Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/9ff9e738-ca0d-3f16-bfdc-0c087b7916da.roa
File:                     9ff9e738-ca0d-3f16-bfdc-0c087b7916da.roa (raw, json)
Hash identifier:          MQplI4V1ZQXhdgzkSSfbeiE9GfGBIO2G3QTai55LavU=
Subject key identifier:   C4:0A:E2:FF:B8:14:A4:8A:12:B8:91:3A:ED:EB:2C:86:0C:12:3E:7F
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584DE2B5EC32B2736C3E3A408DC0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/9ff9e738-ca0d-3f16-bfdc-0c087b7916da.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     398478
IP address blocks:        107.149.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:ec:32:b2:73:6c:3e:3a:40:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=22f8a2e8-c68b-4eb2-9a3e-3e07efc1cf5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:5a:21:d9:9c:0f:ad:fa:dc:ea:3d:0f:89:
                    a7:c1:e6:c1:10:52:04:95:b8:e3:ba:28:88:95:15:
                    44:6f:64:da:0d:1f:c6:78:d1:9f:3d:d9:00:90:7f:
                    ef:ae:d4:6e:09:08:bc:25:f0:a4:6a:b1:3a:3e:73:
                    fc:10:1e:be:a3:ff:ac:79:6e:45:ca:2f:d0:c2:e0:
                    44:ab:48:54:32:43:ab:01:c4:b3:78:45:7b:be:8b:
                    2b:68:f3:96:cc:4f:ae:59:e6:32:58:13:1f:06:2e:
                    ed:40:1b:e6:aa:7c:ee:a8:d7:62:ff:5d:2e:c3:f8:
                    1d:4a:13:89:5d:d7:f8:1d:69:62:e1:53:87:8e:70:
                    ce:4d:66:5e:a5:60:7b:54:e9:82:da:12:eb:0b:02:
                    f7:6d:73:dd:fc:ae:07:71:7b:ed:46:dc:00:f6:fe:
                    c0:6d:9a:bf:4d:9f:61:16:1c:33:15:30:e5:f0:46:
                    c2:a9:51:9f:a1:20:50:4a:b3:1f:17:2c:f3:ef:f9:
                    7d:df:2f:36:db:d0:12:1a:17:40:f8:80:24:53:fa:
                    ce:6c:61:6d:90:a1:d2:ed:45:ec:da:9e:5f:41:21:
                    b3:d0:ef:e8:d1:56:60:96:fe:b9:a2:47:f3:0c:43:
                    c9:75:7c:6d:c5:e4:a0:fd:d1:1d:e6:ca:70:f1:2e:
                    a4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0A:E2:FF:B8:14:A4:8A:12:B8:91:3A:ED:EB:2C:86:0C:12:3E:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/9ff9e738-ca0d-3f16-bfdc-0c087b7916da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:1d:4e:9e:7c:20:22:6e:00:2e:a1:a4:fe:6d:c8:24:5b:f6:
         40:95:67:e5:f6:18:bb:4d:57:63:c9:cd:63:04:cd:09:e1:59:
         ef:88:8f:48:d7:69:1f:50:d1:4b:b4:76:82:8f:35:98:1e:70:
         26:42:d8:bf:89:2c:65:ed:ea:e1:fe:1d:5e:b1:58:5f:f7:6e:
         43:27:c9:93:f5:d4:6c:5e:b7:36:ff:7e:ec:36:04:17:24:dc:
         0d:78:d7:80:ed:7e:ad:4b:a2:f6:86:e2:3f:47:ea:d2:43:57:
         8f:4c:c3:8b:61:8b:61:88:1c:73:6c:c7:e4:03:2d:94:3e:ad:
         76:b9:57:36:1b:1f:55:c7:ee:77:80:bb:41:13:86:d5:c9:0a:
         6d:1b:4c:80:cd:2b:bf:ff:cf:b8:51:b3:94:c5:82:e7:85:43:
         fb:45:f5:38:92:34:da:bf:04:e6:58:b5:30:8e:43:cd:c9:b4:
         3a:4a:f8:df:eb:8f:52:16:1f:3c:4d:29:91:53:c6:d3:e9:1a:
         d9:9f:70:8e:1b:d7:fe:0c:f7:e8:4f:ae:8c:57:cb:e6:4f:8c:
         d0:bc:47:0e:a2:29:e5:b1:ca:59:9d:bc:2a:2d:88:20:23:b1:
         7e:9f:fb:a3:6e:04:79:1c:28:fc:9c:5c:dc:e2:bb:a6:fa:fb:
         d0:b8:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:56:19 2026 by rpki-client