Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7192ed80-8d3c-3eb6-89f9-6e859271a61e.roa
File:                     7192ed80-8d3c-3eb6-89f9-6e859271a61e.roa (raw, json)
Hash identifier:          OeqDoInmgh98zMxR4Ijk3s3y/tiQ44KQ4BfLDL6ABtg=
Subject key identifier:   A4:E3:AA:E4:1D:70:EE:49:F0:5A:72:64:3E:41:A6:2C:CC:04:96:EA
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F8DD84B98CB69E57C913141C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7192ed80-8d3c-3eb6-89f9-6e859271a61e.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     398478
IP address blocks:        107.149.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:4b:98:cb:69:e5:7c:91:31:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=3bc05647-df6b-48fc-a4e8-e3bab90467b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:89:6c:4b:fc:af:2f:7c:64:d3:78:1f:13:0d:
                    35:27:ca:50:d2:e8:c8:a0:1f:ba:cd:75:54:2d:5d:
                    ab:cf:ca:7c:97:dd:c2:3d:39:87:ab:93:2e:c6:5c:
                    b4:d3:2a:97:e2:99:32:e5:b5:8d:07:33:eb:1d:e9:
                    c7:f1:dd:f8:1e:6e:b2:12:8e:0a:5b:49:14:59:9d:
                    b4:30:1b:b8:13:6c:a3:f7:6e:61:3b:48:a8:8e:e1:
                    84:33:67:f2:e0:f0:05:d9:1e:9f:2f:8e:5c:c8:dc:
                    36:28:90:fe:19:4f:d7:8e:5a:e7:26:44:0d:8b:86:
                    2e:74:b5:bf:cc:c5:4e:9e:6f:de:c8:61:78:ca:e8:
                    c9:21:87:66:9f:dc:4f:8d:d3:16:96:1c:76:58:b3:
                    6b:98:e2:2c:46:e9:da:79:56:fc:d5:33:3e:c9:30:
                    36:d8:8d:3d:95:ac:1e:3e:14:b0:dc:5a:d7:7a:4b:
                    a3:a8:44:d3:64:13:c5:95:06:f4:44:29:77:cb:76:
                    22:b4:dc:81:75:05:51:b4:1d:33:12:33:e1:b7:71:
                    fc:47:80:74:d3:b3:c4:bd:82:fa:b4:de:6a:79:f8:
                    cf:c1:60:12:db:d3:e7:3d:e3:6c:c9:de:4d:94:91:
                    4f:55:e3:2a:26:0b:9e:11:c9:75:1a:c3:66:fb:ba:
                    c9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E3:AA:E4:1D:70:EE:49:F0:5A:72:64:3E:41:A6:2C:CC:04:96:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7192ed80-8d3c-3eb6-89f9-6e859271a61e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:04:3d:40:08:25:6a:63:cd:e8:11:51:3b:b6:78:e2:96:8f:
         9c:f0:6c:3c:a0:c6:22:44:fc:fa:f8:e8:95:9f:de:82:6b:94:
         2f:02:06:a7:ea:b3:fe:67:15:55:e7:53:63:a5:31:2d:ca:dd:
         62:4c:a0:9b:2a:95:a2:d6:fc:64:4c:f2:73:1b:4e:c4:c3:33:
         47:b3:19:33:17:2a:c8:33:21:5e:c3:83:93:1a:ac:de:8c:28:
         04:9c:17:19:a5:ff:60:a1:5c:92:73:90:a8:61:73:59:db:af:
         c3:29:82:08:dd:a7:1b:fc:cb:4e:85:d7:93:30:ff:b7:c7:79:
         22:0e:74:de:cd:ad:79:e0:01:6d:3c:7c:62:15:09:39:67:20:
         70:a0:4b:07:02:fb:0a:b6:12:b7:7b:e4:ef:72:1b:46:c3:18:
         17:77:62:8c:2e:e2:fd:d1:38:3f:9a:f5:f3:72:e3:38:72:ce:
         04:ad:99:35:95:16:64:3d:bd:99:da:d9:3e:08:84:da:8a:61:
         ab:60:fe:64:fd:57:20:6a:4d:55:c7:2a:c3:50:24:97:60:86:
         61:c0:ef:cf:87:40:b6:1d:f8:f6:08:81:2b:93:59:99:94:40:
         ac:23:c1:a3:61:bc:97:7b:f3:c2:08:0c:a8:8b:86:3b:6e:ae:
         1e:d6:0a:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2EuYy2nlfJExQcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk
M2JjMDU2NDctZGY2Yi00OGZjLWE0ZTgtZTNiYWI5MDQ2N2IwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4lsS/yvL3xk03gfEw01J8pQ0ujIoB+6zXVU
LV2rz8p8l93CPTmHq5Muxly00yqX4pky5bWNBzPrHenH8d34Hm6yEo4KW0kUWZ20
MBu4E2yj925hO0iojuGEM2fy4PAF2R6fL45cyNw2KJD+GU/XjlrnJkQNi4YudLW/
zMVOnm/eyGF4yujJIYdmn9xPjdMWlhx2WLNrmOIsRunaeVb81TM+yTA22I09lawe
PhSw3FrXekujqETTZBPFlQb0RCl3y3YitNyBdQVRtB0zEjPht3H8R4B007PEvYL6
tN5qefjPwWAS29PnPeNsyd5NlJFPVeMqJgueEcl1GsNm+7rJQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKTjquQdcO5J8FpyZD5BpizMBJbqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNzE5MmVkODAtOGQzYy0z
ZWI2LTg5ZjktNmU4NTkyNzFhNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5VYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFcEPUAIJWpjzegRUTu2eOKWj5zwbDygxiJE/Pr46JWf3oJrlC8CBqfq
s/5nFVXnU2OlMS3K3WJMoJsqlaLW/GRM8nMbTsTDM0ezGTMXKsgzIV7Dg5MarN6M
KAScFxml/2ChXJJzkKhhc1nbr8Mpggjdpxv8y06F15Mw/7fHeSIOdN7NrXngAW08
fGIVCTlnIHCgSwcC+wq2Erd75O9yG0bDGBd3Yowu4v3ROD+a9fNy4zhyzgStmTWV
FmQ9vZna2T4IhNqKYatg/mT9VyBqTVXHKsNQJJdghmHA78+HQLYd+PYIgSuTWZmU
QKwjwaNhvJd788IIDKiLhjturh7WCn8=
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:15:43 2026 by rpki-client