Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/1420f73f-ea1d-3fb3-8575-aba2c9823fb0.roa
File:                     1420f73f-ea1d-3fb3-8575-aba2c9823fb0.roa (raw, json)
Hash identifier:          GfHjKmWbANqHK+u+quAxKt1Xkik1wvDXAtZjx4dUueo=
Subject key identifier:   A4:F8:97:C1:B4:7C:28:71:BD:C4:21:1D:7E:01:9C:E6:07:15:75:FF
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F4328584DE9B0BF43DFC7A56B84BF1E00
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/1420f73f-ea1d-3fb3-8575-aba2c9823fb0.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     22351
IP address blocks:        216.250.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:bf:43:df:c7:a5:6b:84:bf:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=0de21e22-394f-433f-b3c6-667f1a42cada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d3:8f:77:1e:26:35:3c:65:bd:e7:06:3b:6d:
                    de:c4:b6:4b:e5:e9:1a:46:67:bb:c4:5a:e8:46:05:
                    72:f7:6c:ea:29:55:37:35:50:97:ed:b5:6a:2f:e1:
                    a7:8b:ca:ba:28:8b:fe:fb:0b:fe:70:55:27:0e:f5:
                    2c:78:9c:c8:48:d7:07:d5:c1:f1:20:7a:24:b4:bf:
                    79:37:90:5e:0c:b4:61:50:4d:8b:a7:88:9e:e0:3a:
                    d3:d4:cf:23:9c:6b:5e:84:fa:6f:2f:f1:a1:a0:1e:
                    56:fa:c3:65:cd:ab:b6:a0:89:cc:8e:15:57:18:ea:
                    f7:be:5a:0a:a7:dc:db:8d:fe:34:b1:a9:7e:a0:02:
                    6f:e5:3b:4a:f4:a5:80:80:45:a6:3e:11:25:cf:3c:
                    e9:93:60:b8:7f:1c:2e:d7:93:b3:9c:a1:1d:39:8c:
                    30:b4:97:ce:b2:84:fe:9e:1f:8c:0b:f7:7c:d2:fa:
                    13:18:a4:9c:ea:4d:5e:78:c2:20:01:77:92:ca:5d:
                    0e:d6:1a:4d:1a:8e:9f:02:15:a8:0a:69:10:a3:0b:
                    4d:d3:f2:de:a8:8b:bd:42:92:39:4c:ae:b1:35:a3:
                    5a:d9:17:3e:c8:95:33:b9:ac:9a:9f:0e:6f:03:ba:
                    f7:68:45:20:a3:8a:7d:08:9c:16:61:9c:c9:bd:3f:
                    69:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F8:97:C1:B4:7C:28:71:BD:C4:21:1D:7E:01:9C:E6:07:15:75:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/1420f73f-ea1d-3fb3-8575-aba2c9823fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:ac:98:2d:83:1c:b3:26:b1:21:44:6d:b0:2c:07:95:bc:30:
         27:c9:8a:df:9d:0b:29:70:e6:00:03:03:da:38:93:d3:b8:1b:
         66:97:24:99:d2:d6:8c:90:97:50:4a:3e:c4:86:f6:ed:a9:e0:
         6b:3f:bb:5e:25:91:18:bc:11:06:aa:9e:f6:c2:cb:84:db:c4:
         95:0b:32:aa:84:4b:eb:fd:cc:7e:81:ef:15:5e:c4:8a:b7:40:
         20:8c:12:cc:33:57:0e:1b:c6:ed:f0:41:0d:8c:1a:5d:ce:50:
         ca:68:d6:90:17:09:52:b8:ad:4a:14:a5:b9:38:7e:2b:c3:9f:
         c2:5a:04:19:44:7d:16:9b:ad:00:13:69:53:e5:66:90:f4:24:
         fd:bb:35:30:dd:36:cc:9b:78:23:35:e3:5a:ba:ca:68:e4:58:
         82:ac:2c:03:a8:fe:4a:9d:6a:6e:14:c4:17:22:93:12:32:ce:
         1a:97:56:09:53:c6:e4:cc:33:e2:fe:5b:a1:71:d9:87:00:a5:
         6a:7c:38:8c:1a:9d:22:cb:54:e6:c3:d1:62:a2:58:3d:57:49:
         20:cb:26:3c:0d:90:6e:60:07:96:57:26:d7:de:6e:52:97:c1:
         a6:e3:e9:78:3c:11:df:79:69:af:72:f6:34:af:54:bb:18:0d:
         04:a5:2b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:19:36 2026 by rpki-client