Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2676abeb-4b9d-34be-9a16-17b5611bd27e.roa
File:                     2676abeb-4b9d-34be-9a16-17b5611bd27e.roa (raw, json)
Hash identifier:          Ho1vxiVgYI+6V1SOcf69NXeF+GlY7jE3ZxF66GxQpzE=
Subject key identifier:   CA:35:D9:65:DF:59:94:C2:A8:3D:E9:41:AC:4A:94:A0:65:5F:F0:AE
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D651521DCDC15A6C11C719920
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2676abeb-4b9d-34be-9a16-17b5611bd27e.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     30036
IP address blocks:        107.167.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:21:dc:dc:15:a6:c1:1c:71:99:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=ef3dc8d6-95ba-4b29-872f-1f26a31974ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:39:9b:84:ed:ac:f8:1f:f3:71:5a:24:d8:94:
                    81:16:29:fe:b4:68:97:d9:dc:0e:94:17:d5:6c:08:
                    c7:e2:72:b8:01:81:8a:e4:6b:30:bc:d5:3e:28:75:
                    97:dc:73:ed:a4:0c:f9:e4:e1:1b:55:62:08:fd:7d:
                    3c:5a:e9:09:09:f6:1e:6e:32:99:12:3c:06:35:f2:
                    6b:06:d9:5f:c2:a2:6c:ab:63:e5:19:7a:ec:67:73:
                    91:75:6a:78:0f:ca:ec:b3:3d:80:26:32:d9:ef:e7:
                    4f:7c:ed:3e:2e:de:30:55:fa:66:29:5b:f3:91:25:
                    23:34:20:25:02:7f:f0:ff:9c:7b:45:e5:24:48:c8:
                    d0:96:f8:12:f6:a9:77:65:8a:36:84:ec:41:38:da:
                    2c:db:75:40:9f:92:86:86:75:cb:eb:e6:7f:ef:39:
                    99:2b:10:da:51:fd:24:2e:66:35:77:13:be:b0:19:
                    4a:14:bd:93:f7:ab:8b:77:0c:e6:7c:d5:1a:25:39:
                    00:7f:30:1e:c3:0d:fc:fd:dc:3b:6a:bc:7d:87:82:
                    69:9f:95:b9:37:dd:f2:be:72:5e:f9:82:8b:b9:57:
                    1d:11:d2:9c:65:21:4f:c8:cd:24:34:a5:10:d5:ae:
                    c7:4c:b9:d0:f5:02:4d:43:2b:79:e8:05:54:5c:2a:
                    d9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:35:D9:65:DF:59:94:C2:A8:3D:E9:41:AC:4A:94:A0:65:5F:F0:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2676abeb-4b9d-34be-9a16-17b5611bd27e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:32:2c:b8:6d:36:5a:e3:ba:c4:ec:bb:13:3c:a7:1f:bd:50:
         59:52:77:dc:4e:a5:69:c0:bb:b9:b7:06:03:87:06:8f:d7:e9:
         c6:2b:f0:e4:12:44:e5:7b:dc:10:e6:cf:e0:4b:72:33:f2:95:
         02:2f:b3:31:1b:da:bf:90:60:ed:02:ad:9e:af:fd:0f:44:dc:
         09:e5:b5:5d:ac:37:99:0f:2e:e8:d7:88:3f:36:8e:de:82:3a:
         8c:98:3b:23:a7:4a:b6:92:08:d2:20:bf:f1:1d:f3:e2:a5:fd:
         f0:2a:95:a9:c1:be:c9:cc:59:93:31:76:64:50:5a:eb:e1:53:
         7a:f4:e8:54:86:3d:36:c4:cd:9d:74:54:0f:4d:57:fc:13:57:
         87:a0:89:7b:f1:2a:af:74:7b:fa:c4:c1:8c:45:41:fd:87:bf:
         8c:ab:e4:b1:c8:8e:94:d1:ab:69:dd:57:f5:8b:8a:4b:88:3a:
         a2:e0:13:d3:78:73:68:25:57:dc:80:69:34:81:e4:91:db:e0:
         e3:6f:1b:9c:16:dc:89:76:89:a6:a7:f8:2b:e2:94:f7:f2:71:
         56:5c:82:dc:b7:d3:2b:3f:f2:2d:2a:cf:51:b8:39:c6:ab:03:
         47:3e:ff:b4:56:61:34:6f:ed:08:de:0d:31:ff:60:50:42:f1:
         2f:0e:60:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:22:53 2026 by rpki-client