Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/05b505ae-2ef9-3cd3-aa96-11ae23a9d325.roa
File:                     05b505ae-2ef9-3cd3-aa96-11ae23a9d325.roa (raw, json)
Hash identifier:          51hQhKyJQeDFoRrGhtySBcMHYY7n8PU5RJMZ4WJCnAs=
Subject key identifier:   BC:45:F8:43:EA:B4:7F:60:4D:B7:9B:C7:11:1A:06:C5:86:01:ED:4F
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584FA1BB285210D96F8456B4EE20
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/05b505ae-2ef9-3cd3-aa96-11ae23a9d325.roa
Signing time:             Mon 26 Oct 2026 15:57:42 +0000
ROA not before:           Mon 26 Oct 2026 15:57:42 +0000
ROA not after:            Sun 24 Jan 2027 16:57:42 +0000
asID:                     198969
IP address blocks:        108.186.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a1:bb:28:52:10:d9:6f:84:56:b4:ee:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Oct 26 15:57:42 2026 GMT
            Not After : Jan 24 16:57:42 2027 GMT
        Subject: CN=875506ef-5378-42af-b676-db8f31099406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8e:ec:e9:7c:60:3c:16:4e:4a:4f:d5:fa:ca:
                    10:27:8b:6d:8a:49:97:e2:5f:2f:5a:1d:64:9a:3f:
                    9d:34:c3:78:4a:8d:2d:45:02:0e:e8:76:26:b9:e2:
                    a5:d2:b4:8d:71:0a:16:ea:5c:61:85:3b:ca:d9:5c:
                    26:e2:6c:7f:6e:36:e5:5c:c8:c9:d4:91:4a:0c:53:
                    2f:cf:c7:46:b8:85:70:3a:08:83:d3:e0:c5:42:7e:
                    4b:ed:99:bf:ac:e0:23:2e:1a:f8:cc:8b:6d:61:49:
                    fd:f2:ef:43:d2:95:7a:84:3d:f9:06:76:f5:7c:f7:
                    b1:1f:ef:7a:52:3b:e5:69:9e:c8:fa:c9:d2:59:a3:
                    8a:8a:30:74:35:56:5a:d7:ab:be:c1:b2:ea:79:d0:
                    b1:e5:54:59:34:ad:87:5b:cb:37:42:5e:da:44:10:
                    41:52:57:94:01:0a:14:43:0f:8d:1e:e6:6c:a3:a8:
                    21:c3:a0:9e:ca:a3:c1:b7:08:16:a7:76:e5:3e:5c:
                    a0:f5:3c:7d:c6:c6:4d:03:8e:fe:2b:12:6a:88:51:
                    37:3b:7d:f4:17:9d:97:fd:fd:c8:c3:06:6e:33:8f:
                    29:0f:fb:bf:c4:a7:5a:44:ad:12:82:71:3a:79:dc:
                    69:17:04:0a:4e:62:50:05:11:1a:9f:fc:c0:0a:fe:
                    32:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:45:F8:43:EA:B4:7F:60:4D:B7:9B:C7:11:1A:06:C5:86:01:ED:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/05b505ae-2ef9-3cd3-aa96-11ae23a9d325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.186.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:0e:e2:0c:58:c9:15:7c:66:e7:23:3b:6e:76:58:95:9e:81:
         f5:7d:60:07:2d:47:4f:bc:eb:c7:5e:6e:92:1f:88:04:05:21:
         c8:3f:e1:f6:5b:7c:30:b0:9b:8a:d0:c3:ee:d6:8a:6c:59:e6:
         07:45:77:30:1f:15:a7:ff:94:36:b5:aa:fe:7e:6a:59:d1:87:
         6c:9d:e5:d8:bc:ae:18:44:e6:6b:20:93:1d:6d:74:e6:b1:dd:
         da:f7:e6:f4:7b:86:c6:7f:63:3b:ba:30:8a:86:e5:8a:d6:f7:
         a5:34:cd:7d:fb:0e:af:47:23:93:79:99:1e:75:1f:8f:6c:05:
         e0:79:59:76:1b:ba:61:a7:97:93:05:24:2a:e7:5a:a1:d9:e4:
         c1:07:f5:13:7f:b0:94:d6:f1:55:9a:b8:a5:7e:5e:64:19:69:
         23:70:88:c3:f3:3c:a7:51:75:07:55:99:e0:83:34:0c:00:33:
         03:af:30:d6:94:dd:b0:97:4c:a2:d7:16:36:44:94:c9:05:ce:
         1e:8b:7f:2b:74:05:88:5c:a7:a3:3f:da:08:cc:ce:3b:04:2a:
         6c:93:27:06:3b:eb:d6:fc:c2:fb:dc:be:aa:5c:07:5c:38:08:
         bb:53:6a:ef:be:f0:f7:3b:fc:23:12:1a:a1:f0:26:19:84:69:
         a8:c0:be:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+huyhSENlvhFa07iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MTAyNjE1NTc0MloXDTI3MDEyNDE2NTc0MlowLzEtMCsGA1UEAxMk
ODc1NTA2ZWYtNTM3OC00MmFmLWI2NzYtZGI4ZjMxMDk5NDA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs47s6XxgPBZOSk/V+soQJ4ttikmX4l8vWh1k
mj+dNMN4So0tRQIO6HYmueKl0rSNcQoW6lxhhTvK2Vwm4mx/bjblXMjJ1JFKDFMv
z8dGuIVwOgiD0+DFQn5L7Zm/rOAjLhr4zIttYUn98u9D0pV6hD35Bnb1fPexH+96
UjvlaZ7I+snSWaOKijB0NVZa16u+wbLqedCx5VRZNK2HW8s3Ql7aRBBBUleUAQoU
Qw+NHuZso6ghw6CeyqPBtwgWp3blPlyg9Tx9xsZNA47+KxJqiFE3O330F52X/f3I
wwZuM48pD/u/xKdaRK0SgnE6edxpFwQKTmJQBREan/zACv4ysQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLxF+EPqtH9gTbebxxEaBsWGAe1PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMDViNTA1YWUtMmVmOS0z
Y2QzLWFhOTYtMTFhZTIzYTlkMzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLpmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADsO4gxYyRV8ZucjO252WJWegfV9YActR0+868debpIfiAQFIcg/4fZb
fDCwm4rQw+7WimxZ5gdFdzAfFaf/lDa1qv5+alnRh2yd5di8rhhE5msgkx1tdOax
3dr35vR7hsZ/Yzu6MIqG5YrW96U0zX37Dq9HI5N5mR51H49sBeB5WXYbumGnl5MF
JCrnWqHZ5MEH9RN/sJTW8VWauKV+XmQZaSNwiMPzPKdRdQdVmeCDNAwAMwOvMNaU
3bCXTKLXFjZElMkFzh6Lfyt0BYhcp6M/2gjMzjsEKmyTJwY769b8wvvcvqpcB1w4
CLtTau++8Pc7/CMSGqHwJhmEaajAvpU=
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:40:49 2026 by rpki-client