Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/1b06e8cb-2f0c-3948-94f1-cc8bb65b845f.roa
File:                     1b06e8cb-2f0c-3948-94f1-cc8bb65b845f.roa (raw, json)
Hash identifier:          2VS70XdHvXiE2xDp/tHFO94dHQeunweJ8Os6dqXYRCk=
Subject key identifier:   5B:18:CC:D2:09:0B:BA:D0:9C:F1:B0:25:57:B4:DD:52:AD:C7:20:54
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584EF87CB4FFD488FF3FD89EAC40
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/1b06e8cb-2f0c-3948-94f1-cc8bb65b845f.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     394432
IP address blocks:        107.149.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:b4:ff:d4:88:ff:3f:d8:9e:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=eeca50ed-df3e-4d18-ac35-cb56503c3b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:82:01:ed:1e:68:bb:0f:57:8e:4c:cb:1b:
                    64:b6:17:bf:a3:18:ab:42:a1:dc:69:01:91:4d:b0:
                    41:65:ce:53:42:ba:37:40:45:8e:5a:58:50:b6:86:
                    88:bb:d4:7e:77:31:61:89:b0:85:7d:89:70:89:a3:
                    26:16:a0:9b:d0:aa:36:5a:a0:0c:d4:74:70:2b:a3:
                    63:bc:07:ad:a8:77:2e:99:7d:3b:f9:48:63:40:11:
                    b0:1b:68:c3:eb:fe:56:ce:4f:51:f9:9a:d7:b2:53:
                    d5:16:73:a9:a2:2b:63:96:c2:7b:2d:8d:40:6b:96:
                    98:f3:25:89:2e:d1:51:38:4b:c9:70:be:f5:22:bd:
                    f7:00:7e:c6:a1:81:fd:ec:0f:b0:0b:e3:9f:20:b9:
                    f0:79:fd:20:ab:07:9e:c1:b3:d9:47:98:da:7b:be:
                    c5:50:7e:31:d2:67:90:2f:82:70:c6:5d:c5:16:78:
                    fe:0f:b3:bc:12:f8:91:1d:ef:91:34:b6:80:0e:4d:
                    d9:a5:2a:10:dd:9d:95:b8:2c:72:86:6c:f2:bb:15:
                    94:10:32:dc:5a:3f:ca:33:d7:d0:45:f9:d8:a7:ce:
                    63:fc:d4:4a:44:fc:a2:2a:cc:14:40:5f:78:af:c6:
                    ed:b9:72:56:da:93:25:e5:46:0d:d9:f1:37:a0:dc:
                    d3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:18:CC:D2:09:0B:BA:D0:9C:F1:B0:25:57:B4:DD:52:AD:C7:20:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/1b06e8cb-2f0c-3948-94f1-cc8bb65b845f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c4:b7:2c:79:53:b3:ae:80:87:7a:d9:57:2f:71:32:88:c8:
         f5:e7:7c:f6:60:58:7a:98:2e:39:36:7f:eb:fc:0d:b8:85:8b:
         d8:7d:83:5e:21:59:ca:95:19:19:d8:33:a6:0c:c3:d3:87:1e:
         61:22:14:ed:4b:10:23:5c:db:f7:38:e4:29:2b:23:43:26:b8:
         fd:a2:e4:9a:8a:de:54:0c:d4:06:9f:80:02:a6:7d:20:ef:ed:
         2a:41:dc:be:8e:f6:e8:01:35:ea:b8:89:6d:b4:a0:fc:6f:43:
         ce:7d:30:c0:4e:4d:1c:6d:7a:d8:4d:ec:e3:18:70:5b:2c:74:
         52:12:e6:6e:6d:34:78:2e:85:81:cd:0a:45:15:f6:6e:41:21:
         f3:ba:f0:84:4c:f9:8e:57:51:1b:dc:48:81:fb:30:d5:05:03:
         a1:55:be:b6:9e:5a:1d:a2:5e:c4:9f:35:20:22:18:bb:b0:6a:
         4b:0a:09:fc:24:e8:d7:ad:c8:78:af:8e:e3:e1:90:57:b3:a2:
         94:75:c2:4d:e7:e8:8b:40:b2:8f:e5:0e:f2:16:53:94:3e:9d:
         b5:f9:66:6b:a9:26:0c:40:23:02:4e:30:29:ca:51:65:fc:5a:
         70:f4:17:e7:8a:f0:f3:37:6e:e1:93:66:3f:44:7e:b9:4e:76:
         16:ef:d9:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fLT/1Ij/P9ierEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk
ZWVjYTUwZWQtZGYzZS00ZDE4LWFjMzUtY2I1NjUwM2MzYjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIOCAe0eaLsPV45Myxtkthe/oxirQqHcaQGR
TbBBZc5TQro3QEWOWlhQtoaIu9R+dzFhibCFfYlwiaMmFqCb0Ko2WqAM1HRwK6Nj
vAetqHcumX07+UhjQBGwG2jD6/5Wzk9R+ZrXslPVFnOpoitjlsJ7LY1Aa5aY8yWJ
LtFROEvJcL71Ir33AH7GoYH97A+wC+OfILnwef0gqweewbPZR5jae77FUH4x0meQ
L4Jwxl3FFnj+D7O8EviRHe+RNLaADk3ZpSoQ3Z2VuCxyhmzyuxWUEDLcWj/KM9fQ
RfnYp85j/NRKRPyiKswUQF94r8btuXJW2pMl5UYN2fE3oNzTaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFsYzNIJC7rQnPGwJVe03VKtxyBUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMWIwNmU4Y2ItMmYwYy0z
OTQ4LTk0ZjEtY2M4YmI2NWI4NDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5WIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE3Etyx5U7OugId62VcvcTKIyPXnfPZgWHqYLjk2f+v8DbiFi9h9g14h
WcqVGRnYM6YMw9OHHmEiFO1LECNc2/c45CkrI0MmuP2i5JqK3lQM1AafgAKmfSDv
7SpB3L6O9ugBNeq4iW20oPxvQ859MMBOTRxtethN7OMYcFssdFIS5m5tNHguhYHN
CkUV9m5BIfO68IRM+Y5XURvcSIH7MNUFA6FVvraeWh2iXsSfNSAiGLuwaksKCfwk
6NetyHivjuPhkFezopR1wk3n6ItAso/lDvIWU5Q+nbX5ZmupJgxAIwJOMCnKUWX8
WnD0F+eK8PM3buGTZj9EfrlOdhbv2UQ=
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:59:00 2026 by rpki-client