Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/2dda1db5-6491-3ca9-a837-a07fd3fdb3d9.roa
File:                     2dda1db5-6491-3ca9-a837-a07fd3fdb3d9.roa (raw, json)
Hash identifier:          GKjQ7zhztFL40hlhhPBiWWl4AWkX2dzstFe5nfkux4Y=
Subject key identifier:   F1:7F:EB:17:7D:40:DE:A8:20:15:E1:B4:92:12:F5:16:6A:BC:18:67
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584D0217ACCDCAB9370E46279EC0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/2dda1db5-6491-3ca9-a837-a07fd3fdb3d9.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     36137
IP address blocks:        107.148.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:ac:cd:ca:b9:37:0e:46:27:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=b70bd7b6-ee58-4396-8c6c-184dbe5d4322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c2:16:93:aa:cb:7d:f1:79:7a:d0:76:5f:80:
                    eb:fc:ed:24:19:a0:04:3e:5c:9b:34:38:d7:1f:a4:
                    2b:12:c1:71:13:4b:d2:c9:54:4d:22:0e:9d:65:be:
                    a2:cf:c6:75:12:13:a6:15:84:90:58:b0:f7:8a:34:
                    bd:e4:d5:9f:1e:0a:0b:f0:c1:57:f9:44:cf:38:f5:
                    99:15:99:79:0b:5d:0e:29:d8:3f:a5:13:6a:35:9d:
                    99:3c:f4:a7:8e:af:4a:df:25:ad:0a:bb:4b:53:b7:
                    8e:69:e1:8b:7f:99:4e:fa:4c:7e:33:8a:51:97:61:
                    73:3e:fb:e2:46:43:04:f1:54:ff:4d:b6:f8:dc:10:
                    35:65:1c:0c:33:b0:c4:ee:5f:40:ff:19:eb:b8:c3:
                    91:c0:e5:1f:b9:94:fe:31:c5:f8:6f:bb:f1:e1:58:
                    15:06:cf:be:37:3b:8f:dc:5c:47:86:6d:6f:5b:02:
                    38:ac:c4:f9:e8:91:bd:5d:04:fd:30:89:7d:f2:ec:
                    6f:86:33:53:4d:cd:fd:39:5f:f4:60:96:75:81:22:
                    4a:a9:ff:8c:24:64:d7:7a:b6:1c:5a:02:99:eb:48:
                    66:74:c7:f4:65:db:9a:54:9d:f3:cf:3e:7d:03:83:
                    9e:4b:ea:db:fa:ad:a3:fa:63:30:d9:0b:52:09:f2:
                    d3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7F:EB:17:7D:40:DE:A8:20:15:E1:B4:92:12:F5:16:6A:BC:18:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/2dda1db5-6491-3ca9-a837-a07fd3fdb3d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:26:5b:6b:c4:28:41:f0:fa:e1:61:04:be:94:26:21:98:4b:
         97:8b:29:27:aa:27:bf:ee:9c:8b:1b:2d:66:24:2d:1e:44:60:
         76:ca:73:5e:b2:ae:54:f8:88:23:a8:b3:6a:05:0f:23:f6:f1:
         6f:c5:6e:71:20:aa:02:46:a2:ed:6a:f1:dd:f6:01:c0:2d:a1:
         44:12:d6:2b:95:5b:08:0a:06:01:45:f3:cb:74:76:db:07:55:
         9f:cf:8e:f7:8c:9a:bb:95:be:24:13:37:7c:7e:91:dd:d3:21:
         19:48:e1:a8:6b:b8:a7:81:3d:8b:47:80:ca:76:95:28:10:05:
         ac:97:a4:bf:d0:3f:e2:10:60:ed:de:29:c9:55:52:16:31:9f:
         4a:ce:08:db:c7:32:bb:4e:aa:06:75:ad:20:af:e0:0e:e8:2a:
         18:eb:b3:6d:4d:71:94:4c:4c:d4:31:9b:ee:9b:2e:a7:69:e2:
         12:af:3a:5e:11:3f:d3:12:aa:2d:d4:a1:47:2b:8c:14:44:11:
         bf:18:14:eb:64:93:53:76:6b:03:08:65:43:e5:d2:18:e7:85:
         79:86:48:f4:33:9b:bd:f3:d6:84:6a:07:cd:be:6f:8f:f3:83:
         0a:e0:c9:0b:97:02:b3:ce:08:72:29:54:47:5b:36:43:7f:50:
         d6:39:23:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF6zNyrk3DkYnnsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
YjcwYmQ3YjYtZWU1OC00Mzk2LThjNmMtMTg0ZGJlNWQ0MzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsIWk6rLffF5etB2X4Dr/O0kGaAEPlybNDjX
H6QrEsFxE0vSyVRNIg6dZb6iz8Z1EhOmFYSQWLD3ijS95NWfHgoL8MFX+UTPOPWZ
FZl5C10OKdg/pRNqNZ2ZPPSnjq9K3yWtCrtLU7eOaeGLf5lO+kx+M4pRl2FzPvvi
RkME8VT/Tbb43BA1ZRwMM7DE7l9A/xnruMORwOUfuZT+McX4b7vx4VgVBs++NzuP
3FxHhm1vWwI4rMT56JG9XQT9MIl98uxvhjNTTc39OV/0YJZ1gSJKqf+MJGTXerYc
WgKZ60hmdMf0ZduaVJ3zzz59A4OeS+rb+q2j+mMw2QtSCfLTWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPF/6xd9QN6oIBXhtJIS9RZqvBhnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMmRkYTFkYjUtNjQ5MS0z
Y2E5LWE4MzctYTA3ZmQzZmRiM2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5RAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGwmW2vEKEHw+uFhBL6UJiGYS5eLKSeqJ7/unIsbLWYkLR5EYHbKc16y
rlT4iCOos2oFDyP28W/FbnEgqgJGou1q8d32AcAtoUQS1iuVWwgKBgFF88t0dtsH
VZ/PjveMmruVviQTN3x+kd3TIRlI4ahruKeBPYtHgMp2lSgQBayXpL/QP+IQYO3e
KclVUhYxn0rOCNvHMrtOqgZ1rSCv4A7oKhjrs21NcZRMTNQxm+6bLqdp4hKvOl4R
P9MSqi3UoUcrjBREEb8YFOtkk1N2awMIZUPl0hjnhXmGSPQzm73z1oRqB82+b4/z
gwrgyQuXArPOCHIpVEdbNkN/UNY5I2s=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:17:28 2026 by rpki-client