Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/93d78133-2f82-3a41-b2dd-93dbb1305d9e.roa
File:                     93d78133-2f82-3a41-b2dd-93dbb1305d9e.roa (raw, json)
Hash identifier:          wOQFAureNgK6t3YtkL6IOOQAoD8165yyefLDy6M4lXU=
Subject key identifier:   F0:51:F4:52:56:83:34:F0:AF:AC:3A:65:B9:FE:AD:81:A2:A7:9C:B4
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584E6C6F665BD5E9131B6E883390
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/93d78133-2f82-3a41-b2dd-93dbb1305d9e.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     398823
IP address blocks:        107.149.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:66:5b:d5:e9:13:1b:6e:88:33:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=0aecc79c-6c15-4338-89f5-490df473314e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:86:61:9e:fd:e8:9a:18:37:36:e7:8f:1e:e2:
                    68:8b:8b:31:d5:c6:3c:15:e6:b5:35:17:1f:7d:ef:
                    ce:ed:c9:97:22:75:5a:67:cb:c6:d4:e4:53:2d:85:
                    98:6a:65:ab:39:d9:11:65:99:20:c1:df:97:b9:f6:
                    e5:72:e4:70:a5:a9:0a:f6:8b:7a:09:3a:33:f9:f8:
                    76:92:9f:ba:fd:c0:cf:48:50:03:0b:8a:48:69:eb:
                    dd:43:1c:8a:82:18:74:51:bd:3b:a8:f6:9c:75:20:
                    03:db:52:4a:a9:d0:14:5d:80:63:1a:f8:87:a8:c8:
                    67:cf:fa:f6:36:42:b2:15:64:14:12:f5:e6:c3:d1:
                    b8:73:1b:7c:1b:0c:f5:0c:fa:21:d9:f0:cd:0e:41:
                    fe:03:89:e4:cc:32:99:71:86:9f:99:37:5e:e9:b9:
                    84:9f:94:b3:d8:91:3f:95:6e:73:f1:13:69:55:e1:
                    3b:3c:1b:52:cb:8d:f7:62:d6:78:2f:30:7c:d4:3c:
                    63:df:60:e4:25:22:3f:06:52:86:a2:8b:c9:16:d3:
                    e6:4f:3b:c1:3b:85:65:7b:fa:fb:26:96:e0:20:01:
                    a3:cc:6d:16:1a:8a:f1:86:dc:a2:3e:0e:a1:1d:32:
                    91:6c:0b:a3:f5:44:f4:03:15:b4:0d:ea:d0:c3:63:
                    f6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:51:F4:52:56:83:34:F0:AF:AC:3A:65:B9:FE:AD:81:A2:A7:9C:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/93d78133-2f82-3a41-b2dd-93dbb1305d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e9:f8:4b:09:b4:05:63:3c:40:2d:38:30:32:5f:a7:f9:5b:
         70:a7:87:87:19:d3:4a:8d:32:81:89:4d:39:72:91:0d:38:03:
         23:9c:25:86:21:c6:a0:f8:e3:9c:f9:76:0e:92:25:ae:02:65:
         3d:98:ff:94:df:a3:b9:54:2a:c9:7a:65:af:9a:5b:fb:e3:34:
         8b:0f:9b:0c:89:fc:98:1a:56:3c:5a:cd:cb:88:81:09:9b:65:
         ec:09:c7:43:b4:94:82:9b:ca:66:d9:9d:a2:54:44:10:b0:9b:
         cf:79:bb:c9:03:ff:e8:2e:b5:05:53:ff:03:6a:1a:92:99:bf:
         fa:9a:8e:0e:5e:12:31:07:88:78:79:24:61:48:a6:a3:2a:c4:
         79:6b:be:55:ed:36:3f:62:22:fb:7f:5d:1a:2f:27:b6:ea:de:
         9f:f7:c6:83:93:ed:21:bb:8e:e9:ff:8d:16:86:37:56:cf:0c:
         ef:14:3d:a4:9e:c1:bf:d2:a2:12:9e:d1:63:98:fb:41:fc:10:
         30:19:7a:61:ac:f4:26:90:3c:62:9d:25:f3:3e:e6:e0:48:89:
         d6:02:99:9b:07:43:53:da:1f:fa:70:aa:5d:89:55:31:9c:1d:
         50:9f:e8:bf:6d:b1:ba:8b:ec:39:fb:ed:1e:1c:df:bf:a4:d2:
         67:1b:02:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb2Zb1ekTG26IM5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk
MGFlY2M3OWMtNmMxNS00MzM4LTg5ZjUtNDkwZGY0NzMzMTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIZhnv3omhg3NuePHuJoi4sx1cY8Fea1NRcf
fe/O7cmXInVaZ8vG1ORTLYWYamWrOdkRZZkgwd+XufblcuRwpakK9ot6CToz+fh2
kp+6/cDPSFADC4pIaevdQxyKghh0Ub07qPacdSAD21JKqdAUXYBjGviHqMhnz/r2
NkKyFWQUEvXmw9G4cxt8Gwz1DPoh2fDNDkH+A4nkzDKZcYafmTde6bmEn5Sz2JE/
lW5z8RNpVeE7PBtSy433YtZ4LzB81Dxj32DkJSI/BlKGoovJFtPmTzvBO4Vle/r7
JpbgIAGjzG0WGorxhtyiPg6hHTKRbAuj9UT0AxW0DerQw2P2QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPBR9FJWgzTwr6w6Zbn+rYGip5y0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvOTNkNzgxMzMtMmY4Mi0z
YTQxLWIyZGQtOTNkYmIxMzA1ZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5WOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGHp+EsJtAVjPEAtODAyX6f5W3Cnh4cZ00qNMoGJTTlykQ04AyOcJYYh
xqD445z5dg6SJa4CZT2Y/5Tfo7lUKsl6Za+aW/vjNIsPmwyJ/JgaVjxazcuIgQmb
ZewJx0O0lIKbymbZnaJURBCwm895u8kD/+gutQVT/wNqGpKZv/qajg5eEjEHiHh5
JGFIpqMqxHlrvlXtNj9iIvt/XRovJ7bq3p/3xoOT7SG7jun/jRaGN1bPDO8UPaSe
wb/SohKe0WOY+0H8EDAZemGs9CaQPGKdJfM+5uBIidYCmZsHQ1PaH/pwql2JVTGc
HVCf6L9tsbqL7Dn77R4c37+k0mcbAhI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:41:17 2026 by rpki-client