Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/009454ff-83eb-36e1-a19e-9115d5074bc9.roa
File:                     009454ff-83eb-36e1-a19e-9115d5074bc9.roa (raw, json)
Hash identifier:          iJfkeEliPWli8arlaZJknj4cBxurlNKr/QCsYiJCYzw=
Subject key identifier:   8D:DD:1D:03:E3:17:5F:0E:26:E1:A8:E5:C3:4A:A9:12:27:CD:07:3E
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584D0217B5AD2EFB860F6252A380
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/009454ff-83eb-36e1-a19e-9115d5074bc9.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     30336
IP address blocks:        207.253.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:b5:ad:2e:fb:86:0f:62:52:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=700a8ec2-ab5f-486c-94e0-373e6bc91ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0d:e3:26:8d:e3:b3:9f:7e:37:f7:b6:71:7b:
                    52:5e:0e:21:46:90:e2:8d:a2:da:a6:3b:42:73:92:
                    ff:a3:c0:e6:fa:e7:53:34:91:4c:54:d6:3f:0e:cf:
                    fa:9d:4c:e6:26:6a:7a:2a:8a:b5:f7:41:b3:57:f9:
                    4f:1a:76:a6:92:e3:09:6e:a6:7b:5e:3d:19:cd:0a:
                    14:12:20:58:27:3e:b0:af:c8:97:45:d4:c5:e9:87:
                    b1:0e:b1:92:cd:8b:b8:75:0e:cc:42:a7:fa:b9:ae:
                    25:1f:75:35:c1:9d:fe:9f:c5:25:07:6d:51:b2:21:
                    71:89:01:b9:35:a0:88:be:c7:4a:86:4a:1a:c0:b9:
                    58:8c:68:d9:9c:b6:e9:7e:cf:44:6a:2f:43:ec:20:
                    6e:07:c6:2d:32:71:27:0a:35:ec:c3:40:89:2d:8e:
                    6f:93:dc:ab:24:df:50:c6:ef:7e:db:21:fc:76:25:
                    ee:35:4e:cb:dd:7e:aa:9f:f9:4f:76:4a:68:f5:ec:
                    1f:68:65:d0:cc:3b:8b:58:77:05:47:25:05:de:b1:
                    aa:c6:4a:e0:ab:1a:db:ea:4b:0a:16:f8:de:27:41:
                    58:44:d5:88:34:35:12:2e:42:45:82:1d:7a:7e:4f:
                    62:2e:6a:b2:86:ba:c8:53:17:a7:64:48:f1:6c:e9:
                    83:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DD:1D:03:E3:17:5F:0E:26:E1:A8:E5:C3:4A:A9:12:27:CD:07:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/009454ff-83eb-36e1-a19e-9115d5074bc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ce:4d:de:a5:2e:a8:50:79:14:7c:e0:1e:20:0e:d2:90:47:
         41:57:dd:a2:f6:f3:4b:74:6e:98:09:9b:43:a9:1c:2a:61:ed:
         8c:ab:5a:2e:33:09:ab:ff:53:44:46:84:f8:34:9a:4e:c3:3e:
         0f:92:98:53:27:3f:df:a1:ff:89:0a:01:26:af:c1:bd:56:75:
         55:e6:48:1d:32:77:c1:a7:5c:c7:95:40:8b:e2:95:c8:7c:ab:
         7e:a8:e7:bf:eb:7b:5c:40:94:74:d5:5d:54:89:31:c9:28:c5:
         ce:5d:ca:74:09:cb:30:ca:6f:6e:2d:5b:4f:84:42:0c:47:76:
         53:5a:fe:1d:a4:c6:89:80:38:bd:a9:50:54:b7:29:26:91:50:
         9b:88:74:04:04:6a:ab:69:0a:76:2d:ec:08:41:78:b4:3c:f4:
         f5:d3:93:7e:88:67:8e:3a:7e:ea:4d:b0:e1:ce:0f:c1:81:21:
         04:f3:2f:06:48:63:7b:e7:76:3f:13:f3:fe:2d:2a:68:dd:20:
         e4:25:da:25:a7:b5:e8:cd:db:09:3d:03:5d:f8:b6:38:05:a7:
         d7:6b:0b:04:59:3a:67:5b:3a:cc:68:bd:27:67:62:3e:93:4b:
         3e:4a:50:44:47:a0:d0:79:78:d9:11:45:95:3f:4a:50:b3:ff:
         1d:d6:b4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:33:55 2026 by rpki-client