Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8ad7970-72e8-3a4d-9b23-efdb2d4459c4.roa
File:                     c8ad7970-72e8-3a4d-9b23-efdb2d4459c4.roa (raw, json)
Hash identifier:          GokjH5ugus1+ApcHNXGylMIHI4/5ugolOT/hiY12BWs=
Subject key identifier:   B2:F6:76:31:0D:98:3A:D7:0C:E3:81:C2:A1:0D:1C:5C:E2:7B:D4:42
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584D0217ADB6E45D813BA6BD48C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8ad7970-72e8-3a4d-9b23-efdb2d4459c4.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     399195
IP address blocks:        107.148.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:ad:b6:e4:5d:81:3b:a6:bd:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=820efa62-02e1-4f24-8bee-46771284bfda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d9:e8:95:f4:ea:84:7a:83:bf:1f:72:37:1e:
                    8b:5e:b9:b1:42:3d:6f:eb:c9:b4:a9:3a:b8:6b:20:
                    84:b5:55:b0:f8:ec:33:6f:49:dc:11:10:0f:34:ad:
                    97:f8:bb:d3:37:f2:a8:69:d9:5e:d8:10:f4:2f:e7:
                    71:1b:07:4a:7d:d8:fe:6c:a7:b3:8c:d0:bf:94:3f:
                    37:dd:34:54:31:b2:ad:eb:96:7e:9b:24:d0:57:86:
                    80:1d:c4:0f:d5:26:d0:43:6a:df:22:8f:6e:db:e4:
                    ce:51:1a:29:c9:1d:bb:d1:b3:8d:f9:8d:00:54:ae:
                    25:7d:3d:14:85:d6:a2:e8:96:7b:24:66:95:79:1c:
                    81:7c:5a:10:5c:18:06:2f:d8:24:19:60:73:9f:a0:
                    75:1c:35:e0:94:48:8a:22:d5:cd:52:ee:a6:8c:13:
                    1e:66:0a:52:a5:67:f6:d5:49:c3:a7:6a:5c:95:d1:
                    9c:40:c8:01:9c:81:35:1d:b3:97:69:23:66:be:fd:
                    e9:4f:4d:1d:02:17:2e:71:e6:15:5d:5b:35:d7:53:
                    49:e5:f8:a8:e3:74:a1:1f:5e:11:3e:0b:3a:3d:c1:
                    31:da:39:cf:43:e5:d3:d4:2e:ae:c0:da:ff:8f:58:
                    d2:31:7d:8f:57:68:6f:52:6b:bd:96:3d:2e:49:09:
                    12:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F6:76:31:0D:98:3A:D7:0C:E3:81:C2:A1:0D:1C:5C:E2:7B:D4:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8ad7970-72e8-3a4d-9b23-efdb2d4459c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c2:0b:d9:75:4e:d9:9e:a1:f2:1b:1e:e7:15:67:4d:4c:34:
         5f:3f:23:da:51:cf:f6:40:6f:fd:97:b4:59:0b:68:0f:b9:67:
         92:76:00:07:e1:98:98:26:1f:a5:48:9a:6d:be:f5:30:1d:3a:
         a4:d8:24:96:58:a1:b7:cb:31:1f:ea:fe:a9:ae:c2:9f:2f:22:
         18:2b:c6:65:8a:59:c4:22:30:8d:a7:90:28:ed:9a:4f:7f:45:
         05:87:35:54:62:86:46:2c:8d:b4:07:dd:4b:bd:7f:cc:a9:a9:
         c2:dc:a7:4e:0b:19:b6:30:37:d6:8c:b0:95:ac:f0:06:56:72:
         c5:e6:3b:7a:51:88:6a:c8:bc:97:12:fa:23:cf:ff:78:7b:7f:
         84:92:e6:39:02:da:43:55:53:70:b8:30:d5:e9:5b:d5:1f:14:
         5a:4e:8c:1d:cc:a6:02:87:6a:8f:f0:7f:b7:47:ef:44:6e:1b:
         60:61:c9:64:5d:fe:e7:c2:d3:d9:18:e4:6a:bf:ee:2d:26:cb:
         53:0c:fd:85:76:50:d1:ff:f1:18:21:5b:79:55:1c:50:34:4e:
         79:93:a0:ac:15:db:49:89:17:c3:d9:7a:d4:75:5b:ea:e8:67:
         e1:f2:f5:f3:e1:d5:41:1d:67:c1:69:31:c8:0c:77:4c:08:a1:
         e4:4e:62:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:12:08 2026 by rpki-client