Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4cc90c6c-7e51-3f45-a02c-d1a0ac60e38a.roa
File:                     4cc90c6c-7e51-3f45-a02c-d1a0ac60e38a.roa (raw, json)
Hash identifier:          ahNIiaHDqNFiTVVbv18tYzMtoXquYFI1x3H8C06Y/hA=
Subject key identifier:   19:3E:A0:DA:E6:3B:F1:91:0D:3A:A6:F8:AF:AB:5D:8E:B9:B8:5F:C6
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584EA790198405603B0ACAE95800
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4cc90c6c-7e51-3f45-a02c-d1a0ac60e38a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398823
IP address blocks:        107.148.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:19:84:05:60:3b:0a:ca:e9:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=417deb1c-f46c-48c6-b8b8-327907ffc7fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a2:3d:74:0c:27:7b:21:f0:eb:71:36:15:ee:
                    58:3e:52:85:2c:95:63:4f:30:a1:b7:0b:b2:77:2c:
                    06:ae:d5:04:b0:98:4e:88:5e:4f:95:99:65:f1:ed:
                    44:23:d7:88:eb:9d:93:62:4b:e0:27:60:3b:bd:9f:
                    fd:ba:08:37:6d:6c:ed:b3:51:1a:39:b9:fd:7b:80:
                    3b:48:4d:7c:a4:7a:2a:e4:24:fa:4c:df:2b:63:9f:
                    dc:bd:ac:8b:9e:75:4c:7b:2c:28:44:ef:53:08:78:
                    95:c9:21:20:b7:72:cd:33:46:f5:6f:3f:e5:ca:eb:
                    e9:ff:92:94:6c:b3:05:fd:14:ea:98:63:20:97:eb:
                    46:51:bd:a3:cb:37:0f:63:d6:74:9b:90:c3:2c:89:
                    13:e9:cf:17:ea:99:da:4e:73:88:22:67:eb:fc:34:
                    b2:2e:6d:98:59:c6:4d:b3:4f:bf:60:18:aa:c8:b4:
                    c8:5a:a3:05:64:27:7d:7d:fe:f6:22:80:a9:76:d3:
                    52:9f:f9:93:98:c5:e0:2a:b0:67:8d:53:0d:bf:17:
                    fe:97:8b:a8:80:63:b7:c5:ac:2c:3d:31:ee:bc:00:
                    47:a3:cf:94:e5:21:19:1d:90:3f:e9:1b:02:e7:9e:
                    a1:27:68:6e:3f:74:1d:fe:f4:7b:8b:5e:8c:4a:5e:
                    24:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3E:A0:DA:E6:3B:F1:91:0D:3A:A6:F8:AF:AB:5D:8E:B9:B8:5F:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4cc90c6c-7e51-3f45-a02c-d1a0ac60e38a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:1e:f3:7f:a9:6f:90:9b:5c:13:96:b6:8d:3d:a4:6a:ec:6e:
         49:d3:dd:39:c6:90:3d:b3:96:1c:49:b6:04:96:81:c0:ac:fa:
         c8:49:77:5c:dd:0d:5a:56:3f:45:c2:6c:43:88:24:06:64:ea:
         ec:7f:49:03:65:09:cc:3b:6e:19:f8:d5:0e:4c:b6:21:f1:7a:
         e6:0b:cd:2a:a6:2c:1e:87:02:ba:3b:47:15:ec:68:b2:ec:eb:
         10:20:28:90:15:81:2b:65:f8:67:aa:21:f8:38:32:90:ea:6d:
         68:f6:89:90:8d:c9:cd:1a:17:ea:e3:ab:af:ae:a2:f1:39:76:
         aa:97:e8:8f:4e:52:6c:32:13:ff:57:8c:27:f7:68:55:8c:a3:
         1a:22:08:54:c0:10:3f:d1:0a:c4:ee:62:25:ee:13:49:be:c7:
         84:31:ef:84:35:36:2b:ef:48:53:bb:53:32:35:fe:48:3d:22:
         0a:3e:51:3e:77:ab:10:ae:0a:07:b2:51:b2:60:dd:2d:1f:16:
         1b:b5:e2:d5:1f:b3:50:e7:69:42:dc:5e:72:81:f5:33:75:5f:
         85:1f:19:aa:83:23:49:80:47:53:ce:dc:43:34:f1:14:39:fe:
         c6:0c:a7:61:e7:ef:24:4e:aa:1d:50:49:d2:c6:b0:7c:01:9a:
         cf:1a:28:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:17:18 2026 by rpki-client