Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/38d0153e-9cf4-38d4-a394-7e72061282fb.roa
File:                     38d0153e-9cf4-38d4-a394-7e72061282fb.roa (raw, json)
Hash identifier:          N8aVYyn37Oa4lvOZ3TjHeR2I6BYe1cuH+m8gFaSFsEA=
Subject key identifier:   9B:F5:5E:24:00:F2:AF:68:45:47:6B:3C:CF:9D:CF:F1:20:FD:69:CB
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584DF4DBA6A0A66900931108BD00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/38d0153e-9cf4-38d4-a394-7e72061282fb.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     25846
IP address blocks:        107.149.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:a6:a0:a6:69:00:93:11:08:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=f5180278-eb9c-4ec5-83db-8d353c75002a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d7:79:e0:ac:fc:74:01:ac:3f:62:3d:35:3e:
                    57:77:43:19:d4:c1:28:df:3d:74:43:7d:84:a6:00:
                    65:f4:1e:fa:89:8e:4c:21:41:17:a5:42:9b:bf:bc:
                    3c:67:83:05:c9:26:14:33:95:66:a2:52:13:e7:17:
                    92:5b:15:f7:96:68:d1:77:69:c7:4c:38:20:7f:b5:
                    98:44:75:84:1a:a3:94:c9:c9:f6:fb:db:94:38:cf:
                    ca:41:34:7d:64:e2:33:f6:7f:c2:4a:16:b3:72:74:
                    af:d0:c7:7d:72:5a:1f:07:78:c7:d0:06:d4:eb:cc:
                    2b:6f:5f:52:8d:5f:2f:33:d5:0a:59:8e:77:dd:ea:
                    67:38:76:66:a2:ef:dd:1f:f7:c1:94:66:42:75:a2:
                    7c:2c:9a:93:41:bb:cc:f4:5d:4d:1d:46:f1:38:e6:
                    ee:1c:79:e4:9b:ad:fb:57:3f:00:5f:7d:96:ee:27:
                    48:7c:ed:73:15:79:21:04:d7:8a:b0:52:d1:d5:20:
                    6f:6f:4f:cf:bc:c8:9b:b5:b4:65:39:5f:c6:3d:b7:
                    42:4c:00:78:1f:38:50:a9:4a:86:6b:3c:23:51:17:
                    20:ab:55:86:f5:08:84:00:cb:95:53:10:23:6f:c8:
                    c2:51:a5:e3:0d:eb:b1:3c:3a:57:ec:95:d0:72:d7:
                    7e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F5:5E:24:00:F2:AF:68:45:47:6B:3C:CF:9D:CF:F1:20:FD:69:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/38d0153e-9cf4-38d4-a394-7e72061282fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:16:1a:88:f3:60:d5:ea:7f:0c:18:e8:e3:4d:7a:47:5d:43:
         23:9f:60:de:4a:44:3f:d7:ce:07:89:b5:ad:a1:dd:2b:b6:4b:
         7f:4c:99:82:34:a8:1a:3a:b2:13:1b:10:97:6f:81:3b:7b:90:
         37:27:a6:e8:ed:7a:5d:be:67:76:7e:88:72:c8:28:35:72:79:
         3e:26:c3:d8:04:9b:7b:56:4e:3c:59:79:17:a8:af:0f:2d:fa:
         51:2a:9b:1d:37:8f:8a:e4:2d:b1:40:b6:db:27:b5:88:42:81:
         6a:c1:32:bf:3e:82:a8:b3:74:6e:f2:ac:c5:d9:5c:55:ff:d3:
         70:0d:60:e6:99:b8:3c:60:c2:e9:f2:24:e7:b3:c6:25:f5:45:
         75:b8:70:32:fd:f5:04:52:a7:ce:3c:70:33:07:32:55:a3:a2:
         94:14:84:5a:52:42:82:da:58:e9:1f:27:dd:4d:23:d3:eb:87:
         ce:87:29:ba:22:e0:06:49:cf:df:cb:b8:8b:17:0f:8d:8e:91:
         8d:91:0b:49:76:af:e4:6e:ce:61:ab:12:e4:b4:eb:a6:fb:40:
         e5:a2:6b:03:e8:3d:60:8a:6d:36:3d:4e:98:8f:36:02:98:7a:
         3d:e1:8c:c7:5e:a9:ad:a1:e1:7f:8c:8a:a5:9e:3e:31:62:b4:
         ad:35:99:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:25:51 2026 by rpki-client