Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5da27fa4-f7c5-3cbc-93ea-d6c766cb446b.roa
File:                     5da27fa4-f7c5-3cbc-93ea-d6c766cb446b.roa (raw, json)
Hash identifier:          mu28rODzeiFui+d12pAM51a1ahp+9oIQSYNM35g7/rM=
Subject key identifier:   C5:41:AC:70:55:AA:AD:9B:F5:05:5A:81:A4:01:76:22:B6:D4:A8:45
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584D5234F1A430124A9D123C2200
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5da27fa4-f7c5-3cbc-93ea-d6c766cb446b.roa
Signing time:             Sat 28 Mar 2026 18:44:32 +0000
ROA not before:           Sat 28 Mar 2026 18:44:32 +0000
ROA not after:            Mon 08 Jun 2026 15:42:27 +0000
asID:                     14618
IP address blocks:        107.149.11.0/24 maxlen: 24
                          107.149.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:f1:a4:30:12:4a:9d:12:3c:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Mar 28 18:44:32 2026 GMT
            Not After : Jun  8 15:42:27 2026 GMT
        Subject: CN=7634640b-5e08-4906-8e0c-e3bb0ed3e83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f8:2c:1d:c3:5f:f4:c1:9d:a4:77:11:69:43:
                    41:18:50:90:82:04:04:06:b0:5a:0e:a2:fe:33:70:
                    64:57:db:2a:af:81:ed:73:b9:d8:d9:78:3e:11:11:
                    b0:4a:aa:8d:72:d4:42:12:ab:91:ce:23:7f:ff:07:
                    fe:01:ae:57:db:87:16:55:4b:18:e6:a5:93:e2:d5:
                    bd:e9:00:73:e5:f6:97:e1:f4:98:f9:08:9a:05:b0:
                    d9:58:e2:97:c1:0c:4d:54:03:91:32:7f:56:af:e7:
                    0b:d9:b8:a3:58:d2:28:f2:b8:77:6e:58:a3:b2:56:
                    90:09:68:b0:de:8e:92:c7:b2:13:bb:2d:29:bd:23:
                    4f:4a:a9:5f:cb:4e:64:ea:40:cf:86:24:fb:9b:9e:
                    c5:d4:33:00:37:61:e9:8d:ea:12:a0:dd:a2:e8:86:
                    2a:c5:71:d4:72:ae:7d:ca:aa:6e:06:10:5e:2a:00:
                    9d:df:b5:94:06:34:42:b6:09:c9:e4:4d:2b:67:4b:
                    ee:85:8c:5c:d5:dc:b5:80:3f:9c:a3:28:cc:0f:25:
                    84:1a:48:46:4e:1d:3b:1c:63:60:93:6b:69:b5:2d:
                    4a:11:56:83:91:c1:1f:bb:69:bb:06:46:f9:0d:0e:
                    e1:fc:30:cc:23:5a:70:48:45:60:6c:ea:8b:31:8d:
                    eb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:41:AC:70:55:AA:AD:9B:F5:05:5A:81:A4:01:76:22:B6:D4:A8:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5da27fa4-f7c5-3cbc-93ea-d6c766cb446b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.11.0/24
                  107.149.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:fb:86:ca:d7:13:38:9a:00:77:8f:e1:a4:f8:d1:ed:b0:a9:
         22:11:3d:0b:c9:40:55:82:3d:a0:f8:1e:06:1d:87:39:2d:11:
         f3:22:88:26:04:49:38:87:d7:53:c9:5a:35:eb:6c:5f:30:d4:
         23:54:2e:db:58:cb:da:1f:fb:5d:92:33:ad:5f:c6:18:cf:37:
         4a:80:38:33:11:1c:94:aa:6d:d1:0c:12:29:9c:57:bb:18:2f:
         77:67:89:36:89:cf:ee:62:17:1a:04:98:72:8b:d8:f8:5f:12:
         20:94:f0:6c:44:c8:bf:77:7c:f5:22:00:56:cf:d5:06:49:b2:
         e8:c7:00:7c:b4:79:3e:a7:dc:2b:84:57:c4:a2:26:35:9f:2d:
         2c:25:3b:1b:05:e7:11:6c:54:3e:89:ba:44:de:4c:76:52:a6:
         23:d9:c3:a5:7e:19:69:1d:a6:f6:32:27:6f:87:67:a1:4f:f2:
         82:cd:3b:41:52:6b:c8:f2:50:66:9c:76:74:31:1d:21:46:f7:
         9c:31:e4:c1:01:ca:d4:47:56:45:14:9e:01:2f:7d:4a:a5:b0:
         cc:c8:b0:0e:0b:93:fa:76:db:a9:61:0d:60:69:84:d1:20:1f:
         e0:5f:10:fb:ff:59:3f:dc:d1:54:4e:42:8e:7c:c6:a1:f9:2c:
         1a:a6:21:7b
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1SNPGkMBJKnRI8IgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDMyODE4NDQzMloXDTI2MDYwODE1NDIyN1owLzEtMCsGA1UEAxMk
NzYzNDY0MGItNWUwOC00OTA2LThlMGMtZTNiYjBlZDNlODNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vgsHcNf9MGdpHcRaUNBGFCQggQEBrBaDqL+
M3BkV9sqr4Htc7nY2Xg+ERGwSqqNctRCEquRziN//wf+Aa5X24cWVUsY5qWT4tW9
6QBz5faX4fSY+QiaBbDZWOKXwQxNVAORMn9Wr+cL2bijWNIo8rh3blijslaQCWiw
3o6Sx7ITuy0pvSNPSqlfy05k6kDPhiT7m57F1DMAN2HpjeoSoN2i6IYqxXHUcq59
yqpuBhBeKgCd37WUBjRCtgnJ5E0rZ0vuhYxc1dy1gD+coyjMDyWEGkhGTh07HGNg
k2tptS1KEVaDkcEfu2m7Bkb5DQ7h/DDMI1pwSEVgbOqLMY3rUQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMVBrHBVqq2b9QVagaQBdiK21KhFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNWRhMjdmYTQtZjdjNS0z
Y2JjLTkzZWEtZDZjNzY2Y2I0NDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAa5ULAwQA
a5UuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAH77hsrXEziaAHeP4aT40e2wqSIRPQvJQFWCPaD4HgYdhzkt
EfMiiCYESTiH11PJWjXrbF8w1CNULttYy9of+12SM61fxhjPN0qAODMRHJSqbdEM
EimcV7sYL3dniTaJz+5iFxoEmHKL2PhfEiCU8GxEyL93fPUiAFbP1QZJsujHAHy0
eT6n3CuEV8SiJjWfLSwlOxsF5xFsVD6JukTeTHZSpiPZw6V+GWkdpvYyJ2+HZ6FP
8oLNO0FSa8jyUGacdnQxHSFG95wx5MEBytRHVkUUngEvfUqlsMzIsA4Lk/p226lh
DWBphNEgH+BfEPv/WT/c0VROQo58xqH5LBqmIXs=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:18:14 2026 by rpki-client