Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c3d0a88f-53b9-39ad-8374-6751a13c7099.roa
File:                     c3d0a88f-53b9-39ad-8374-6751a13c7099.roa (raw, json)
Hash identifier:          eda6uMLplQ1PrubibikqzJ9dEtUEz0Q2vzFEWmzXvpE=
Subject key identifier:   8C:61:21:E5:3A:B2:BA:E1:B9:07:A1:BD:06:63:EE:AD:92:41:B8:E4
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F8035B854640F239657800DD0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c3d0a88f-53b9-39ad-8374-6751a13c7099.roa
Signing time:             Wed 14 Oct 2026 15:47:09 +0000
ROA not before:           Wed 14 Oct 2026 15:47:09 +0000
ROA not after:            Tue 12 Jan 2027 16:47:09 +0000
asID:                     14618
IP address blocks:        108.186.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:80:35:b8:54:64:0f:23:96:57:80:0d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Oct 14 15:47:09 2026 GMT
            Not After : Jan 12 16:47:09 2027 GMT
        Subject: CN=182219bf-92ff-4ef8-8bd3-bb036b12604d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:84:5d:85:62:ca:ad:6f:84:1a:b9:9b:19:32:
                    3e:52:db:4f:39:c9:fb:cb:c5:90:48:c2:55:ff:ae:
                    02:1b:ba:a5:10:51:0d:72:38:5e:ca:3a:10:c8:e8:
                    d0:8b:d2:85:88:5d:8c:4c:84:54:ff:7d:20:67:fb:
                    0b:fa:78:d8:0f:7b:ae:ff:bd:f4:73:19:00:77:98:
                    72:81:29:d5:63:b3:f5:4d:76:7a:08:34:4e:94:57:
                    49:dd:f3:7b:bb:7c:cd:43:7d:e1:52:7b:2f:11:cd:
                    b2:ed:5e:9c:17:c4:f6:d3:1f:37:c9:54:16:5d:0e:
                    09:9e:7e:8c:aa:f3:f0:95:a5:b6:d1:5d:05:fc:72:
                    c8:cf:0b:4d:c5:27:70:ca:69:94:8d:77:e9:a7:bd:
                    5b:e2:17:17:30:7d:f8:7a:f6:6a:b4:39:a5:17:af:
                    59:52:8e:8f:0a:34:9c:c9:40:05:77:4c:d7:08:6b:
                    f4:43:d7:73:d6:e7:cf:ea:a8:f0:65:97:ff:7b:53:
                    81:8b:61:36:95:09:42:55:dd:5d:f5:69:4b:c0:aa:
                    f0:45:94:86:62:dc:51:a2:b3:c5:19:81:b1:45:29:
                    37:14:53:e9:5e:b4:f4:81:d0:f0:b1:89:91:4d:27:
                    58:1e:b8:e3:cd:03:8b:e2:6e:7f:1f:47:53:d7:ed:
                    36:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:61:21:E5:3A:B2:BA:E1:B9:07:A1:BD:06:63:EE:AD:92:41:B8:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c3d0a88f-53b9-39ad-8374-6751a13c7099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.186.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:a4:64:08:3c:8e:07:fa:f5:f4:0f:86:08:b1:f6:ef:1b:e4:
         ae:74:7b:a3:86:09:a7:fb:0a:71:8c:66:f5:1e:5d:be:e9:08:
         2d:9e:94:34:ec:b8:30:9f:4d:d0:86:69:c0:4a:69:62:e1:dc:
         04:c4:2c:f0:37:82:25:b4:e4:82:5b:6c:9c:bd:e6:a8:d2:32:
         bb:f5:2e:96:77:03:d5:62:16:f8:d9:78:8d:c2:91:c8:94:3b:
         28:5e:89:7b:6e:41:a3:31:93:ca:fb:11:19:ea:d6:6e:ac:89:
         f3:df:20:8e:0e:c0:e7:11:c1:a2:da:cd:13:ad:87:ec:61:6d:
         6e:9d:7f:71:ba:72:35:91:d9:d3:a2:aa:ea:8a:c1:14:88:4e:
         92:b1:78:2c:8b:18:74:57:c3:2d:2d:56:41:3a:6e:d5:2d:0a:
         69:b9:e2:62:76:1e:79:52:2c:76:a3:a3:ef:d6:68:a4:9c:e8:
         9f:c3:8d:ad:cf:bf:ba:8d:0c:fe:7f:d7:d0:f4:02:15:0e:2a:
         c1:81:3e:18:8b:4b:98:3f:9f:af:27:cd:6a:57:5f:03:b4:1e:
         e7:fe:a1:53:dd:64:93:d5:62:fa:58:67:23:a6:1e:e2:ff:f5:
         ab:93:90:a4:6e:76:c8:f4:9c:45:58:49:d7:32:46:f7:f1:76:
         5d:51:7d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:15:32 2026 by rpki-client