Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/eb737e95-e9f1-3d40-9cb0-6d271e945774.roa
File:                     eb737e95-e9f1-3d40-9cb0-6d271e945774.roa (raw, json)
Hash identifier:          WREd6Uq0Go/97XQTBbtWl/L/pQSuIN+LuaxvAzq+DvI=
Subject key identifier:   82:1F:7F:6E:AA:1B:28:D2:F6:39:CB:76:E4:AE:40:B4:A8:14:05:30
Certificate issuer:       /CN=9cae117d-b11f-4787-b860-f4d311531af3
Certificate serial:       010D0C9F4328584F6292E05A499F6908137F668C
Authority key identifier: 8F:AA:F3:0C:EE:B1:82:F2:F0:D5:9F:35:B1:E4:9D:A7:90:BE:95:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/eb737e95-e9f1-3d40-9cb0-6d271e945774.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     26207
IP address blocks:        107.190.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:e0:5a:49:9f:69:08:13:7f:66:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cae117d-b11f-4787-b860-f4d311531af3
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=a598e6ed-4922-4c8b-8124-2033d0b95f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f1:73:36:4c:0f:58:9f:97:c2:01:4d:b5:4e:
                    f1:b5:f8:53:da:ea:0c:65:ab:e4:12:72:1b:89:ff:
                    57:06:d9:7a:cd:96:b3:0c:fd:46:20:1d:81:14:b6:
                    3f:09:86:9c:e7:4d:b3:41:c6:63:4d:b9:68:e8:bf:
                    5f:86:04:a6:d0:73:31:00:da:9c:d1:bc:47:86:94:
                    99:70:61:bd:09:aa:d4:a5:61:5b:ee:4a:93:08:92:
                    9e:dc:a6:0e:68:fc:7f:f6:56:c4:d4:99:d0:bb:46:
                    12:7a:2b:78:4c:e0:4c:2d:40:a6:80:66:4c:d7:ba:
                    62:09:1b:31:9e:8a:91:51:b9:f4:f6:b7:05:5a:37:
                    5a:ce:85:f0:24:0e:a4:69:85:c8:31:e1:70:b2:14:
                    87:d8:4d:44:c4:08:36:38:28:00:6b:19:b9:58:9f:
                    5b:aa:5f:6a:82:a7:a0:a7:f4:b1:39:40:18:db:24:
                    72:2f:46:9e:c6:db:94:9a:77:3e:62:46:aa:af:8b:
                    2e:34:66:ca:f8:1a:c1:ac:3d:ed:b7:d0:3e:1e:e0:
                    7c:e4:58:2d:38:49:5b:e9:a4:3f:e5:95:68:e6:d8:
                    94:d7:69:8d:a0:33:a7:e8:34:af:ee:a2:c6:74:0c:
                    37:b1:11:3b:ab:fd:b7:ac:24:39:f5:dc:69:d3:90:
                    b9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1F:7F:6E:AA:1B:28:D2:F6:39:CB:76:E4:AE:40:B4:A8:14:05:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/eb737e95-e9f1-3d40-9cb0-6d271e945774.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.crl

            X509v3 Authority Key Identifier:
                keyid:8F:AA:F3:0C:EE:B1:82:F2:F0:D5:9F:35:B1:E4:9D:A7:90:BE:95:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.190.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a8:bc:67:24:69:a3:a7:04:dd:8b:1c:f0:d4:2d:c0:17:8a:
         cf:db:bd:aa:3e:3a:71:97:1d:00:f8:4a:29:b4:9e:11:df:2f:
         47:00:38:2b:87:87:29:d7:96:71:9e:ad:1c:70:e6:2e:1a:f7:
         4c:e1:4a:8b:ea:8e:ca:48:d6:49:63:bd:0a:ad:0e:da:c0:79:
         0c:e8:54:b7:e2:52:07:46:67:d3:fd:8f:0c:b2:90:16:c2:ff:
         fe:ad:a6:31:71:e6:1d:8c:d5:b2:f5:6f:86:dc:ea:2d:17:56:
         87:b8:09:b6:bf:d6:7c:6d:13:fa:f6:d1:a0:d3:cf:63:8f:c4:
         2d:b0:cd:9d:83:fd:c7:ce:d1:12:1e:3b:41:91:17:d7:59:54:
         43:1a:eb:61:87:6e:8d:3a:84:86:99:4a:69:6e:79:e9:1a:6f:
         8e:fb:15:a7:55:86:5c:04:89:e3:59:e2:cd:b4:fc:67:37:f8:
         8a:ad:01:84:98:ad:90:74:5d:c3:08:a2:91:a3:9c:df:40:56:
         41:81:07:5e:2d:64:3a:8f:50:91:6f:d1:34:07:af:7c:04:77:
         28:b1:b1:3c:3e:8d:a9:3b:f9:55:4f:4e:b2:52:c3:dc:9e:62:
         e4:9d:46:2b:de:dc:f3:f0:4b:cb:ae:9b:5e:84:d8:7e:e4:74:
         95:91:9f:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikuBaSZ9pCBN/ZowwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWNhZTExN2QtYjExZi00Nzg3LWI4NjAtZjRkMzExNTMx
YWYzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
YTU5OGU2ZWQtNDkyMi00YzhiLTgxMjQtMjAzM2QwYjk1ZjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/FzNkwPWJ+XwgFNtU7xtfhT2uoMZavkEnIb
if9XBtl6zZazDP1GIB2BFLY/CYac502zQcZjTblo6L9fhgSm0HMxANqc0bxHhpSZ
cGG9CarUpWFb7kqTCJKe3KYOaPx/9lbE1JnQu0YSeit4TOBMLUCmgGZM17piCRsx
noqRUbn09rcFWjdazoXwJA6kaYXIMeFwshSH2E1ExAg2OCgAaxm5WJ9bql9qgqeg
p/SxOUAY2yRyL0aextuUmnc+Ykaqr4suNGbK+BrBrD3tt9A+HuB85FgtOElb6aQ/
5ZVo5tiU12mNoDOn6DSv7qLGdAw3sRE7q/23rCQ59dxp05C51QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIIff26qGyjS9jnLduSuQLSoFAUwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85Y2Fl
MTE3ZC1iMTFmLTQ3ODctYjg2MC1mNGQzMTE1MzFhZjMvZWI3MzdlOTUtZTlmMS0z
ZDQwLTljYjAtNmQyNzFlOTQ1Nzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWNhZTExN2QtYjExZi00Nzg3LWI4
NjAtZjRkMzExNTMxYWYzLzljYWUxMTdkLWIxMWYtNDc4Ny1iODYwLWY0ZDMxMTUz
MWFmMy5jcmwwHwYDVR0jBBgwFoAUj6rzDO6xgvLw1Z81seSdp5C+lbowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85Y2FlMTE3ZC1iMTFmLTQ3ODctYjg2MC1mNGQz
MTE1MzFhZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDa77gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmovGckaaOnBN2LHPDULcAXis/bvao+OnGXHQD4Sim0nhHfL0cAOCuH
hynXlnGerRxw5i4a90zhSovqjspI1kljvQqtDtrAeQzoVLfiUgdGZ9P9jwyykBbC
//6tpjFx5h2M1bL1b4bc6i0XVoe4Cba/1nxtE/r20aDTz2OPxC2wzZ2D/cfO0RIe
O0GRF9dZVEMa62GHbo06hIaZSmlueekab477FadVhlwEieNZ4s20/Gc3+IqtAYSY
rZB0XcMIopGjnN9AVkGBB14tZDqPUJFv0TQHr3wEdyixsTw+jak7+VVPTrJSw9ye
YuSdRive3PPwS8uum16E2H7kdJWRnxQ=
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:50:28 2026 by rpki-client