Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f8f4c02b-d6f4-3122-9631-ab74d1a890d1.roa
File:                     f8f4c02b-d6f4-3122-9631-ab74d1a890d1.roa (raw, json)
Hash identifier:          vodszvt1ccVxSvJqoRcrlxlIPIFgUje3hM/XOquirwY=
Subject key identifier:   F1:E7:66:D7:F1:BF:8E:5B:F1:C6:DA:76:0E:C2:3F:C1:5D:D3:E9:A2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06729FBB88843DF33BC45D00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f8f4c02b-d6f4-3122-9631-ab74d1a890d1.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     32747
IP address blocks:        207.179.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:9f:bb:88:84:3d:f3:3b:c4:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=6158e461-5664-4b07-a420-802a24738a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:0e:cc:90:f0:8a:1f:e8:03:8f:b6:a2:70:
                    e5:69:b1:ad:50:88:89:da:86:eb:2b:8b:a4:12:b6:
                    e4:8f:9b:49:cc:ea:7c:86:03:b4:68:44:4e:19:d1:
                    9d:5d:73:31:1d:9c:45:37:07:f6:40:ad:52:47:62:
                    70:a4:42:aa:2a:59:15:ab:ab:0c:26:bd:0d:fb:40:
                    7d:50:bf:8c:50:d7:09:32:6c:19:85:c5:25:e5:13:
                    56:00:95:4a:13:9d:7c:97:47:55:0b:5a:8b:8c:ad:
                    62:e7:64:43:0a:89:90:c8:11:2a:92:1e:39:f7:47:
                    e3:a4:6a:f7:d8:11:f3:b8:18:56:c7:f9:e6:00:de:
                    b0:c8:be:63:a0:b6:a7:4d:d1:df:22:a2:28:29:19:
                    66:43:6a:21:49:b2:de:7e:1c:a8:a9:71:1b:97:ad:
                    60:5f:61:5c:32:1d:5a:9a:59:48:02:0a:91:d6:19:
                    1f:f8:a4:41:4e:41:0f:4a:f5:33:30:50:65:fa:b1:
                    48:9d:fa:b6:60:52:33:df:67:21:44:28:9c:47:3d:
                    84:05:89:68:12:24:d3:43:57:97:5d:a2:fe:25:c7:
                    bd:06:88:dc:e7:0c:64:f9:68:4b:64:14:6d:30:35:
                    f5:f9:d2:ca:4b:1a:0f:0b:3a:4d:7f:d6:29:01:5a:
                    58:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E7:66:D7:F1:BF:8E:5B:F1:C6:DA:76:0E:C2:3F:C1:5D:D3:E9:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f8f4c02b-d6f4-3122-9631-ab74d1a890d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.179.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:fa:f3:71:96:22:5f:ab:ff:93:72:16:e6:60:e2:de:88:65:
         ef:e5:35:e1:60:71:a9:5f:c8:77:52:49:68:53:38:bc:d3:de:
         ee:b5:c6:d2:47:60:17:68:ca:42:52:ec:6c:3f:4b:9c:cf:e6:
         47:1b:c0:4e:65:0a:46:73:4a:4d:85:4c:01:13:3f:94:8f:33:
         4c:98:e0:7d:65:d9:43:84:6d:a4:d1:ae:85:36:28:24:3a:8c:
         6e:ba:25:04:fa:30:60:82:7f:3d:bc:20:01:d7:cd:1e:31:1b:
         28:f4:01:89:d4:64:7f:d8:18:97:81:9a:63:a9:cb:b6:f8:09:
         02:dc:41:3a:6e:57:2f:ed:40:62:c3:f1:f3:70:04:44:5f:d2:
         a4:c2:93:67:84:ad:07:3e:d9:03:87:76:fb:22:be:f0:71:2b:
         26:26:71:3f:92:48:8a:e0:de:fd:4d:ea:7c:a1:84:1b:a1:99:
         1b:b4:4f:72:c7:ae:ca:c9:db:f0:a5:a5:4d:8f:8c:ab:41:05:
         4b:15:95:49:ca:23:5a:90:2b:a2:58:e0:80:21:95:3d:c6:84:
         68:5b:20:e4:c6:b8:c3:dd:ec:91:8e:fc:b6:e5:97:df:e9:f8:
         de:8b:fd:9d:0e:cf:bc:a7:ef:9c:f9:55:89:db:54:e5:ae:84:
         a4:db:65:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:22:07 2026 by rpki-client