Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1ed69cdd-7651-3d82-b6dd-f58a0e921138.roa
File:                     1ed69cdd-7651-3d82-b6dd-f58a0e921138.roa (raw, json)
Hash identifier:          QfjcPV/ahvkyvBY0zun301UuuEtsqyA9GiMuWU6q3lg=
Subject key identifier:   B3:27:8C:09:C1:9F:91:FC:36:6E:23:6F:16:01:D8:17:00:63:B7:B8
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584E4824881CF11C64F9A51EE7C0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1ed69cdd-7651-3d82-b6dd-f58a0e921138.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     271
IP address blocks:        142.231.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:88:1c:f1:1c:64:f9:a5:1e:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=170e2ce1-8aca-4ac8-b6bd-5bc47af54631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:66:41:2d:e0:2a:ba:8c:6e:20:8b:a8:d2:a5:
                    6b:e2:ee:91:39:1e:a6:5a:fc:be:8d:13:74:59:d2:
                    95:4e:d5:47:e7:28:cd:c9:9f:86:6b:26:7c:5d:65:
                    e3:de:23:20:c9:30:dd:56:7a:45:9d:ab:8d:84:2b:
                    e9:8e:fd:80:4f:ea:26:75:7a:70:8b:1c:92:66:51:
                    b9:46:2f:92:23:14:00:e6:82:20:7c:d7:9c:31:c2:
                    22:af:aa:42:51:5b:ab:c1:21:97:31:10:6a:02:1c:
                    9b:89:47:e6:27:b5:d2:74:38:e0:11:00:c0:7e:9c:
                    8e:a5:4d:24:93:28:ce:6a:cc:be:a9:6a:71:31:52:
                    14:d4:08:0b:d2:e7:25:0c:09:01:64:09:cd:8e:48:
                    c3:66:6e:1c:95:76:05:97:f1:75:87:6f:3b:16:15:
                    f9:51:b9:0a:f7:53:f1:4c:c3:35:37:44:ee:1d:75:
                    bd:bd:61:47:46:2e:b3:fd:b5:61:ac:5d:a0:d0:3e:
                    52:f5:5c:db:b0:56:02:e0:58:f8:7b:5e:90:59:1d:
                    37:3b:e3:0f:a3:e2:fb:d4:89:5b:8c:00:b4:62:08:
                    30:ac:2b:be:50:29:bf:10:f0:10:73:db:12:a7:4c:
                    54:ee:ef:c6:40:a3:ea:ce:58:84:0b:a8:07:1f:cb:
                    84:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:27:8C:09:C1:9F:91:FC:36:6E:23:6F:16:01:D8:17:00:63:B7:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1ed69cdd-7651-3d82-b6dd-f58a0e921138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.231.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f1:7f:b8:90:7b:6c:a1:72:7d:f6:cf:60:0e:3c:6d:90:cf:
         b3:a4:04:ee:57:bd:dc:a2:29:0d:9f:17:8b:1e:ce:af:31:4c:
         d5:9b:34:c0:37:f8:eb:86:ba:b9:cd:d7:53:19:3a:fc:0b:6f:
         78:a3:e9:ac:15:84:e2:1b:5c:d0:e1:5d:4f:a3:06:e6:57:a6:
         2e:fb:f9:ee:0c:41:db:aa:a6:2a:48:81:9f:f2:09:b4:09:8b:
         62:93:c9:54:8e:47:4d:8c:98:92:1b:0f:3b:90:21:c0:80:9b:
         e3:a4:3b:dc:da:3a:e4:a5:4f:7c:7e:9a:64:bc:80:ff:c2:3f:
         67:40:db:a8:af:4d:fc:aa:bf:0b:9e:95:97:fe:7c:04:4d:c0:
         62:1a:74:ce:bf:bd:40:56:df:9d:71:27:4f:e4:97:93:7f:30:
         c8:1a:e3:e6:ea:c6:f5:f8:37:28:ec:f0:ef:87:c7:d1:11:c3:
         ca:90:f2:20:e2:77:27:9d:b8:68:25:7b:83:7d:d3:07:ed:be:
         97:0f:b3:76:53:44:74:35:1d:2f:f2:7e:76:f2:aa:fc:ca:67:
         5e:09:54:c5:a7:fc:0c:85:84:d5:c1:53:8b:f8:5f:a5:b7:44:
         68:da:42:f5:e0:35:a1:24:91:66:39:71:69:64:36:09:3b:3a:
         c7:74:ce:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:26:23 2026 by rpki-client