:3e:47:1f:eb:01:68:19:93:2c:28:11:2a:
                    33:45:2a:75:ee:24:54:7e:e3:91:d6:78:37:f5:06:
                    47:16:b6:d8:c6:05:f6:33:7f:00:2c:86:4b:f8:f4:
                    88:7e:b1:40:12:d4:e8:4b:a1:02:b4:03:ad:f7:17:
                    bb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7F:97:08:E1:4E:74:9C:42:81:D3:06:25:EF:72:8C:87:9A:A8:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a99705e1-497c-3c78-95c5-49a83047f72a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.144.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:be:28:3a:9a:81:14:47:cc:75:06:4b:f0:91:c0:38:42:c0:
         d9:5e:c2:ee:31:ec:58:56:52:80:ce:39:4f:fc:05:ef:cc:87:
         58:68:27:18:16:58:a4:21:fa:84:5e:39:c1:ab:9c:71:ad:47:
         d3:61:aa:a7:b1:6d:ac:bd:71:c9:9d:28:8b:49:92:aa:12:89:
         18:6c:fe:9e:3b:f9:67:aa:f0:63:62:d7:f7:ea:a6:07:7a:98:
         6c:cb:e6:c4:85:73:63:a6:ed:a2:e0:d1:12:5d:ad:50:b0:cc:
         10:04:e7:fc:ec:21:a9:3a:5b:57:e2:e1:01:cb:53:99:28:dc:
         61:22:8c:62:af:53:29:8b:91:f1:60:f2:22:ed:f9:92:a3:6d:
         f5:18:d3:07:6c:9a:12:9a:33:ea:3f:ac:f5:9d:64:35:86:ca:
         04:5c:df:3b:ef:fc:5e:50:79:c3:d4:72:03:ef:d4:29:a0:76:
         9a:f5:57:bd:bb:af:b7:22:fc:f1:8c:2c:1f:ad:62:01:cc:c6:
         ac:67:ca:9d:aa:ab:89:94:fd:b7:eb:88:88:b0:27:39:7e:68:
         e2:d5:14:4d:26:d0:d5:77:1c:4c:2a:7c:8c:c6:53:97:82:26:
         58:63:b6:65:7d:f0:0c:21:54:fe:b1:0f:9c:d5:06:d2:94:7c:
         1b:60:35:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:15:41 2026 by rpki-client