Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/fbd960e7-ca5d-3c68-93e5-b870f77686b1.roa
File:                     fbd960e7-ca5d-3c68-93e5-b870f77686b1.roa (raw, json)
Hash identifier:          iEbeoR0+kToamWJ4YXQ0pCvuUpzq9yuJIYWlEmxVoRM=
Subject key identifier:   9F:6B:EB:B0:7D:72:AB:E7:F1:D4:38:E2:C3:07:7D:33:F9:9B:AB:A8
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584B7857463AC863811FD6900290
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/fbd960e7-ca5d-3c68-93e5-b870f77686b1.roa
Signing time:             Fri 10 Oct 2025 01:00:30 +0000
ROA not before:           Fri 10 Oct 2025 01:00:30 +0000
ROA not after:            Thu 08 Jan 2026 02:00:30 +0000
asID:                     36007
IP address blocks:        207.126.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:78:57:46:3a:c8:63:81:1f:d6:90:02:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Oct 10 01:00:30 2025 GMT
            Not After : Jan  8 02:00:30 2026 GMT
        Subject: CN=fece7eae-de91-433a-9e74-d225357db867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b4:d0:02:c4:f6:1b:14:b3:a5:cd:8f:95:dc:
                    57:ea:ba:1f:5b:7e:47:97:22:a1:0b:97:af:3e:7c:
                    f8:2b:75:72:9c:b8:c4:e3:45:5a:2e:35:23:99:a6:
                    bc:fd:5f:0c:81:d5:2e:39:9a:f8:e8:86:7f:c4:b2:
                    85:1b:32:6e:6a:66:08:7f:16:21:e4:09:e6:15:f8:
                    b1:1e:ad:80:4a:67:7e:54:ec:91:20:74:1c:30:29:
                    6f:c1:65:14:07:f3:fa:ad:d1:6f:10:5d:59:b0:8d:
                    61:6c:31:1e:f1:2b:c8:61:ee:7a:2c:59:ff:cb:d3:
                    59:87:12:eb:a4:6a:c0:9a:32:a3:e9:2d:92:b5:08:
                    83:4e:02:26:ff:24:6b:14:a2:d1:c1:a1:ee:3d:c9:
                    e9:e3:70:dd:da:e2:49:25:a5:5a:5a:21:d6:23:f9:
                    de:ac:fa:7f:11:67:0a:5e:89:91:46:bb:6e:4f:e0:
                    89:4c:fa:b3:39:0d:e9:ed:6e:b7:67:88:6c:83:50:
                    e6:1e:8a:be:6a:80:30:49:29:b9:fd:75:c3:1e:8b:
                    0f:ac:fc:ee:f4:e9:71:1f:34:19:4a:82:d8:06:e3:
                    f8:e0:5c:ec:0a:29:33:73:05:27:45:39:78:1b:54:
                    ff:c8:62:f0:09:2f:24:c4:f4:f4:d9:3b:2a:82:63:
                    e0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6B:EB:B0:7D:72:AB:E7:F1:D4:38:E2:C3:07:7D:33:F9:9B:AB:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/fbd960e7-ca5d-3c68-93e5-b870f77686b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:88:34:b5:ed:32:44:c5:a7:6e:2d:5a:d2:6b:d6:68:8c:f4:
         c8:d3:8a:3a:29:73:dd:d2:63:c6:79:77:6b:31:e9:1e:79:47:
         4c:20:47:70:a8:c8:80:2d:6e:10:bf:95:2c:ce:e5:ae:a2:c2:
         4a:01:ba:38:23:49:bd:7f:30:70:94:53:59:d6:f1:f3:3d:20:
         d0:a3:fe:2d:c8:b1:36:af:01:70:81:73:98:d7:27:1a:46:b1:
         25:c2:a7:41:b5:8b:87:b0:c4:33:34:16:1d:d7:a2:3d:4f:0f:
         8b:9b:10:24:b2:9b:04:6a:90:c1:00:c6:3e:fb:08:c7:5d:bb:
         d4:1b:5c:33:ef:9f:f7:0b:a8:15:ea:76:f6:46:33:93:a9:56:
         21:04:4d:67:6d:9e:5b:da:88:b2:b6:13:c8:86:67:b0:9e:c0:
         d6:ca:5d:ee:ba:a5:a1:ff:6e:eb:d5:4f:3e:53:98:17:41:d3:
         4f:ee:89:da:9e:3f:c2:ca:e7:80:c7:8c:e9:78:ff:1f:86:9b:
         08:bc:6a:37:c0:c9:9b:0c:4b:dc:8b:f9:6e:62:6f:c4:af:b6:
         aa:65:c5:f4:13:df:66:0d:53:9a:65:4f:07:7c:6b:dc:3d:20:
         ee:c1:b8:ad:0e:8b:fb:5d:53:c6:57:97:d9:e6:06:7d:e4:39:
         fd:bd:2d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:40:46 2025 by rpki-client