Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d4d26463-f61d-3d52-8ba5-91598a0f3b8e.roa
File:                     d4d26463-f61d-3d52-8ba5-91598a0f3b8e.roa (raw, json)
Hash identifier:          TGN+/pnf7px/2ULBrZoTMP+tI+LZ6HZOJU8TA3+u09g=
Subject key identifier:   68:CA:62:D4:A3:81:D3:EC:D1:F8:CE:50:2E:45:0D:D0:EF:5F:8D:FB
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584EB57C452FB4F7EA6706C44B80
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d4d26463-f61d-3d52-8ba5-91598a0f3b8e.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     21859
IP address blocks:        107.149.60.0/24 maxlen: 24
                          108.186.33.0/24 maxlen: 24
                          108.186.75.0/24 maxlen: 24
                          108.186.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:45:2f:b4:f7:ea:67:06:c4:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=c05117a6-6e91-4557-955d-8ee24f34d9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:f0:d4:ec:33:41:58:27:29:b6:97:f9:cf:
                    6a:41:af:f0:85:4b:ca:00:70:8d:77:bb:5a:e8:93:
                    5d:71:e8:f5:65:f4:d2:9a:db:d6:db:bb:a9:a2:09:
                    d5:fb:65:b6:55:5e:e1:d4:21:73:e0:11:4b:9c:d4:
                    ac:8d:a5:ba:ca:8c:ae:fe:9d:f9:7e:d0:d2:2f:f1:
                    5f:9d:0c:8f:9f:28:5f:9f:7b:35:d6:d6:d1:93:74:
                    99:64:40:6d:78:4a:76:29:65:4b:50:ae:5f:d4:29:
                    2e:9d:9a:5d:0f:9e:5d:cd:7c:f0:d2:40:e9:5b:a6:
                    cd:9f:a8:8e:49:71:2f:80:c4:2e:85:d1:9c:ac:0e:
                    ac:40:e8:5d:e3:40:09:b2:fd:d2:9f:9d:10:14:41:
                    ad:a5:f6:07:f8:df:f7:d5:a3:8c:73:8d:16:e5:e8:
                    07:5b:26:d3:75:be:97:11:54:d8:36:69:b1:2d:4f:
                    d1:6a:06:e2:50:04:75:d3:d9:92:d8:db:5d:03:45:
                    a0:d1:f6:74:ae:6a:cb:66:ef:a7:ef:83:8c:d6:63:
                    34:24:b4:32:f3:67:8b:6e:d4:4a:40:45:43:e6:6f:
                    c0:e2:85:d7:c8:92:36:89:0c:ee:10:75:b1:da:da:
                    35:58:ff:52:d2:b0:63:08:bf:d2:8b:2c:26:f4:a8:
                    ad:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CA:62:D4:A3:81:D3:EC:D1:F8:CE:50:2E:45:0D:D0:EF:5F:8D:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d4d26463-f61d-3d52-8ba5-91598a0f3b8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.60.0/24
                  108.186.33.0/24
                  108.186.75.0/24
                  108.186.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:e1:fc:6e:f5:fc:a3:8d:db:88:9f:7e:7c:23:97:5b:3b:6d:
         bf:8e:f1:1e:e6:e1:1c:fa:6e:c9:fe:25:8d:42:e2:77:3b:30:
         e2:c2:49:d0:71:c9:96:a9:51:3f:4b:b8:65:28:57:ba:8f:a8:
         dd:9c:0e:a7:e3:a5:9e:13:76:18:18:15:67:ce:2d:3c:b7:8f:
         2d:de:6c:e5:de:d8:35:d7:03:ad:6f:1c:ff:e7:93:d6:d1:2e:
         57:8b:94:80:a5:d4:97:2d:1b:8a:e6:d2:0f:91:52:ac:b2:6b:
         2f:aa:72:7d:e7:15:98:ca:20:ff:9c:63:a4:c6:b0:71:1c:c8:
         6d:a0:6c:9c:e4:c5:d5:52:bc:48:00:de:7d:3c:79:ff:f8:f5:
         7c:0b:34:40:bf:d2:26:25:1d:3d:6d:95:d8:86:81:e4:b1:ae:
         12:9c:37:66:44:e6:69:1a:d0:50:1a:10:a0:24:71:42:c6:25:
         16:e1:25:08:ff:14:74:93:00:4f:4b:57:c7:35:3b:2b:ca:96:
         9c:fb:d2:8d:1c:bb:8e:fd:ee:0d:fa:10:7e:05:c7:74:44:cd:
         41:85:2d:94:a2:2b:16:37:2b:a9:53:e2:1f:e0:12:4e:fc:91:
         3f:10:0b:59:b1:bd:a6:eb:db:a7:8c:bc:fe:5f:01:98:5b:8e:
         5c:43:8d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:23:51 2026 by rpki-client