Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ce6e5b0c-dfca-3351-8136-a7cfb77c39d7.roa
File:                     ce6e5b0c-dfca-3351-8136-a7cfb77c39d7.roa (raw, json)
Hash identifier:          Rbb2giCy8haAFKgzQLjfuBzAG/Cl8I1pKLuhSKCuAIQ=
Subject key identifier:   30:05:B3:AC:96:11:67:AD:EE:F5:A5:E6:5A:0C:B1:FA:A9:38:B7:9B
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F4B6E5F9EA926F668061D5000
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ce6e5b0c-dfca-3351-8136-a7cfb77c39d7.roa
Signing time:             Fri 25 Sep 2026 18:03:28 +0000
ROA not before:           Fri 25 Sep 2026 18:03:28 +0000
ROA not after:            Thu 24 Dec 2026 19:03:28 +0000
asID:                     402857
IP address blocks:        108.186.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4b:6e:5f:9e:a9:26:f6:68:06:1d:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 25 18:03:28 2026 GMT
            Not After : Dec 24 19:03:28 2026 GMT
        Subject: CN=daaa1a56-22f8-485c-8306-a88b9da07db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:61:6b:07:05:ad:1e:9f:8a:90:e7:49:ee:
                    b1:4b:49:d1:47:d2:05:ac:6d:d2:b4:b6:9a:49:4d:
                    44:77:79:d9:f0:d0:71:d7:01:59:b6:02:46:82:65:
                    4b:b4:64:3d:a2:10:0f:f6:46:15:5c:7b:f1:59:f8:
                    8b:a5:7e:6f:e3:33:e9:92:9f:ce:76:36:44:b9:c1:
                    da:d0:5a:8c:df:99:f0:c4:ce:ac:46:5f:c4:8d:f6:
                    22:51:82:ed:d3:a2:25:08:8c:9f:2e:47:b7:42:0d:
                    dc:62:1c:8d:d5:69:b4:3d:1b:1c:e0:04:24:26:93:
                    5b:c5:02:a2:01:98:7a:17:71:ce:47:b7:ef:08:f1:
                    33:4f:ce:ae:1a:1a:fe:d4:57:14:f1:32:b8:36:22:
                    79:4b:62:8a:42:a2:86:d9:4c:bd:9c:6a:79:10:78:
                    94:9a:80:d8:20:d1:cb:58:a3:9f:3e:5a:83:b9:be:
                    74:14:e4:e3:1e:de:60:e4:d3:23:bc:91:eb:4f:55:
                    93:a9:a5:66:e2:27:1f:ee:14:12:f4:c5:b6:df:7c:
                    89:d9:12:c5:38:bc:13:fc:75:28:a1:a4:56:e3:4e:
                    7c:de:78:12:51:89:2d:94:57:6f:bc:03:df:7a:71:
                    f8:ed:98:76:34:43:19:0c:a0:ec:74:88:9f:16:13:
                    6c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:05:B3:AC:96:11:67:AD:EE:F5:A5:E6:5A:0C:B1:FA:A9:38:B7:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ce6e5b0c-dfca-3351-8136-a7cfb77c39d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.186.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:25:7a:fd:50:a8:d0:e2:5b:56:12:5d:81:83:98:c8:17:2c:
         7e:c5:64:be:3c:e3:da:c2:78:c9:cd:f4:68:73:be:71:f2:7b:
         28:49:dd:7d:04:ed:df:62:8b:f2:b4:73:9c:e0:c1:b8:fa:6b:
         85:d2:7d:22:e4:52:28:8a:03:73:2d:8c:d7:ad:6e:37:26:58:
         4d:e2:28:a2:1f:4b:37:31:7e:e3:d0:34:b3:0f:7f:c7:0a:7d:
         b4:93:d1:72:fa:c0:03:ad:1c:25:0e:0c:94:2e:25:0e:ea:3b:
         c3:06:6e:30:4d:93:f1:a3:83:65:12:52:1e:3d:7a:3a:21:c5:
         15:2c:27:da:48:0a:96:1d:99:d3:27:27:d5:27:5b:af:62:0f:
         dd:c6:6e:cd:e6:c7:bd:8d:36:04:79:90:20:a8:c0:e6:14:1b:
         b1:93:ec:d5:f1:eb:bd:fd:ce:b1:05:eb:ba:dc:7b:ef:df:31:
         86:03:84:60:b3:ba:53:3a:91:30:c3:42:e9:1a:50:a2:bb:c0:
         b0:b4:21:4b:d9:43:22:fb:5c:fa:84:e1:22:1a:0c:3c:39:f1:
         12:ed:08:22:0f:a8:74:6b:59:ad:e7:81:cc:e8:28:fe:6d:99:
         26:2d:4b:06:05:34:e6:29:1f:b6:7e:7b:59:93:f1:ef:c3:98:
         96:b4:c4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 13:14:02 2026 by rpki-client