Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dc2335af-7629-38c5-a102-c99d2fb80e26.roa
File:                     dc2335af-7629-38c5-a102-c99d2fb80e26.roa (raw, json)
Hash identifier:          C5WEUnsstKmvu4WZH/XnOTCti2aHRRoDUIBM/lf66KE=
Subject key identifier:   E9:17:90:18:49:9D:2B:59:53:3E:E2:E5:81:4D:3A:D6:06:3B:6F:22
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584DEBEC5E2B83612CE9535C63C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dc2335af-7629-38c5-a102-c99d2fb80e26.roa
Signing time:             Fri 22 May 2026 20:12:47 +0000
ROA not before:           Fri 22 May 2026 20:12:47 +0000
ROA not after:            Thu 20 Aug 2026 20:12:47 +0000
asID:                     3257
IP address blocks:        107.149.31.0/24 maxlen: 24
                          107.149.36.0/24 maxlen: 24
                          108.186.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:ec:5e:2b:83:61:2c:e9:53:5c:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May 22 20:12:47 2026 GMT
            Not After : Aug 20 20:12:47 2026 GMT
        Subject: CN=0104420d-9615-4713-9203-52ff4ed79376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:99:25:47:04:95:c5:d5:d3:15:4d:a1:51:1d:
                    ae:30:a1:90:a2:27:42:46:c7:59:0b:5f:4e:94:9f:
                    77:2c:f1:06:be:86:61:df:04:26:a8:b9:3b:65:95:
                    03:ff:94:64:4d:b4:30:7e:68:b8:88:f5:5a:62:ab:
                    9d:88:b3:ce:64:f6:ee:5f:52:29:d7:63:34:0a:00:
                    6d:9e:c8:d6:49:12:0f:b1:a3:b4:78:3d:a2:47:c4:
                    52:62:a4:ef:12:2d:e8:34:2f:ad:8a:71:cd:ab:67:
                    6a:f3:89:1b:5f:c8:16:24:c2:13:09:7c:ad:eb:07:
                    7c:1e:a9:db:6d:2c:b9:bf:3f:64:1b:11:9e:2e:81:
                    f4:96:f5:fb:64:11:f8:c1:2e:18:29:70:a4:34:fb:
                    8a:90:2d:f1:17:fa:42:7d:a4:81:6f:a2:06:ab:fb:
                    16:3d:03:b4:1d:d7:17:de:20:6e:16:b8:8a:46:4f:
                    dc:22:49:60:90:9d:b2:62:58:37:d1:3f:f0:1d:64:
                    89:fb:f8:50:78:cb:37:03:2e:fa:36:26:22:14:c5:
                    c5:42:12:ed:0f:ad:79:7e:61:18:be:9b:1b:fe:06:
                    e2:7d:e1:81:a6:14:ec:4f:c4:60:60:d8:64:f0:74:
                    bf:51:7a:d1:f3:cf:61:29:e7:26:c6:25:0a:37:e2:
                    62:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:17:90:18:49:9D:2B:59:53:3E:E2:E5:81:4D:3A:D6:06:3B:6F:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dc2335af-7629-38c5-a102-c99d2fb80e26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.31.0/24
                  107.149.36.0/24
                  108.186.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:7d:7e:4c:29:0b:68:81:70:ef:91:14:f4:82:34:8c:3f:ee:
         e3:76:5f:9c:38:8f:97:a7:fe:9c:f2:92:9f:a9:67:0d:07:0b:
         a2:f7:ca:91:20:4d:90:2f:42:5e:47:bf:91:ee:76:57:f9:d5:
         36:2a:17:19:f7:f2:e3:af:38:e9:8e:a0:17:12:75:3c:5b:04:
         5b:7c:6e:b2:2b:c8:a9:b2:6a:4f:ce:48:7f:38:75:51:e3:31:
         13:8a:82:da:fe:46:10:a0:d6:ad:56:52:6c:05:66:50:7c:1c:
         f8:fe:be:cc:a9:34:b7:45:bd:67:ab:91:a7:b4:a6:2c:0b:aa:
         5c:a4:f7:75:7b:e4:d3:eb:a5:e4:83:76:73:72:84:84:4e:69:
         b0:3d:db:a4:42:f1:14:c8:a6:93:ea:d1:55:cd:f7:08:a9:20:
         15:3d:58:19:af:26:11:e9:48:76:d5:4a:1a:b2:65:40:ae:df:
         f5:fc:f9:84:49:79:b4:f9:d8:83:a1:66:fa:88:55:42:13:a2:
         0f:1d:c8:d1:9f:be:5c:12:12:cd:32:26:0e:2d:e4:3e:4d:0e:
         00:89:40:63:0d:a3:ac:6d:58:a6:3b:24:d9:d4:2b:54:3f:a2:
         8e:03:94:f6:40:8c:d4:b4:4a:b3:15:dc:e4:02:e0:75:ef:b3:
         92:1a:3c:a5
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE3r7F4rg2Es6VNcY8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDUyMjIwMTI0N1oXDTI2MDgyMDIwMTI0N1owLzEtMCsGA1UEAxMk
MDEwNDQyMGQtOTYxNS00NzEzLTkyMDMtNTJmZjRlZDc5Mzc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpklRwSVxdXTFU2hUR2uMKGQoidCRsdZC19O
lJ93LPEGvoZh3wQmqLk7ZZUD/5RkTbQwfmi4iPVaYqudiLPOZPbuX1Ip12M0CgBt
nsjWSRIPsaO0eD2iR8RSYqTvEi3oNC+tinHNq2dq84kbX8gWJMITCXyt6wd8Hqnb
bSy5vz9kGxGeLoH0lvX7ZBH4wS4YKXCkNPuKkC3xF/pCfaSBb6IGq/sWPQO0HdcX
3iBuFriKRk/cIklgkJ2yYlg30T/wHWSJ+/hQeMs3Ay76NiYiFMXFQhLtD615fmEY
vpsb/gbifeGBphTsT8RgYNhk8HS/UXrR889hKecmxiUKN+JiXwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFOkXkBhJnStZUz7i5YFNOtYGO28iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvZGMyMzM1YWYtNzYyOS0z
OGM1LWExMDItYzk5ZDJmYjgwZTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAa5UfAwQA
a5UkAwQAbLrKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAA19fkwpC2iBcO+RFPSCNIw/7uN2X5w4j5en/pzy
kp+pZw0HC6L3ypEgTZAvQl5Hv5Hudlf51TYqFxn38uOvOOmOoBcSdTxbBFt8brIr
yKmyak/OSH84dVHjMROKgtr+RhCg1q1WUmwFZlB8HPj+vsypNLdFvWerkae0piwL
qlyk93V75NPrpeSDdnNyhIROabA926RC8RTIppPq0VXN9wipIBU9WBmvJhHpSHbV
ShqyZUCu3/X8+YRJebT52IOhZvqIVUITog8dyNGfvlwSEs0yJg4t5D5NDgCJQGMN
o6xtWKY7JNnUK1Q/oo4DlPZAjNS0SrMV3OQC4HXvs5IaPKU=
-----END CERTIFICATE-----
Generated at Thu Jun 11 14:18:15 2026 by rpki-client