Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5da27fa4-f7c5-3cbc-93ea-d6c766cb446b.roa
File:                     5da27fa4-f7c5-3cbc-93ea-d6c766cb446b.roa (raw, json)
Hash identifier:          bxW8Vk3mPrd9seuwi+Ie2rFwr1T2gdaDuT+fZ5rIR5s=
Subject key identifier:   5E:74:62:23:34:2C:39:53:F1:D2:8F:38:77:B0:D1:D1:2A:E7:42:CC
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584DC6DC3D7467781070CAE9F6C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5da27fa4-f7c5-3cbc-93ea-d6c766cb446b.roa
Signing time:             Sat 09 May 2026 13:35:23 +0000
ROA not before:           Sat 09 May 2026 13:35:23 +0000
ROA not after:            Mon 08 Jun 2026 15:42:27 +0000
asID:                     14618
IP address blocks:        107.149.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:dc:3d:74:67:78:10:70:ca:e9:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May  9 13:35:23 2026 GMT
            Not After : Jun  8 15:42:27 2026 GMT
        Subject: CN=8dac7506-bec7-4801-9199-f9457196e8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:96:75:16:e6:39:94:f7:f2:48:df:8f:46:c7:
                    e4:90:ae:88:4e:d5:a0:eb:d0:7e:86:48:bf:52:c7:
                    b1:05:b8:3f:82:d7:35:e9:5c:9c:12:9c:20:82:ec:
                    0e:f8:b0:49:70:c6:96:35:e6:d4:06:5d:58:af:88:
                    d6:dc:3b:38:6c:96:30:91:18:f8:f7:13:20:4b:c5:
                    ca:a5:b7:3e:da:58:7c:8b:64:b2:4d:08:03:16:90:
                    a4:3d:28:db:ad:b9:b3:ff:c2:9f:12:4a:df:52:66:
                    fd:35:df:2e:ff:2f:d1:f2:54:4f:17:bf:77:e7:74:
                    bb:00:c6:60:ae:1a:07:27:9c:f2:8c:23:2f:cb:db:
                    d3:36:7a:5c:a9:4c:9e:f7:6e:f6:b9:5f:65:d5:e5:
                    5e:a9:30:51:61:ba:c2:90:ad:90:a5:79:07:0c:d5:
                    6d:01:c3:ca:82:ce:8f:43:e9:5d:16:f3:3c:5f:e4:
                    da:5b:9a:46:0a:0a:2d:4d:ef:8f:03:e9:87:31:fb:
                    f4:11:92:64:01:81:5d:2d:23:38:a6:77:90:62:f1:
                    40:a1:1c:4e:83:f0:49:96:8c:5f:2a:f1:48:20:20:
                    10:ad:a9:3f:bb:47:0a:8a:7d:f6:f6:c2:78:ce:d6:
                    89:51:95:96:14:9d:3c:06:75:69:8a:c5:b4:08:59:
                    cd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:74:62:23:34:2C:39:53:F1:D2:8F:38:77:B0:D1:D1:2A:E7:42:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5da27fa4-f7c5-3cbc-93ea-d6c766cb446b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:87:28:41:51:ae:f5:89:6a:9e:ca:e5:85:18:01:58:be:06:
         41:92:8f:27:eb:a1:4b:81:35:50:b6:a8:1e:af:7d:e8:8e:9a:
         e7:6d:8d:d6:9d:8a:2b:2d:11:20:b4:4d:9c:fe:a5:04:f6:b6:
         36:e2:f9:76:24:9f:59:be:7e:51:be:9a:c7:01:f5:57:40:03:
         0a:49:7c:e3:61:ca:88:04:f3:83:bb:ba:c1:33:f3:c4:ed:7a:
         c3:6a:ef:b5:f7:ad:9d:d9:a1:1c:50:a1:3d:44:74:82:34:6c:
         03:38:eb:75:38:b1:bb:c8:77:37:b0:1a:5c:8f:38:5b:85:57:
         a8:64:8a:4b:d1:75:4c:cc:81:39:ed:7a:8d:f3:33:70:aa:77:
         a1:d4:7e:f8:64:7b:93:05:3e:22:f1:18:96:da:ef:27:8c:7f:
         e9:63:4c:8a:c7:80:c2:7b:21:fb:b3:b6:1a:18:24:62:f7:6d:
         17:2a:78:92:bc:a4:66:8a:86:ef:e7:d1:eb:57:66:55:15:0a:
         e6:21:2d:44:96:22:7b:cd:f2:89:c7:cd:9a:71:09:48:d7:58:
         65:6d:77:a3:14:14:15:07:b9:81:c9:51:74:4f:a8:d5:64:f2:
         cd:f8:10:92:ca:fc:81:ec:4c:14:8e:8d:0a:e5:69:75:ad:94:
         a8:59:d8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:37:14 2026 by rpki-client