Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ad2b1d97-4589-39f0-84a2-2c809b28cf7d.roa
File:                     ad2b1d97-4589-39f0-84a2-2c809b28cf7d.roa (raw, json)
Hash identifier:          LnbekQHIA7Dup0q3GJi/hsaJNRe+BmhYufIM8WRYlI8=
Subject key identifier:   9B:5E:E8:3B:58:71:20:50:E9:D1:56:31:77:ED:26:F9:4F:80:97:D1
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F309B8C76591FBAEAF4C05520
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ad2b1d97-4589-39f0-84a2-2c809b28cf7d.roa
Signing time:             Wed 16 Sep 2026 03:27:40 +0000
ROA not before:           Wed 16 Sep 2026 03:27:40 +0000
ROA not after:            Thu 19 Nov 2026 14:00:11 +0000
asID:                     54600
IP address blocks:        107.149.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:9b:8c:76:59:1f:ba:ea:f4:c0:55:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 16 03:27:40 2026 GMT
            Not After : Nov 19 14:00:11 2026 GMT
        Subject: CN=d665d89b-e52a-4c8f-82e3-2e6af34fb3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9b:39:5d:67:7f:8a:63:18:4c:d6:42:b0:88:
                    08:87:b6:c2:eb:3b:64:16:91:0e:1b:7f:3e:26:fa:
                    ba:8b:c6:de:ea:e0:76:a2:22:75:de:9d:83:93:34:
                    14:36:46:4d:76:6b:ac:e2:c6:fd:95:92:74:5d:59:
                    cd:85:ac:20:f8:60:31:c6:cd:91:97:4f:db:71:7b:
                    f7:da:86:33:9d:39:4d:94:68:cb:92:16:92:0d:77:
                    7d:61:24:af:6c:32:32:e7:4f:53:85:09:23:92:80:
                    4d:e3:56:94:3d:7d:76:6d:a0:be:68:46:01:59:b4:
                    00:39:df:62:f8:bd:d1:17:22:91:7e:88:bd:d1:45:
                    c3:9e:e2:49:43:01:72:56:62:03:f4:07:7c:be:e0:
                    ee:78:24:56:69:83:ba:9e:1f:67:c5:ee:8b:d1:5c:
                    4a:db:8f:27:39:31:05:17:bc:7b:89:9d:89:3f:ff:
                    1d:2e:cb:0f:9a:19:39:53:55:cf:39:64:cb:41:06:
                    62:07:36:70:69:01:e6:c1:67:e6:ff:5d:04:ac:a3:
                    4b:ac:c6:53:2e:5e:06:1c:c7:02:76:c4:2d:8a:7c:
                    53:36:c1:8f:e6:f2:51:67:10:8a:d5:1a:8f:23:0d:
                    7c:00:8c:c5:42:5c:22:29:c7:e9:c3:43:9c:44:11:
                    3f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5E:E8:3B:58:71:20:50:E9:D1:56:31:77:ED:26:F9:4F:80:97:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ad2b1d97-4589-39f0-84a2-2c809b28cf7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:57:ad:dd:a2:4e:de:b5:5d:84:ba:4d:1b:2d:15:fc:43:32:
         6c:b2:50:07:d2:ad:4c:1b:d3:be:fa:a9:68:c4:10:d5:51:dc:
         a2:2a:28:a3:c2:9e:0a:61:0d:80:ac:ac:c8:c8:3e:de:29:dd:
         f4:de:56:0b:cd:b5:b9:f9:eb:8f:7b:87:58:e0:1e:b9:f8:d4:
         ab:e6:90:d5:67:42:05:cd:50:30:60:69:80:d9:5b:4f:2a:d4:
         95:59:02:2e:26:cf:a1:db:91:c8:ca:71:99:fe:51:ae:8e:e0:
         5e:e2:d5:c0:a0:a7:3a:61:6b:37:92:81:03:b3:12:ee:22:6f:
         11:3e:aa:7c:de:76:78:4d:0d:29:20:bc:e7:2d:c8:2b:db:10:
         fd:49:59:70:8f:73:ea:89:5a:f6:59:5b:38:43:3c:c7:a8:45:
         34:54:39:83:ca:d8:b5:46:97:0b:9d:5b:3b:e3:2e:b6:c6:b0:
         04:ab:15:46:fc:8d:eb:ff:28:3d:37:28:41:a4:16:7e:a1:8a:
         f7:b2:4f:c6:7c:82:70:af:07:16:57:64:2b:06:b0:3a:39:a3:
         70:7e:05:3c:de:a7:96:e3:62:71:34:bc:cb:fe:ed:ef:d9:31:
         f6:cb:73:3a:0b:44:ec:17:17:2a:53:47:df:8b:79:b0:e6:d3:
         66:df:7e:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wm4x2WR+66vTAVSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDkxNjAzMjc0MFoXDTI2MTExOTE0MDAxMVowLzEtMCsGA1UEAxMk
ZDY2NWQ4OWItZTUyYS00YzhmLTgyZTMtMmU2YWYzNGZiM2JjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJs5XWd/imMYTNZCsIgIh7bC6ztkFpEOG38+
Jvq6i8be6uB2oiJ13p2DkzQUNkZNdmus4sb9lZJ0XVnNhawg+GAxxs2Rl0/bcXv3
2oYznTlNlGjLkhaSDXd9YSSvbDIy509ThQkjkoBN41aUPX12baC+aEYBWbQAOd9i
+L3RFyKRfoi90UXDnuJJQwFyVmID9Ad8vuDueCRWaYO6nh9nxe6L0VxK248nOTEF
F7x7iZ2JP/8dLssPmhk5U1XPOWTLQQZiBzZwaQHmwWfm/10ErKNLrMZTLl4GHMcC
dsQtinxTNsGP5vJRZxCK1RqPIw18AIzFQlwiKcfpw0OcRBE/sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJte6DtYcSBQ6dFWMXftJvlPgJfRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYWQyYjFkOTctNDU4OS0z
OWYwLTg0YTItMmM4MDliMjhjZjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDa5VAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZXrd2iTt61XYS6TRstFfxDMmyyUAfSrUwb0776qWjEENVR3KIqKKPC
ngphDYCsrMjIPt4p3fTeVgvNtbn56497h1jgHrn41KvmkNVnQgXNUDBgaYDZW08q
1JVZAi4mz6HbkcjKcZn+Ua6O4F7i1cCgpzphazeSgQOzEu4ibxE+qnzednhNDSkg
vOctyCvbEP1JWXCPc+qJWvZZWzhDPMeoRTRUOYPK2LVGlwudWzvjLrbGsASrFUb8
jev/KD03KEGkFn6hiveyT8Z8gnCvBxZXZCsGsDo5o3B+BTzep5bjYnE0vMv+7e/Z
MfbLczoLROwXFypTR9+LebDm02bfftY=
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:56:53 2026 by rpki-client