Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/a1a7190b-973b-391d-8f5c-9ac9ec30d31d.roa
File:                     a1a7190b-973b-391d-8f5c-9ac9ec30d31d.roa (raw, json)
Hash identifier:          C6+tjLGdroml5C4FL4G0tzvHS/n//farwLyhJ8dXoec=
Subject key identifier:   1F:02:55:31:32:2D:2E:0B:D7:7A:34:F0:21:11:B7:EC:6E:A3:E7:BD
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584D225F3BCC67B7D29A13590700
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/a1a7190b-973b-391d-8f5c-9ac9ec30d31d.roa
Signing time:             Wed 11 Mar 2026 15:30:57 +0000
ROA not before:           Wed 11 Mar 2026 15:30:57 +0000
ROA not after:            Tue 09 Jun 2026 15:30:57 +0000
asID:                     14618
IP address blocks:        207.202.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:22:5f:3b:cc:67:b7:d2:9a:13:59:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Mar 11 15:30:57 2026 GMT
            Not After : Jun  9 15:30:57 2026 GMT
        Subject: CN=704b7255-c04b-4b24-8672-05457270489b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:35:f0:08:1c:e5:75:45:e4:ab:16:35:1f:d9:
                    2a:c6:78:1b:b3:63:b8:ca:aa:fd:7a:7d:2a:62:32:
                    d2:a8:21:fd:53:4c:79:a8:1d:d1:b3:f3:7c:ce:11:
                    13:8e:0b:44:06:d1:eb:7c:66:2b:da:d8:d2:f8:c0:
                    48:3a:33:99:e9:54:1b:07:05:3b:48:2c:7d:16:6f:
                    32:64:f7:2b:dd:e2:1c:20:eb:e5:16:d7:f4:1b:d3:
                    a3:97:0f:2b:7b:f1:0f:f6:93:35:a2:b2:e4:67:3c:
                    bf:50:ab:b6:fc:cc:71:20:1b:2a:46:fd:3b:3a:02:
                    03:c0:91:76:aa:1d:75:b6:5e:62:0d:a9:9b:f2:2a:
                    7c:c9:bb:ba:45:78:5a:f9:54:9c:21:04:e0:e3:e4:
                    86:a2:ed:33:ef:53:e1:18:bd:b8:92:10:dd:e0:25:
                    ef:6d:96:78:61:ad:ab:89:49:d2:24:55:9b:30:a1:
                    0a:86:f8:d7:0e:10:17:df:56:37:7d:98:a3:86:59:
                    ef:57:b8:d1:f1:fc:45:2f:5c:b1:e8:29:a7:37:7d:
                    16:d6:0c:a6:03:e9:50:17:c5:48:32:c5:06:3a:89:
                    14:b1:7f:b7:e1:bb:ec:48:71:9e:51:c6:fe:a1:b5:
                    35:41:db:f9:de:7a:13:9d:1a:dd:ea:3e:20:98:c3:
                    ab:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:02:55:31:32:2D:2E:0B:D7:7A:34:F0:21:11:B7:EC:6E:A3:E7:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/a1a7190b-973b-391d-8f5c-9ac9ec30d31d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:83:98:c1:65:e9:67:a5:60:00:79:3a:ea:13:22:e4:68:14:
         b3:37:cf:0c:c9:f6:31:c1:cc:7f:4a:e1:a8:4f:dd:21:24:73:
         0b:8a:c7:46:f8:76:3a:65:2d:b7:f3:a0:01:80:a2:ee:93:90:
         12:a1:fb:24:a3:12:ee:dc:03:51:d0:96:59:76:8b:fe:e2:60:
         a6:05:99:a7:38:5c:a1:74:b9:dd:8c:a7:cb:b6:68:b2:8a:16:
         0a:ff:ed:6e:b4:8b:45:13:10:79:d4:1e:c8:f7:3e:77:76:67:
         c9:8c:5d:b5:7d:26:2b:da:29:fb:57:70:44:7d:cd:95:88:21:
         8c:f8:6d:df:70:60:7c:fc:88:6f:5a:9c:a0:b4:00:46:b6:a9:
         75:e7:d2:f6:10:94:4c:8e:c9:91:8e:d8:d4:e3:b6:a9:6f:e0:
         4f:e3:9d:ca:23:b7:f4:ad:2c:14:cf:17:77:64:0e:29:8b:79:
         f0:04:be:da:6b:d2:0e:9c:dc:1c:41:17:d4:6c:2c:07:9a:f0:
         5d:83:01:39:28:07:60:da:51:58:a9:cd:98:a2:40:c1:ae:52:
         fb:47:e3:de:63:17:04:d9:55:78:7f:20:45:cd:2b:a1:28:d1:
         94:60:b8:ee:89:ee:7b:e9:1d:0d:79:ad:f1:54:4b:39:4c:88:
         e7:3f:fd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:02:57 2026 by rpki-client