Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3191c874-df4c-3ac9-9064-a9c2a4cb8ed6.roa
File:                     3191c874-df4c-3ac9-9064-a9c2a4cb8ed6.roa (raw, json)
Hash identifier:          aqSVm6gGgOJcOHWFokvS2i7x2DStlMWR/0EyJHw8RZw=
Subject key identifier:   D3:03:47:A2:C0:72:5A:F7:11:E3:77:81:62:99:67:90:E1:DF:C1:E0
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F08195723AD581D036B72A6C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3191c874-df4c-3ac9-9064-a9c2a4cb8ed6.roa
Signing time:             Tue 01 Sep 2026 15:12:58 +0000
ROA not before:           Tue 01 Sep 2026 15:12:58 +0000
ROA not after:            Mon 30 Nov 2026 16:12:58 +0000
asID:                     399486
IP address blocks:        107.149.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:08:19:57:23:ad:58:1d:03:6b:72:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep  1 15:12:58 2026 GMT
            Not After : Nov 30 16:12:58 2026 GMT
        Subject: CN=d619891b-c12a-4813-a3ea-5a8b7c511b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2e:36:76:84:a9:41:86:e3:58:3c:d0:52:ce:
                    b5:f9:92:f2:6a:bf:fe:8b:66:42:0d:9c:3f:8d:12:
                    ac:96:e9:57:fd:8a:a4:9f:fb:a8:90:59:c7:93:cb:
                    be:ad:76:6f:65:ee:97:6d:47:7c:b7:59:3a:b2:91:
                    df:e7:07:5b:5b:6b:4e:6d:4b:fc:1c:a9:96:d5:ad:
                    eb:cd:74:84:05:8c:82:ce:47:e4:d4:af:fb:7a:de:
                    ef:d5:ab:00:ec:5a:a6:49:25:d3:bf:50:df:1f:6a:
                    79:f1:80:aa:d5:ee:e6:64:c8:7a:32:16:9b:a4:2e:
                    03:aa:b9:fa:be:41:23:3f:3b:e0:11:c7:c6:be:95:
                    a2:2a:32:b6:f0:be:43:c9:4b:39:af:d6:4f:be:df:
                    6b:98:89:57:7f:13:28:bb:15:32:b0:9a:f1:72:6e:
                    ef:02:e7:fc:96:51:2e:f9:f1:25:2e:41:a2:c8:18:
                    0c:a2:64:38:71:02:2e:a8:35:3e:c0:16:07:3d:7c:
                    f7:e5:8e:0e:69:42:75:ec:47:fe:8b:73:68:48:98:
                    17:f6:1e:46:13:d8:7b:c0:2c:15:7f:89:68:16:95:
                    ad:83:70:54:e7:53:1d:9f:97:ff:a1:39:1c:41:c7:
                    10:39:b8:c1:f2:21:e4:19:4c:a2:84:75:bd:33:29:
                    31:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:03:47:A2:C0:72:5A:F7:11:E3:77:81:62:99:67:90:E1:DF:C1:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3191c874-df4c-3ac9-9064-a9c2a4cb8ed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:4b:9c:f0:89:19:5e:11:6f:ca:77:5c:3d:ad:dc:64:cd:c8:
         f2:21:bb:f2:7d:12:d8:8b:cb:da:b1:5f:5e:b5:59:a3:02:0d:
         a0:f7:43:b9:74:a4:c7:5f:22:b4:0f:01:b0:6b:8f:07:e8:20:
         4a:61:e2:38:c4:95:35:69:c3:8e:7d:52:a8:65:84:db:a1:07:
         33:63:ff:3b:48:d5:24:19:08:6e:46:a5:69:d2:3f:28:26:3b:
         da:64:ac:66:2a:2e:e9:4a:90:33:36:4a:ca:6d:70:da:55:8a:
         0c:2d:34:69:6f:3d:73:91:67:2a:6d:b6:ef:cb:5d:cf:18:6d:
         b4:9c:28:34:0f:68:6e:fc:3c:5f:40:8e:a4:d3:43:02:d7:5f:
         3e:20:9d:70:85:60:9d:79:2b:a2:6a:5e:ad:78:be:9d:0c:68:
         68:6d:0f:0b:31:2b:21:a2:9c:29:a4:38:1d:ac:52:42:05:83:
         0d:a1:0f:c3:9c:96:30:ee:57:86:58:82:e8:38:a1:81:3c:be:
         3b:e8:a4:a2:da:37:52:f4:18:48:0c:df:9e:6f:41:b9:a0:75:
         c1:c1:96:8c:d3:5e:b2:8a:4d:cd:e7:00:80:d8:8f:0e:fe:05:
         dd:eb:91:b2:8a:64:3e:ae:7a:39:f3:a9:e6:bb:86:15:50:af:
         bc:6d:5d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:55 2026 by rpki-client