Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/3da4204c-eec1-3c73-aeed-3803fbc0a5b9.roa
File:                     3da4204c-eec1-3c73-aeed-3803fbc0a5b9.roa (raw, json)
Hash identifier:          SAGQRZ5Zvxp50m+mV274wbM2MMlceJOvbEFUQX7nZCg=
Subject key identifier:   6B:13:CA:3F:32:F5:3E:F7:B4:95:57:23:63:49:12:AF:28:45:A8:ED
Certificate issuer:       /CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
Certificate serial:       010D0C9F4328584E95551B51DE1E4D54EEBEF920
Authority key identifier: C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/3da4204c-eec1-3c73-aeed-3803fbc0a5b9.roa
Signing time:             Wed 22 Jul 2026 12:35:26 +0000
ROA not before:           Wed 22 Jul 2026 12:35:26 +0000
ROA not after:            Tue 20 Oct 2026 12:35:26 +0000
asID:                     39855
IP address blocks:        207.199.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:95:55:1b:51:de:1e:4d:54:ee:be:f9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
        Validity
            Not Before: Jul 22 12:35:26 2026 GMT
            Not After : Oct 20 12:35:26 2026 GMT
        Subject: CN=2bf25ab1-d7d8-48b6-9f33-8165f3731a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2d:96:25:44:95:44:ef:70:c0:f6:b6:a4:23:
                    85:02:c5:34:b2:8e:50:a9:d9:a4:30:b4:4c:cf:28:
                    08:37:d7:cc:c6:bc:e4:98:36:86:d4:00:9b:52:a6:
                    cb:3b:4e:bb:07:d5:dd:ca:b7:eb:a9:da:c2:28:3a:
                    ff:fc:c5:01:a2:e1:7c:30:5c:90:61:0c:db:41:fd:
                    ed:29:21:33:5e:67:22:dc:03:19:9a:91:77:e9:3c:
                    8a:4e:e4:08:78:5b:6e:41:36:b7:6a:d0:e5:01:5f:
                    86:b2:5a:3d:ef:fa:06:36:e8:d3:e0:c5:87:5e:8e:
                    94:e0:6f:1d:dc:ab:86:87:ff:0c:c5:db:a1:f1:39:
                    48:72:1b:95:cf:5d:48:0d:bc:26:ae:ad:84:c5:48:
                    2e:2c:f6:fd:96:8d:db:ed:06:d7:12:23:26:91:e9:
                    52:db:41:2c:bb:b3:44:04:63:98:2c:fb:ed:b2:c0:
                    a1:9f:61:f1:24:45:8a:2a:bd:72:8e:1b:9f:64:54:
                    6d:98:25:b4:f0:a4:c7:6c:8e:ab:7f:5b:52:20:e5:
                    d1:cc:92:db:56:5b:27:19:58:a7:21:ea:3f:01:01:
                    df:0a:70:63:8d:82:7a:15:3a:ae:10:b8:c1:78:6a:
                    91:37:a7:5e:7c:5b:a2:ff:8a:f6:dd:4b:db:2a:7d:
                    20:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:13:CA:3F:32:F5:3E:F7:B4:95:57:23:63:49:12:AF:28:45:A8:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/3da4204c-eec1-3c73-aeed-3803fbc0a5b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl

            X509v3 Authority Key Identifier:
                keyid:C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.199.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:6f:d3:1d:8d:85:07:4c:bf:c2:74:be:f7:83:98:59:2e:5f:
         f8:b2:eb:24:7b:d7:a4:d1:c8:fe:f9:49:c0:c6:39:31:78:97:
         05:39:76:c6:9b:fa:0f:88:96:1e:47:77:c4:4f:18:74:d2:71:
         4e:64:d4:10:a6:b5:ee:aa:e2:16:cf:5b:45:a8:d8:e5:7b:a2:
         ca:75:02:08:28:1b:17:76:a9:ab:77:8d:37:4c:4c:ad:85:04:
         c8:e8:04:05:f3:5b:bf:27:c8:2a:4e:95:ec:06:6c:39:aa:2c:
         c2:f8:da:73:ff:40:15:7a:ef:5c:19:63:80:cb:76:be:9a:c2:
         27:61:96:3e:80:0e:9a:df:9a:68:ba:75:88:9d:5e:25:8c:2e:
         28:b2:27:1a:db:f5:27:f6:cb:80:39:ea:9e:89:dc:64:97:71:
         18:83:04:d0:c9:26:64:60:9e:7c:97:57:91:47:6f:c0:95:d4:
         2d:c0:ad:66:4b:4e:8a:48:23:f8:c0:29:29:cc:4b:59:b7:86:
         55:cc:aa:25:6a:01:94:ed:e7:18:84:d2:ea:53:07:20:4d:63:
         77:fb:93:03:89:fb:fe:d2:b7:20:64:c1:03:d5:53:b5:35:6e:
         f9:f3:71:ae:73:df:7d:a1:5d:90:eb:77:89:ff:7a:6d:a5:6f:
         06:e2:a5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:23 2026 by rpki-client