Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ee4bb545-40fc-3809-a86f-9da4d33fe902.roa
File:                     ee4bb545-40fc-3809-a86f-9da4d33fe902.roa (raw, json)
Hash identifier:          s5XHsmu8RBdZe+u+D8DOFyPYynrb1reGzNBiedMgUZw=
Subject key identifier:   DC:6A:24:BC:E8:F9:28:F3:24:D0:0A:20:A4:A3:B1:AA:88:2C:8F:8F
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584E4DB9DA132E144606B1F64580
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ee4bb545-40fc-3809-a86f-9da4d33fe902.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     54600
IP address blocks:        107.148.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:da:13:2e:14:46:06:b1:f6:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=41aa4fdc-bc22-4e94-9d62-490192aacc9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:16:ec:e0:e3:8a:aa:6d:20:c9:54:43:04:11:
                    2b:92:b9:9a:92:94:4d:a0:d2:fc:eb:73:f4:42:c7:
                    d4:69:bc:32:ec:06:34:6b:3e:1e:5c:0d:b4:62:e8:
                    56:9a:84:ed:95:72:a2:4c:0d:20:8b:4e:52:c9:84:
                    27:ce:e3:ab:9f:2b:6a:a5:08:45:d0:1d:d3:1a:48:
                    07:53:bb:81:0d:7d:69:93:e3:4a:0d:37:e2:d1:3f:
                    18:f3:cc:0e:c0:dd:32:82:1c:7e:31:d8:fb:8f:cf:
                    95:8b:3b:84:77:f8:97:58:90:4a:ea:d7:3f:9a:3d:
                    f8:74:c4:a7:d6:14:2d:a8:f3:be:66:92:56:d5:84:
                    90:6e:cb:af:3b:58:95:5c:85:f1:3a:5b:4f:d7:54:
                    94:1b:de:52:ee:bb:1c:ba:01:02:ef:be:1d:ac:d5:
                    39:03:b7:bc:a5:33:0f:8a:b7:ef:9d:3f:e8:37:56:
                    2c:28:7a:79:9d:59:f4:bc:08:68:59:99:ee:d1:3c:
                    6d:b0:39:10:f8:97:0d:76:09:4c:45:91:0e:8d:57:
                    0f:19:9f:28:4f:c8:f2:25:9a:90:e7:13:97:23:79:
                    ed:52:49:9f:7f:c3:3d:18:ca:eb:aa:6b:e7:59:70:
                    ce:b0:58:06:c9:8e:ad:0d:52:94:2d:2c:32:34:5b:
                    20:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6A:24:BC:E8:F9:28:F3:24:D0:0A:20:A4:A3:B1:AA:88:2C:8F:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ee4bb545-40fc-3809-a86f-9da4d33fe902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:43:d8:64:1d:9b:4c:9b:9c:36:fb:00:74:e6:65:51:80:f4:
         9c:b2:40:1f:6d:41:b9:f6:56:d4:5b:54:6c:13:6b:58:95:64:
         08:0c:57:79:48:09:2c:77:f5:a1:4c:e2:dd:84:91:46:50:43:
         47:0b:8d:2b:27:90:1d:ab:a8:87:63:f6:5b:2f:5a:16:b1:aa:
         b0:c8:65:ba:1b:d1:3a:af:cf:0b:84:bf:1f:6e:62:55:1a:6b:
         fc:60:7b:fc:60:e4:90:05:28:c4:09:83:38:d7:cd:5d:bf:9f:
         f7:ed:0e:2c:ed:a5:8d:b5:e5:b1:1f:02:87:12:14:1a:4f:d2:
         82:ca:25:47:d7:d5:ba:0f:d0:77:56:d6:3a:41:d6:f7:96:ac:
         10:aa:8a:99:1b:92:4f:23:26:79:f2:60:a3:df:f3:2a:bf:4d:
         51:70:92:49:86:81:fb:91:34:6a:87:79:95:f8:62:eb:e2:05:
         61:0a:55:e6:ca:47:98:09:59:66:d2:13:70:05:6f:e1:e9:cf:
         7d:f4:ab:60:59:2c:e6:a7:f4:41:56:03:2a:91:09:51:91:c1:
         59:8a:d4:88:f4:1e:fb:ac:cf:25:4b:c8:0b:16:fa:ec:01:0b:
         5d:9b:fb:57:d3:a4:ac:09:64:94:9a:16:51:91:83:10:b1:b4:
         0d:94:ae:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:30:38 2026 by rpki-client