Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0d78dd66-accd-30ef-82b7-eae1035b7e09.roa
File:                     0d78dd66-accd-30ef-82b7-eae1035b7e09.roa (raw, json)
Hash identifier:          lHfhWyE3h5G6pgVZkAE456U7GU3e6tWTEmOuZNKyDfQ=
Subject key identifier:   E1:99:F8:DD:30:BE:D8:F8:F0:60:CD:28:86:5B:CF:FC:9C:AF:B0:21
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F00DCCFEEF1C05F5FCD1A4300
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0d78dd66-accd-30ef-82b7-eae1035b7e09.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        142.147.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:cf:ee:f1:c0:5f:5f:cd:1a:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=a998adfe-bf5d-46ae-9be3-ee481b9f9e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0b:8d:bc:cd:d5:10:8a:c8:d0:74:87:9d:5d:
                    33:89:85:64:4b:c9:5a:96:81:c2:c0:22:a4:89:93:
                    be:5d:2f:9b:34:f3:4f:2c:2e:08:4f:95:fe:99:39:
                    5b:0f:1d:91:f0:c6:d1:9c:24:b2:00:e6:19:9e:cb:
                    80:f9:89:f8:b2:a2:1e:72:0c:34:63:6a:38:07:04:
                    1e:bf:93:83:f5:90:da:2f:5a:d4:b9:1c:0b:b3:2c:
                    e2:57:f9:3c:65:46:74:c9:e0:4f:ca:f3:1b:65:cd:
                    a9:d8:d3:d5:d1:b3:9d:3a:fb:55:e9:6a:68:eb:9b:
                    92:08:d4:e1:8e:05:8c:46:57:9f:7b:c0:77:12:25:
                    01:49:ba:a4:aa:c5:e2:8a:c3:32:2d:f6:45:6d:51:
                    b1:f7:24:12:9d:a3:49:2e:f2:4a:36:7e:50:2b:df:
                    18:90:6f:1e:d2:ef:ea:74:3d:a3:5d:5f:c0:a4:86:
                    9b:57:e5:ed:33:8e:43:1d:aa:8d:2b:ab:3d:e0:8e:
                    11:4f:05:d9:dc:4a:24:7a:d6:fa:e0:39:bb:a0:b6:
                    52:bc:08:20:69:0b:a9:b6:92:33:f7:c7:de:3d:22:
                    6e:da:9b:e5:0a:b6:3c:37:ba:68:6c:fe:c1:76:10:
                    16:fa:a9:68:b9:09:2b:83:71:ea:53:02:a4:50:0e:
                    30:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:99:F8:DD:30:BE:D8:F8:F0:60:CD:28:86:5B:CF:FC:9C:AF:B0:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0d78dd66-accd-30ef-82b7-eae1035b7e09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:c6:2a:34:7a:67:c9:6e:99:90:37:5e:f9:b0:ea:3d:92:b4:
         c1:df:36:2f:68:5c:46:b8:44:a5:e2:6d:31:8a:09:0e:64:93:
         c4:55:da:73:64:10:d6:57:f2:88:d8:e7:03:d5:9e:2d:53:0c:
         8a:df:cf:de:40:ef:99:75:bb:90:85:99:41:80:4a:03:e3:4b:
         83:95:63:68:4d:7c:25:59:f9:31:b5:e0:50:de:ff:4a:17:fd:
         e1:fe:9d:38:4a:13:6f:5b:76:46:a9:57:f0:49:44:10:6f:e5:
         d5:73:5d:09:da:dc:df:da:95:a6:f7:47:67:ff:b5:56:2b:cc:
         8a:97:27:78:63:cb:d7:4e:ea:3c:f4:1a:d0:6e:fc:75:c6:0c:
         f4:89:35:e1:6f:75:46:67:68:a2:73:01:d7:db:94:4f:1b:f6:
         97:9e:55:39:3b:7a:fa:8f:16:2d:a3:26:8c:e0:43:1c:78:71:
         20:17:9e:96:62:94:35:b3:89:78:a0:6f:4e:9a:a5:26:07:73:
         af:0a:e2:27:15:10:7e:9a:03:60:e8:e8:85:a1:93:1e:9d:b8:
         f8:ad:f1:0e:d0:04:07:83:aa:44:7a:c4:1b:eb:9f:95:57:24:
         e4:de:8d:a0:80:d5:e6:0c:8f:9d:de:c1:72:46:d5:1e:78:6e:
         16:6b:d1:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3M/u8cBfX80aQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk
YTk5OGFkZmUtYmY1ZC00NmFlLTliZTMtZWU0ODFiOWY5ZTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AuNvM3VEIrI0HSHnV0ziYVkS8laloHCwCKk
iZO+XS+bNPNPLC4IT5X+mTlbDx2R8MbRnCSyAOYZnsuA+Yn4sqIecgw0Y2o4BwQe
v5OD9ZDaL1rUuRwLsyziV/k8ZUZ0yeBPyvMbZc2p2NPV0bOdOvtV6Wpo65uSCNTh
jgWMRlefe8B3EiUBSbqkqsXiisMyLfZFbVGx9yQSnaNJLvJKNn5QK98YkG8e0u/q
dD2jXV/ApIabV+XtM45DHaqNK6s94I4RTwXZ3Eoketb64Dm7oLZSvAggaQuptpIz
98fePSJu2pvlCrY8N7pobP7BdhAW+qlouQkrg3HqUwKkUA4wnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOGZ+N0wvtj48GDNKIZbz/ycr7AhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMGQ3OGRkNjYtYWNjZC0z
MGVmLTgyYjctZWFlMTAzNWI3ZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpNrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIPGKjR6Z8lumZA3Xvmw6j2StMHfNi9oXEa4RKXibTGKCQ5kk8RV2nNk
ENZX8ojY5wPVni1TDIrfz95A75l1u5CFmUGASgPjS4OVY2hNfCVZ+TG14FDe/0oX
/eH+nThKE29bdkapV/BJRBBv5dVzXQna3N/alab3R2f/tVYrzIqXJ3hjy9dO6jz0
GtBu/HXGDPSJNeFvdUZnaKJzAdfblE8b9peeVTk7evqPFi2jJozgQxx4cSAXnpZi
lDWziXigb06apSYHc68K4icVEH6aA2Do6IWhkx6duPit8Q7QBAeDqkR6xBvrn5VX
JOTejaCA1eYMj53ewXJG1R54bhZr0UY=
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:38:04 2026 by rpki-client