Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/73e2b4d7-dbe8-351e-be33-47e3db12fd5e.roa
File:                     73e2b4d7-dbe8-351e-be33-47e3db12fd5e.roa (raw, json)
Hash identifier:          nPe4u1t/+GSebk0tHa4SURSOmW5eOH8FLZaFgBduaMQ=
Subject key identifier:   12:AD:4A:EA:AE:A4:35:E7:68:07:A6:DA:9C:ED:D0:87:DD:C1:A2:F2
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584EA3719CB32A66C2E3AE112900
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/73e2b4d7-dbe8-351e-be33-47e3db12fd5e.roa
Signing time:             Mon 27 Jul 2026 13:54:11 +0000
ROA not before:           Mon 27 Jul 2026 13:54:11 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     398993
IP address blocks:        107.148.96.0/21 maxlen: 21
                          107.148.96.0/24 maxlen: 24
                          107.148.97.0/24 maxlen: 24
                          107.148.99.0/24 maxlen: 24
                          107.148.102.0/24 maxlen: 24
                          107.148.103.0/24 maxlen: 24
                          107.148.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a3:71:9c:b3:2a:66:c2:e3:ae:11:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jul 27 13:54:11 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=ea7c51bc-dc06-4135-a4b9-f04ed0e7480b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:90:c4:f9:d3:31:95:e8:56:e6:0e:71:f9:
                    c8:f7:17:18:60:0e:2a:ec:1d:71:7c:2e:70:43:17:
                    a9:08:f0:0c:b8:d1:4f:3a:ed:19:04:0b:cc:2a:9f:
                    34:4e:5b:a9:4d:ce:1c:81:b1:bb:22:c0:56:3d:76:
                    28:12:f5:cc:85:4a:34:0f:b8:be:a1:6c:ed:55:9c:
                    04:3c:7b:59:72:40:94:d7:5f:b9:13:66:7a:dc:99:
                    c4:da:3c:62:98:38:a3:d9:37:48:5b:a1:41:df:60:
                    69:db:3a:17:16:d6:df:e8:27:92:7e:56:37:c7:7b:
                    be:fb:8c:a9:04:54:68:e3:5c:c5:e7:7f:a0:b4:89:
                    59:f5:ee:10:17:8c:4e:92:be:81:c0:a1:5d:23:3a:
                    63:10:b1:f5:e5:cd:ae:c9:4a:e2:45:85:c8:83:63:
                    17:02:1e:b1:ae:59:97:31:6a:e3:29:b3:45:63:97:
                    bc:e6:81:ea:fb:13:18:aa:22:84:bd:d3:ec:1e:32:
                    79:d7:4d:e6:9e:8c:49:1b:f2:31:1a:87:59:ae:b8:
                    1c:2d:cd:57:eb:1c:1b:59:df:27:02:61:10:d8:a7:
                    e0:5e:b8:37:6b:90:98:69:77:4f:88:cb:ee:74:07:
                    95:79:fc:2c:a2:d4:76:6f:e9:0d:5d:bf:6b:3c:f3:
                    79:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AD:4A:EA:AE:A4:35:E7:68:07:A6:DA:9C:ED:D0:87:DD:C1:A2:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/73e2b4d7-dbe8-351e-be33-47e3db12fd5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.96.0/21
                  107.148.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b6:ad:45:5e:d5:bc:e9:3c:53:db:3d:7e:7b:9a:02:ac:3d:
         f0:1c:b7:e4:9e:67:db:ce:be:c7:fa:cf:a2:46:16:e8:78:27:
         70:79:77:3b:61:d2:bb:b0:46:c6:cb:27:40:0c:04:e6:71:8d:
         58:18:a7:da:8f:52:9c:a6:da:3d:06:70:2e:3f:8b:eb:a9:51:
         f1:ec:25:bb:7d:06:ee:bd:68:c8:b7:4f:50:e9:f2:fa:f1:a0:
         bc:8a:7d:36:0d:99:d9:bc:bb:6d:3a:e1:e4:9c:0c:bc:16:9d:
         77:ca:19:07:15:d7:c0:23:ae:74:92:03:95:ca:5d:a0:b8:c2:
         99:13:fa:7c:4c:a4:8e:2e:53:df:d5:f1:2f:83:d1:8d:88:2d:
         24:6b:91:47:2a:05:98:87:d3:d2:b0:a9:7a:de:e6:c3:52:42:
         ad:a0:05:30:e1:09:d9:48:b4:2f:59:e7:02:4e:92:b0:24:ba:
         17:62:92:95:2e:32:a1:67:7a:45:c2:4a:29:a0:bd:2a:fa:e1:
         d9:e0:75:9b:01:3f:49:85:09:9b:d8:4f:37:27:a0:8e:80:f1:
         2c:57:1f:ad:d2:cb:e1:21:e8:58:92:03:66:58:ef:9b:39:18:
         29:62:f8:fb:b5:36:d8:f2:03:da:c2:92:1f:64:ae:4f:dd:b3:
         aa:6b:fe:11
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6jcZyzKmbC464RKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDcyNzEzNTQxMVoXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk
ZWE3YzUxYmMtZGMwNi00MTM1LWE0YjktZjA0ZWQwZTc0ODBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5WQxPnTMZXoVuYOcfnI9xcYYA4q7B1xfC5w
QxepCPAMuNFPOu0ZBAvMKp80TlupTc4cgbG7IsBWPXYoEvXMhUo0D7i+oWztVZwE
PHtZckCU11+5E2Z63JnE2jximDij2TdIW6FB32Bp2zoXFtbf6CeSflY3x3u++4yp
BFRo41zF53+gtIlZ9e4QF4xOkr6BwKFdIzpjELH15c2uyUriRYXIg2MXAh6xrlmX
MWrjKbNFY5e85oHq+xMYqiKEvdPsHjJ5103mnoxJG/IxGodZrrgcLc1X6xwbWd8n
AmEQ2KfgXrg3a5CYaXdPiMvudAeVefwsotR2b+kNXb9rPPN5rQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBKtSuqupDXnaAem2pzt0IfdwaLyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNzNlMmI0ZDctZGJlOC0z
NTFlLWJlMzMtNDdlM2RiMTJmZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDa5RgAwQA
a5RsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHm2rUVe1bzpPFPbPX57mgKsPfAct+SeZ9vOvsf6z6JGFuh4
J3B5dzth0ruwRsbLJ0AMBOZxjVgYp9qPUpym2j0GcC4/i+upUfHsJbt9Bu69aMi3
T1Dp8vrxoLyKfTYNmdm8u2064eScDLwWnXfKGQcV18AjrnSSA5XKXaC4wpkT+nxM
pI4uU9/V8S+D0Y2ILSRrkUcqBZiH09KwqXre5sNSQq2gBTDhCdlItC9Z5wJOkrAk
uhdikpUuMqFnekXCSimgvSr64dngdZsBP0mFCZvYTzcnoI6A8SxXH63Sy+Eh6FiS
A2ZY75s5GCli+Pu1NtjyA9rCkh9krk/ds6pr/hE=
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:07:55 2026 by rpki-client