Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4d9661b0-d439-3429-8984-ed7897559eaf.roa
File:                     4d9661b0-d439-3429-8984-ed7897559eaf.roa (raw, json)
Hash identifier:          hu5qdS7tRVigTeSrQhH2O5AfByiOrRKxnTNPeFRdrfI=
Subject key identifier:   A7:A4:A9:50:3F:89:0C:A7:3E:B0:7B:94:E5:6B:0A:34:6E:06:56:16
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584EC8DD53C85C727618158F4600
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4d9661b0-d439-3429-8984-ed7897559eaf.roa
Signing time:             Sun 09 Aug 2026 23:36:08 +0000
ROA not before:           Sun 09 Aug 2026 23:36:08 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     398993
IP address blocks:        107.148.112.0/22 maxlen: 22
                          107.148.116.0/23 maxlen: 23
                          107.148.119.0/24 maxlen: 24
                          107.148.121.0/24 maxlen: 24
                          107.148.123.0/24 maxlen: 24
                          107.148.124.0/24 maxlen: 24
                          107.148.125.0/24 maxlen: 24
                          107.148.126.0/24 maxlen: 24
                          107.148.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c8:dd:53:c8:5c:72:76:18:15:8f:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Aug  9 23:36:08 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=5f629793-ca0c-4165-9556-fbed9a255fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:00:0b:a2:58:4d:10:dc:df:a5:bb:22:02:
                    c7:1c:4a:e8:58:cd:27:48:9e:a1:a8:ff:c7:5f:50:
                    e5:3a:cc:03:83:ee:f9:1b:77:75:fe:8b:2a:8e:02:
                    b1:88:ed:33:a7:80:30:1a:9a:24:97:45:1f:b5:86:
                    8b:91:d7:b0:90:d4:6b:f2:bd:c0:0d:25:f1:78:13:
                    e7:1b:d1:1e:be:f1:1f:72:32:4b:46:62:3f:40:1b:
                    3f:5e:7d:71:41:d4:ee:36:29:79:d9:ee:b2:cf:43:
                    d4:4a:1a:80:5e:11:2e:2d:35:a1:cc:ac:4c:9a:d4:
                    f6:d7:63:7d:ca:29:54:41:22:de:60:fc:fa:b5:c1:
                    98:a8:25:22:c0:6e:f5:f8:50:4e:87:7d:5f:46:4d:
                    7b:7a:2b:2a:f8:65:9a:b1:2a:cf:01:a6:ae:d6:97:
                    23:fc:f5:4a:26:ab:58:b2:8b:22:59:d2:60:a6:52:
                    f8:f9:c4:5c:af:27:f6:e5:da:27:dc:a3:ac:24:eb:
                    bd:a1:d3:7e:fe:1f:19:0d:20:2e:81:e8:ba:e4:68:
                    5a:c0:f8:4f:c5:73:f0:69:35:8b:e2:3a:0c:fa:f9:
                    96:f1:39:fe:d7:54:13:53:d6:cd:22:2d:40:52:15:
                    2e:1f:04:b6:a7:4e:ff:e7:5e:54:31:df:72:49:ec:
                    cd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A4:A9:50:3F:89:0C:A7:3E:B0:7B:94:E5:6B:0A:34:6E:06:56:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4d9661b0-d439-3429-8984-ed7897559eaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.112.0-107.148.117.255
                  107.148.119.0/24
                  107.148.121.0/24
                  107.148.123.0-107.148.127.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e8:3e:27:4f:b4:98:af:c9:2d:d5:dc:d0:1f:1e:47:91:4b:
         1f:d7:1a:ba:7e:9a:cc:cd:11:f3:8a:8c:84:e3:3e:85:31:0c:
         30:eb:4a:9a:83:c0:21:6f:c3:a1:16:14:54:bf:7e:d0:07:d8:
         e4:25:0e:2e:1d:83:df:ea:14:4a:94:6f:f1:76:0d:dc:33:f4:
         56:68:21:f1:5e:06:e2:0f:14:98:fd:76:2a:23:12:b9:b4:39:
         e5:53:f7:22:86:31:4d:f1:72:7c:a0:98:8d:16:bf:79:44:28:
         e5:8a:09:6a:6d:32:e1:ff:b1:a9:4f:dc:e4:11:3c:c7:b9:4d:
         15:a4:97:3a:93:63:65:73:20:21:fe:c1:7a:22:04:6c:cb:39:
         22:6c:65:b6:5d:95:e6:44:56:d3:be:37:af:b9:4a:0a:1d:66:
         de:dd:ee:aa:46:d1:98:43:20:45:5e:78:15:26:80:99:98:38:
         b2:ce:dc:ec:d7:ba:ce:58:99:3e:7d:6e:74:0c:83:aa:32:df:
         69:42:63:4b:99:43:bc:05:32:7d:6a:8b:94:76:d9:d9:6f:b3:
         f2:de:ee:24:6e:cd:ff:f4:a5:e3:3c:51:ae:57:ab:db:01:f3:
         3b:34:77:f5:34:50:15:2a:b5:60:65:80:67:15:18:c5:c6:9c:
         c1:fe:19:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:42:47 2026 by rpki-client