Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8ad7970-72e8-3a4d-9b23-efdb2d4459c4.roa
File:                     c8ad7970-72e8-3a4d-9b23-efdb2d4459c4.roa (raw, json)
Hash identifier:          VG6il+f7GJWxGDYL5vupmlH1rTnleLKCpYEHT32jyUs=
Subject key identifier:   D8:9C:03:63:4F:A5:28:9A:69:7B:56:F6:2D:0A:81:F0:7D:ED:82:EE
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F4976AF9D3545C6D707939308
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8ad7970-72e8-3a4d-9b23-efdb2d4459c4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399195
IP address blocks:        107.148.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:af:9d:35:45:c6:d7:07:93:93:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0ccc6d74-18de-4641-a349-d0a0cd032a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:02:ed:bb:58:e6:94:bc:26:d1:d4:61:92:17:
                    64:22:30:55:c3:96:5e:7b:40:ad:ea:24:9c:be:10:
                    1a:6a:3b:96:33:da:7c:33:aa:3e:a1:73:aa:4c:19:
                    9c:ce:67:43:3b:f5:eb:47:05:f6:59:f6:48:08:ce:
                    26:fc:41:c2:da:3b:b3:49:a9:f4:2d:2c:74:be:64:
                    ae:39:dc:1e:9a:31:2f:a0:c3:15:00:ee:a3:72:c4:
                    df:16:59:b8:37:b8:e1:43:c3:f4:9a:33:88:59:d2:
                    6d:53:6a:44:37:86:92:b7:bf:21:1c:ab:ac:33:64:
                    cf:fc:09:72:c8:af:46:2e:e6:76:24:90:d6:cb:10:
                    0a:bf:7d:08:2b:45:4b:ca:46:40:a0:85:e1:19:31:
                    d3:42:e8:f0:49:eb:bb:a9:89:1e:44:5a:4a:da:7d:
                    0c:a8:2e:8f:f4:b2:de:11:50:17:81:55:f7:5a:c0:
                    44:e9:3e:6b:ee:1b:5f:63:b3:d2:c4:e9:30:75:0a:
                    86:88:e4:bd:ae:a7:e2:d2:3c:ae:e5:f9:b6:bf:4a:
                    cd:17:ed:fe:05:2c:3e:e4:46:c1:2c:e6:dc:c5:c6:
                    00:86:87:41:5a:af:e9:81:8d:ec:a8:2b:56:8d:a2:
                    ba:90:01:f9:61:ec:cd:af:c1:3e:be:a8:04:5c:38:
                    a5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9C:03:63:4F:A5:28:9A:69:7B:56:F6:2D:0A:81:F0:7D:ED:82:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8ad7970-72e8-3a4d-9b23-efdb2d4459c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:da:e3:00:63:42:7a:ac:5b:a9:93:7d:b5:67:17:7c:ea:9b:
         fb:c7:d4:fc:f6:83:9b:ba:ec:64:1d:e5:27:1d:ed:8e:d9:b1:
         58:71:57:6f:be:26:50:38:fa:0b:82:1c:32:98:d8:7a:b1:63:
         12:09:95:eb:be:61:d7:df:8e:7d:b6:5e:b7:99:71:71:b8:f2:
         e0:81:bf:7e:0c:1a:89:66:e8:21:96:4c:11:c7:97:8b:e0:d6:
         9d:60:e2:04:a7:be:c9:72:bb:06:90:03:f8:93:5e:8a:0c:fb:
         0f:c7:0f:69:dd:7c:44:9b:2d:13:76:a0:55:71:f1:ca:54:22:
         a3:64:a1:39:c8:44:c9:a7:1f:5f:bf:99:ed:29:10:54:3e:15:
         fc:fe:c0:8e:3b:ed:05:54:1b:f8:ad:1f:3b:b7:bd:ef:73:d5:
         fa:87:48:0c:81:da:94:cc:62:78:a2:2f:18:8b:c8:33:ce:2e:
         cf:fe:4e:f6:b2:1e:b6:44:0f:1d:b6:57:13:40:af:f6:6f:62:
         e7:f0:e4:07:c0:ad:5a:69:3a:e9:4d:a1:25:44:3e:48:71:46:
         5f:3a:0f:36:5b:b0:7d:ea:d8:e7:37:30:3b:80:4f:17:8c:6a:
         a7:29:1c:eb:f5:71:c4:bc:ea:62:d0:d2:30:04:ee:63:db:9c:
         26:02:5c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:04:12 2026 by rpki-client