Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/174428e4-b3c6-3c95-b178-24c7a636342c.roa
File:                     174428e4-b3c6-3c95-b178-24c7a636342c.roa (raw, json)
Hash identifier:          +4t0FTJ/Z9LbIfY+f1A96AFJg9WLXV9o1sXYrxVjMhc=
Subject key identifier:   5C:DB:88:17:EA:51:FE:7F:94:15:DE:F6:2E:87:8F:64:45:7C:6C:CE
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584E921F9BA5F8D9B77385EE9380
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/174428e4-b3c6-3c95-b178-24c7a636342c.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     398993
IP address blocks:        107.148.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:9b:a5:f8:d9:b7:73:85:ee:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=0d3e2e7b-bf70-4912-8b94-9e4120e82935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4d:a8:3e:40:f6:73:d1:98:ac:64:db:82:21:
                    1d:9e:31:c7:ba:8f:32:4c:41:0a:cb:41:56:fb:06:
                    09:d5:03:9f:11:b9:a2:4c:d0:c8:51:d1:57:da:1a:
                    05:3b:41:0a:77:64:d0:c0:be:1d:80:00:ee:e6:5b:
                    e1:c4:8b:f2:5a:f6:e9:26:bd:df:fd:ed:09:ae:f5:
                    63:c3:2e:c6:67:1d:a3:97:d5:24:8f:63:9a:47:5c:
                    eb:dc:2b:fb:68:7c:f4:ef:73:bd:02:6a:e2:20:a5:
                    e4:d2:cd:6d:ed:9b:bc:44:37:73:db:69:0a:7a:00:
                    e0:dd:0d:26:c4:60:cc:ea:fe:f8:f4:7a:a1:8a:db:
                    9c:31:ca:27:48:66:f4:64:2a:8c:cd:3a:fa:75:6f:
                    35:65:15:b3:b2:0f:be:d0:d9:72:d8:05:8d:e5:50:
                    a8:c6:ba:34:92:7b:b8:e8:05:64:ee:5e:3f:ca:d0:
                    e8:f3:b4:84:07:39:db:71:f9:80:ab:ec:f2:bc:74:
                    c5:e1:48:d1:cb:ec:6f:03:e2:02:c9:d6:31:71:9c:
                    9a:85:74:a4:c6:97:a1:c3:43:9f:e8:37:9d:54:c6:
                    6f:04:e8:3c:21:91:36:33:e4:46:ac:ad:bf:81:2c:
                    fb:bf:b9:86:d1:86:0d:df:53:ea:41:96:0a:87:61:
                    ce:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DB:88:17:EA:51:FE:7F:94:15:DE:F6:2E:87:8F:64:45:7C:6C:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/174428e4-b3c6-3c95-b178-24c7a636342c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d3:73:8f:a7:45:6c:f1:ff:73:0b:d8:7b:cd:3f:5a:1a:aa:
         25:db:7c:94:8a:0d:74:97:cd:d3:8d:7c:68:18:39:19:99:6f:
         99:7c:a9:b4:e9:a4:97:7c:8d:f3:83:46:14:34:b5:90:54:ff:
         f0:38:69:a1:0f:b9:23:89:ee:19:c2:3d:66:97:fd:09:7b:3f:
         15:a2:f7:be:1a:d3:eb:d3:28:d8:b5:7a:ec:40:4c:f7:3b:ba:
         2a:2f:f0:5e:62:50:e4:3e:89:d3:66:ec:39:d8:28:c0:ca:3f:
         06:9f:9f:7b:04:09:3e:e5:6e:85:71:9c:cc:8f:fb:62:d3:f8:
         9d:83:5d:00:9d:b7:76:1c:90:d8:38:43:70:4f:32:28:58:30:
         ec:f1:6a:33:2b:78:3f:13:3f:e2:be:b8:4d:0d:29:f8:b7:5e:
         7c:d4:c6:7b:f3:74:39:2e:bc:0b:b4:b6:32:63:10:73:35:98:
         d4:74:a1:db:73:00:a6:b6:f3:26:be:54:3c:26:07:d2:69:25:
         bd:5c:ce:80:30:fe:e0:19:2b:62:c9:d8:55:0b:95:4a:bd:88:
         53:da:51:0e:2b:d6:2a:0f:e2:b9:7d:a7:f2:5c:ed:f6:d2:81:
         06:92:81:f1:ff:4d:7e:e6:90:6c:26:66:e0:15:ee:cc:7f:63:
         7f:56:57:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:37:15 2026 by rpki-client