Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/e32af89e-724a-3396-8f57-eefcf2ceca3f.roa
File:                     e32af89e-724a-3396-8f57-eefcf2ceca3f.roa (raw, json)
Hash identifier:          Xm2kUkEzGItTfOXEjxBvjOS5NnrjeXGZoeBMadNnteo=
Subject key identifier:   2C:B6:DC:E0:08:F4:0D:72:E5:C5:CC:44:3B:14:89:2F:67:91:1C:78
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F1B94DC8790045FE83675D3A0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/e32af89e-724a-3396-8f57-eefcf2ceca3f.roa
Signing time:             Tue 08 Sep 2026 14:42:13 +0000
ROA not before:           Tue 08 Sep 2026 14:42:13 +0000
ROA not after:            Mon 07 Dec 2026 15:42:13 +0000
asID:                     14618
IP address blocks:        108.186.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:94:dc:87:90:04:5f:e8:36:75:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep  8 14:42:13 2026 GMT
            Not After : Dec  7 15:42:13 2026 GMT
        Subject: CN=1d7616f2-27c7-4118-9d37-21cca23739a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:f3:b0:bc:a7:99:ab:e5:2a:8b:8e:c1:93:
                    81:bc:82:cc:05:59:94:fe:48:7d:e2:ca:f5:60:9c:
                    dc:d0:1a:2a:40:54:4c:dd:dd:ed:21:9b:01:f1:48:
                    78:a2:d6:ae:48:97:07:b6:1c:c5:00:d6:8a:5f:fa:
                    8f:78:7f:6f:e6:89:29:d3:4f:e0:48:6b:a5:90:6e:
                    bd:97:e6:39:27:ef:d3:46:3d:dd:02:58:b1:fe:da:
                    f5:88:63:b3:79:bf:cf:fd:1b:3f:6e:4b:c4:c6:ae:
                    17:0a:1c:6a:cf:c2:46:e4:7b:e3:eb:bb:45:9f:62:
                    d3:5c:9c:d9:ff:04:2f:a4:52:58:d6:e6:44:8a:8d:
                    95:37:46:51:45:8d:32:12:a6:40:53:e8:77:f0:c7:
                    29:ba:c1:78:f3:10:4b:3f:ea:95:57:49:cc:a1:cf:
                    85:f4:e7:6d:1d:0c:06:23:14:83:2d:9d:31:47:17:
                    75:c0:ee:d6:38:1e:5f:6e:a9:d1:8c:22:98:8d:4c:
                    3d:56:3d:fd:69:6d:1c:0d:c4:e9:d5:25:eb:76:01:
                    2a:31:5d:b0:56:30:e8:77:ba:a5:34:f5:5b:c4:cb:
                    6e:10:a7:d8:22:7f:0e:b7:be:a6:c4:f3:18:28:3f:
                    21:55:b4:66:0e:a1:cb:ed:31:44:eb:07:93:00:c2:
                    55:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B6:DC:E0:08:F4:0D:72:E5:C5:CC:44:3B:14:89:2F:67:91:1C:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/e32af89e-724a-3396-8f57-eefcf2ceca3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.186.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ce:09:53:1e:f7:f7:e9:2a:11:e0:cd:e6:9b:1e:85:21:de:
         ea:62:29:97:f5:0f:0a:43:1b:7a:92:8b:aa:71:83:64:e2:2f:
         38:01:fc:8b:2d:7b:6e:61:04:bd:43:0d:a1:be:81:71:56:89:
         cd:9a:d4:66:6b:b7:02:2b:e1:e0:72:00:d0:f7:24:a5:77:bb:
         22:f1:58:36:7f:2e:92:d7:79:87:8c:61:fd:c1:c8:33:23:5a:
         9b:c3:b7:c7:d2:d6:9c:8b:c0:d1:7c:e6:52:64:20:b9:14:7a:
         e8:2c:de:1b:f3:e5:26:d7:40:bc:79:b0:28:30:c7:c1:a6:4f:
         19:71:b1:2a:a9:0c:29:c8:ec:57:d3:84:c5:48:e3:ce:84:1a:
         33:5c:cd:d3:9a:35:07:08:06:95:e7:78:66:b8:c8:9c:ae:10:
         59:35:9b:71:69:fe:94:07:8b:55:dd:bd:c5:01:8f:7f:e8:7c:
         e7:ca:4b:94:34:1e:67:78:fb:47:e0:fe:79:5b:41:db:8b:26:
         cd:90:92:6d:8c:03:01:23:f3:81:9f:5b:c9:e1:37:7a:1a:d3:
         d3:90:e9:db:e7:43:47:b4:c4:f2:f8:d8:c6:01:7f:6f:ef:e4:
         bf:da:0d:fa:c4:22:61:9f:b4:6c:4c:46:9e:7f:60:1d:a8:d3:
         5a:f3:71:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8blNyHkARf6DZ106AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDkwODE0NDIxM1oXDTI2MTIwNzE1NDIxM1owLzEtMCsGA1UEAxMk
MWQ3NjE2ZjItMjdjNy00MTE4LTlkMzctMjFjY2EyMzczOWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh/zsLynmavlKouOwZOBvILMBVmU/kh94sr1
YJzc0BoqQFRM3d3tIZsB8Uh4otauSJcHthzFANaKX/qPeH9v5okp00/gSGulkG69
l+Y5J+/TRj3dAlix/tr1iGOzeb/P/Rs/bkvExq4XChxqz8JG5Hvj67tFn2LTXJzZ
/wQvpFJY1uZEio2VN0ZRRY0yEqZAU+h38McpusF48xBLP+qVV0nMoc+F9OdtHQwG
IxSDLZ0xRxd1wO7WOB5fbqnRjCKYjUw9Vj39aW0cDcTp1SXrdgEqMV2wVjDod7ql
NPVbxMtuEKfYIn8Ot76mxPMYKD8hVbRmDqHL7TFE6weTAMJVewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCy23OAI9A1y5cXMRDsUiS9nkRx4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvZTMyYWY4OWUtNzI0YS0z
Mzk2LThmNTctZWVmY2YyY2VjYTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLoiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABHOCVMe9/fpKhHgzeabHoUh3upiKZf1DwpDG3qSi6pxg2TiLzgB/Ist
e25hBL1DDaG+gXFWic2a1GZrtwIr4eByAND3JKV3uyLxWDZ/LpLXeYeMYf3ByDMj
WpvDt8fS1pyLwNF85lJkILkUeugs3hvz5SbXQLx5sCgwx8GmTxlxsSqpDCnI7FfT
hMVI486EGjNczdOaNQcIBpXneGa4yJyuEFk1m3Fp/pQHi1XdvcUBj3/ofOfKS5Q0
Hmd4+0fg/nlbQduLJs2Qkm2MAwEj84GfW8nhN3oa09OQ6dvnQ0e0xPL42MYBf2/v
5L/aDfrEImGftGxMRp5/YB2o01rzcSI=
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:40 2026 by rpki-client