Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5cf1f111-e41d-37e8-898c-61939fe4a9bd.roa
File:                     5cf1f111-e41d-37e8-898c-61939fe4a9bd.roa (raw, json)
Hash identifier:          KGSdIVReA4gAib3o/n5d692++lTlwmATz10K/zLk5yY=
Subject key identifier:   6F:57:F1:EE:72:47:50:FB:E8:FC:50:99:74:D4:0C:F8:A1:F6:2B:F6
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584EFCACCB19425497961FB8F740
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5cf1f111-e41d-37e8-898c-61939fe4a9bd.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     398823
IP address blocks:        107.148.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:cb:19:42:54:97:96:1f:b8:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=9f843540-21cc-4ce2-a7d5-2f2ab163b4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:0e:4f:8f:b5:3c:6b:da:59:e1:89:20:39:
                    d5:a7:0b:cf:1f:9c:ee:af:9f:94:b5:db:86:81:d3:
                    83:70:e2:bc:83:dd:69:5a:00:b1:6a:62:7a:15:74:
                    f4:11:04:e1:60:4f:d5:cb:12:fe:f9:79:a4:a5:6e:
                    0f:10:ef:fd:7d:fe:97:8a:f8:f1:1f:2b:0f:79:ca:
                    0d:45:e4:74:aa:4b:ab:d6:52:61:23:09:d5:a3:e0:
                    2a:28:2b:28:3b:e0:5a:1c:f5:8e:b8:44:d8:12:37:
                    45:50:47:50:50:ea:80:d5:ac:3b:9c:bc:5b:3e:72:
                    04:bb:07:a8:4b:65:7a:e3:0c:68:24:5c:dc:a8:d7:
                    2f:9c:8b:9a:be:53:50:4d:76:66:83:2d:43:4d:04:
                    a6:b3:95:19:7b:f4:7d:87:68:b5:33:ae:58:d9:3f:
                    11:96:a3:73:7f:e6:8f:37:02:e3:f7:96:34:68:a2:
                    40:50:43:31:12:d2:c0:06:1f:9e:71:cc:0a:d4:fe:
                    e9:18:d9:d2:89:b4:50:a4:5f:72:be:0b:e2:2a:53:
                    e8:8f:d9:21:39:25:47:e4:7f:39:1c:3f:be:2c:8f:
                    48:96:87:a5:d7:f3:f1:ac:06:7f:19:26:03:52:db:
                    7c:7b:6b:dc:aa:89:26:d6:a4:2b:17:1f:b0:45:a5:
                    e0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:57:F1:EE:72:47:50:FB:E8:FC:50:99:74:D4:0C:F8:A1:F6:2B:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5cf1f111-e41d-37e8-898c-61939fe4a9bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:25:25:90:fc:b3:7c:17:9d:26:1b:31:ee:ae:97:ff:72:cd:
         59:43:9a:0a:36:28:08:7e:c4:83:56:f4:84:62:86:36:4f:df:
         6f:bb:e1:ca:dc:fc:3e:c6:89:30:15:ad:c6:ec:b9:5f:c7:51:
         41:3c:e0:2b:ec:77:2a:ed:75:62:0b:23:21:48:58:3c:ee:15:
         c8:22:c8:45:d1:b6:af:14:7f:16:f3:9c:81:9c:43:1f:43:69:
         53:1f:8f:36:88:8b:2d:6c:c2:21:60:23:7c:eb:b2:20:ef:68:
         26:35:c3:39:b0:c7:b2:e7:e5:34:6c:b3:42:d6:0a:91:f6:7a:
         0d:b3:b2:ca:9e:fc:7e:8d:5d:9a:7e:e6:13:14:75:0f:9b:94:
         bf:9c:88:a6:84:c4:20:dc:a1:9b:6b:fe:53:30:dc:15:63:83:
         17:80:89:78:aa:54:87:05:01:8d:1d:53:97:e1:8b:5e:56:5e:
         11:dd:9b:15:06:b2:f8:06:ce:26:d9:38:df:fa:27:25:41:19:
         aa:d9:50:fe:d9:22:d0:dd:0d:d6:9a:6a:5c:cf:2f:11:99:fc:
         d6:7b:a3:84:e3:ae:d7:66:27:bf:c4:fd:b2:83:f6:4f:f6:52:
         c9:67:43:88:db:61:04:db:67:2e:92:3e:3f:1d:de:a3:67:89:
         0f:5f:99:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:52:21 2026 by rpki-client