Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8fc973f-b361-32fd-9fcc-b48d9f184a62.roa
File:                     c8fc973f-b361-32fd-9fcc-b48d9f184a62.roa (raw, json)
Hash identifier:          Mhf9XT1bOAdv9cSa0onwj9VTUHVqHDZeYRsDNmwSJls=
Subject key identifier:   D3:75:FE:5E:23:56:38:6B:48:38:24:44:63:B1:B2:E1:AB:0B:A7:EC
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584D0217ADD88366CD0742551E00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8fc973f-b361-32fd-9fcc-b48d9f184a62.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     398823
IP address blocks:        107.149.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:ad:d8:83:66:cd:07:42:55:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=697305dc-09f1-482a-afd2-910105203f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3b:54:90:80:08:af:db:86:20:f3:0d:41:57:
                    1c:7c:b5:ca:76:bd:5a:68:ad:c7:28:ec:ac:ab:e9:
                    0c:53:3e:5b:f5:5f:00:d7:87:83:be:76:bc:4a:d8:
                    e3:61:17:21:ac:60:ec:25:fe:6d:9f:4f:eb:58:5e:
                    72:b2:de:8d:8d:78:c2:ed:ba:88:cf:f9:14:4b:d5:
                    65:84:21:03:db:7f:00:e4:78:4d:33:f6:34:d6:8a:
                    b0:d2:d6:76:40:7e:bc:18:a7:24:0c:a0:25:2b:f8:
                    de:53:b1:54:66:8a:d6:b6:48:69:f1:46:c8:15:41:
                    59:60:2f:e7:78:05:76:74:12:fd:1a:d3:ab:05:b8:
                    7b:7c:67:a1:cf:a0:ea:d1:15:bb:9b:9e:25:40:e6:
                    19:2a:be:47:ea:c8:1a:79:cf:c0:fc:41:7e:1a:a5:
                    81:04:08:57:1d:fa:c1:ec:20:3a:1a:0e:8b:cf:6b:
                    21:db:4b:72:42:71:db:3f:bb:2a:23:62:f8:8c:36:
                    30:ae:0c:fb:e4:6f:17:69:b7:a9:83:80:10:c0:0e:
                    f9:7b:29:36:4e:57:dd:d5:ac:85:a7:15:67:dd:2c:
                    3e:db:5d:1d:4d:5b:3f:26:06:4b:99:d3:2b:d9:2c:
                    f2:a3:27:c9:9f:32:d3:1b:5c:18:f9:72:0e:6a:40:
                    c4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:75:FE:5E:23:56:38:6B:48:38:24:44:63:B1:B2:E1:AB:0B:A7:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8fc973f-b361-32fd-9fcc-b48d9f184a62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:f6:32:29:cc:a8:0f:4e:0b:cd:71:53:8b:9a:82:d3:71:88:
         aa:42:97:1e:5f:4c:7c:44:36:f2:29:72:18:a7:2d:e7:a3:8c:
         13:d9:ac:c7:75:57:ba:b6:14:5c:c4:63:6f:53:73:94:d7:93:
         26:6f:3d:15:29:fe:bb:98:ee:87:09:2a:17:60:4a:2e:a9:7e:
         06:7e:5e:e0:aa:aa:67:a4:a8:05:4f:89:e6:35:4a:58:06:66:
         0d:4b:f5:ab:27:23:9a:2b:da:63:b8:07:9e:95:43:87:9b:3a:
         6a:3f:87:62:e7:42:16:b3:00:f7:cc:2c:32:26:41:b5:1d:30:
         c5:ef:47:82:95:57:ae:62:75:c8:33:36:27:e8:a0:3c:31:ed:
         ee:c0:aa:6e:26:e6:dc:83:ff:d2:0c:23:f2:b9:9c:ba:fb:0c:
         0b:26:ee:30:77:36:73:93:07:4e:f1:49:b2:6a:2c:40:6d:84:
         85:04:f2:87:91:d7:21:33:5b:0e:c3:ce:b0:84:25:81:a0:e7:
         04:65:bd:17:97:2c:c4:aa:4b:f3:ad:7a:45:30:a7:c0:cd:09:
         e1:54:37:c2:c4:a3:f8:7f:64:10:db:e6:04:a5:6f:99:ce:1f:
         d4:ac:2f:4b:d4:fe:65:cd:e0:b2:54:ae:e6:65:b8:5d:f7:76:
         d9:1f:dc:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF63Yg2bNB0JVHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
Njk3MzA1ZGMtMDlmMS00ODJhLWFmZDItOTEwMTA1MjAzZjRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjtUkIAIr9uGIPMNQVccfLXKdr1aaK3HKOys
q+kMUz5b9V8A14eDvna8StjjYRchrGDsJf5tn0/rWF5yst6NjXjC7bqIz/kUS9Vl
hCED238A5HhNM/Y01oqw0tZ2QH68GKckDKAlK/jeU7FUZorWtkhp8UbIFUFZYC/n
eAV2dBL9GtOrBbh7fGehz6Dq0RW7m54lQOYZKr5H6sgaec/A/EF+GqWBBAhXHfrB
7CA6Gg6Lz2sh20tyQnHbP7sqI2L4jDYwrgz75G8Xabepg4AQwA75eyk2Tlfd1ayF
pxVn3Sw+210dTVs/JgZLmdMr2SzyoyfJnzLTG1wY+XIOakDEsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNN1/l4jVjhrSDgkRGOxsuGrC6fsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYzhmYzk3M2YtYjM2MS0z
MmZkLTlmY2MtYjQ4ZDlmMTg0YTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5XAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABn2MinMqA9OC81xU4uagtNxiKpClx5fTHxENvIpchinLeejjBPZrMd1
V7q2FFzEY29Tc5TXkyZvPRUp/ruY7ocJKhdgSi6pfgZ+XuCqqmekqAVPieY1SlgG
Zg1L9asnI5or2mO4B56VQ4ebOmo/h2LnQhazAPfMLDImQbUdMMXvR4KVV65idcgz
NifooDwx7e7Aqm4m5tyD/9IMI/K5nLr7DAsm7jB3NnOTB07xSbJqLEBthIUE8oeR
1yEzWw7DzrCEJYGg5wRlvReXLMSqS/OtekUwp8DNCeFUN8LEo/h/ZBDb5gSlb5nO
H9SsL0vU/mXN4LJUruZluF33dtkf3BA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:42 2026 by rpki-client