Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/880aae7d-98db-3754-b7ba-f421d379b17c.roa
File:                     880aae7d-98db-3754-b7ba-f421d379b17c.roa (raw, json)
Hash identifier:          i5QwgsSs8edFXtiRwRX4YP+9mXSdQ2s2PEQXAsnU1DQ=
Subject key identifier:   9D:F7:3C:24:C0:59:BA:0E:D3:8B:80:43:BB:F5:97:F9:78:81:93:EB
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584D667A583D999D840B0CDD2680
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/880aae7d-98db-3754-b7ba-f421d379b17c.roa
Signing time:             Sun 05 Apr 2026 01:00:24 +0000
ROA not before:           Sun 05 Apr 2026 01:00:24 +0000
ROA not after:            Sat 04 Jul 2026 01:00:24 +0000
asID:                     54600
IP address blocks:        107.149.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:66:7a:58:3d:99:9d:84:0b:0c:dd:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Apr  5 01:00:24 2026 GMT
            Not After : Jul  4 01:00:24 2026 GMT
        Subject: CN=74e5b1e9-204f-4cd4-8404-3226df6f9f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:32:e0:d3:74:35:74:7f:3e:ab:85:39:65:ca:
                    32:28:cd:01:77:58:16:e5:38:b1:e8:f2:a8:f0:74:
                    48:e8:08:57:03:4f:38:f3:37:83:0f:8c:7d:51:c7:
                    d7:a9:d0:24:cc:e6:3f:fc:39:96:35:f6:46:c9:bb:
                    3f:36:2f:3f:f2:2d:fc:11:e7:13:76:b2:03:3e:de:
                    43:3e:aa:6c:2c:ef:a1:c4:b0:e6:eb:c8:1a:e4:3c:
                    0a:37:62:30:d6:5e:30:c8:e2:12:34:79:b7:7b:8f:
                    d5:14:a8:51:68:40:b0:84:5f:eb:50:a5:bd:26:bb:
                    33:ca:44:fd:0b:3d:79:66:97:1a:50:9a:09:b1:85:
                    70:a9:dd:08:42:15:d4:a6:ff:29:fa:ac:26:54:99:
                    7e:74:17:06:8f:89:08:01:0e:48:9c:c8:6c:b8:ba:
                    cb:d2:a4:5d:d4:6e:ee:45:a6:31:e9:3f:5a:c8:b2:
                    d5:08:db:a3:45:54:a1:f6:f1:53:6a:0d:24:c4:ea:
                    d2:b5:c2:d1:f0:bf:f9:5e:b7:ba:00:bc:36:b9:63:
                    6e:9b:e4:fc:18:7f:2c:9c:a1:2e:f8:ed:1e:39:36:
                    65:76:37:4b:7d:d5:ca:5f:54:20:ad:ee:4d:b9:0b:
                    13:fb:0c:01:9b:74:a0:96:56:eb:7f:60:0e:b4:9a:
                    bf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F7:3C:24:C0:59:BA:0E:D3:8B:80:43:BB:F5:97:F9:78:81:93:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/880aae7d-98db-3754-b7ba-f421d379b17c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:c2:e5:57:fe:e8:64:95:d2:ec:d8:2c:e2:06:fd:a6:55:42:
         6e:0f:ae:35:08:8c:7c:97:24:65:eb:91:fc:a1:3a:97:de:2c:
         0d:b5:5f:f8:f6:74:e4:ab:2b:88:4c:51:09:ef:70:39:7e:db:
         c1:cf:70:8d:03:43:d5:fd:6e:ff:06:04:2b:4c:6f:24:f6:d7:
         84:a8:9d:ef:0a:a5:16:56:e9:14:9c:96:8b:18:d7:05:50:35:
         ab:62:86:7b:41:bf:51:52:cf:d2:0d:b3:0d:4f:b4:4b:ff:f1:
         28:62:c0:02:1a:e0:7c:35:38:e9:ce:8e:51:5b:cb:78:08:4f:
         3a:3c:67:54:5b:9c:14:b7:05:99:05:84:e9:4e:4c:55:4d:ad:
         21:81:52:91:58:cd:4c:2a:f1:26:3d:e4:df:df:7c:cb:ed:66:
         52:a5:9a:7e:79:4f:d6:e3:8d:b9:5f:09:11:08:6d:56:87:31:
         41:f7:a7:41:6c:f3:63:a1:d3:c8:e4:83:5f:4c:80:14:bc:a1:
         70:5a:17:1e:da:02:7e:39:23:98:38:dd:47:d0:bd:2c:ae:2d:
         79:85:99:07:e0:18:e7:ef:30:d6:94:f8:8e:78:be:67:b2:2c:
         46:3b:8e:1f:f8:20:2a:ba:db:6d:85:98:69:01:ad:f4:7c:ad:
         0f:22:b8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:07:17 2026 by rpki-client