Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/014b3778-4548-3d8f-a9cd-f6815f9cdf4e.roa
File:                     014b3778-4548-3d8f-a9cd-f6815f9cdf4e.roa (raw, json)
Hash identifier:          f7Ww71ubDeks+pgx8YIshjxbz9n7B8JvXapW81LN5N8=
Subject key identifier:   EE:E3:15:6B:57:22:C6:7D:CD:2F:ED:04:4E:E6:96:59:A4:63:C3:CA
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973C4A998BCA7BE24E7A500
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/014b3778-4548-3d8f-a9cd-f6815f9cdf4e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        207.34.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:c4:a9:98:bc:a7:be:24:e7:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fdf03c84-b6c9-4870-960e-6074925ce2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:b2:cb:34:2f:c0:39:58:60:e8:76:d0:59:
                    2b:67:7b:a2:1e:23:26:a2:dd:a6:64:57:b4:a9:96:
                    7d:c2:3d:34:15:71:1c:da:70:bc:10:02:eb:df:68:
                    2a:02:3e:b2:e5:22:41:6b:6e:6b:ee:23:b1:b3:a7:
                    ee:64:0a:2d:86:f7:19:ed:d8:7b:e0:74:1e:b9:78:
                    cf:91:d1:bb:0e:50:43:c9:95:36:ab:b9:69:c7:4d:
                    7b:93:27:f5:33:38:3c:13:6c:8a:07:aa:5e:e4:cf:
                    0c:09:a6:38:e9:8f:14:70:a0:0a:24:4c:f1:1d:a2:
                    e8:2b:7e:3f:a3:13:02:1e:5c:5a:2c:79:10:05:01:
                    72:70:17:b7:a6:7d:12:5b:25:f8:d4:0c:ab:69:81:
                    74:3d:f9:c4:c8:b4:d9:e5:a1:bf:b4:0f:5f:58:2c:
                    ef:6b:51:3d:b8:76:be:77:01:62:f8:86:37:12:d1:
                    cb:fe:af:bf:ae:67:b4:b5:35:6b:07:84:6b:c1:e7:
                    9e:23:c1:f8:3b:b3:95:ba:1e:8e:5f:e3:bf:ef:8b:
                    67:de:00:a9:89:6e:23:d0:08:6c:1c:69:0a:8a:72:
                    8c:f9:42:a3:4e:76:62:2b:03:12:69:4d:7a:55:9d:
                    66:c8:2e:39:07:02:53:23:7f:f2:f8:d1:eb:3a:b1:
                    53:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E3:15:6B:57:22:C6:7D:CD:2F:ED:04:4E:E6:96:59:A4:63:C3:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/014b3778-4548-3d8f-a9cd-f6815f9cdf4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:f2:17:bb:3a:53:2e:81:81:9d:61:82:48:3b:cc:60:65:84:
         5a:a4:50:f9:4b:dd:b8:3b:90:f5:ca:d1:98:da:43:8d:88:88:
         c6:5b:29:33:c1:c5:58:7a:8c:43:38:1f:65:e2:ea:20:ac:23:
         87:95:93:44:94:94:c7:3a:74:7f:c7:a6:15:f6:7f:5d:68:3b:
         be:92:08:c9:e4:9c:1d:3a:4d:b8:5d:b3:4c:db:39:1d:c9:e9:
         fe:ed:8a:1a:69:99:1e:60:11:ad:de:50:5c:f1:1d:5a:a0:72:
         7b:32:a4:08:6d:7a:bb:1c:0d:f3:b1:f3:67:0c:28:66:ff:26:
         f3:f3:55:d4:ea:3a:ea:c9:a3:54:1f:3b:d6:59:6c:5a:a2:4d:
         96:f3:be:30:b9:2d:d2:c9:de:7c:d6:67:35:1c:89:89:fd:11:
         06:25:57:af:d8:6b:53:33:6f:c6:c3:2f:1d:da:2d:2d:7d:08:
         ef:9e:b8:b1:90:92:7d:5b:79:cd:9a:40:8f:2b:f6:81:2a:b1:
         0e:1c:6d:2c:91:9b:eb:1c:94:73:b1:7b:d0:0d:bd:d9:20:59:
         57:33:09:40:0b:57:67:89:8c:76:24:22:ed:b8:c5:6b:54:c7:
         f1:05:42:1c:5f:47:e8:cb:41:e7:21:75:da:58:85:9b:ef:b3:
         90:51:3f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:22:50 2026 by rpki-client