Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1a2cc2e6-121f-34db-96f2-78447ed5a094.roa
File:                     1a2cc2e6-121f-34db-96f2-78447ed5a094.roa (raw, json)
Hash identifier:          y8T+RKMZxxCKsLxI5Pt8x7S5lIe4oDVduGfm/9GKWa0=
Subject key identifier:   CF:4F:18:13:4E:B4:DF:F6:A3:3E:D7:C3:C9:DC:4D:74:40:61:66:E9
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584D0217BC9AED0480615A363976
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1a2cc2e6-121f-34db-96f2-78447ed5a094.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     395075
IP address blocks:        207.253.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:bc:9a:ed:04:80:61:5a:36:39:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=9c9518df-d1cc-42c3-9365-52caa359d789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2d:69:6b:bd:f0:28:dd:5b:e5:4a:d5:7d:08:
                    fd:15:67:61:81:ae:2d:f7:21:93:84:92:1c:f8:4c:
                    1c:b6:b7:fb:2e:d7:2c:27:97:1b:ca:bc:bb:fe:de:
                    c7:dc:f3:5f:ca:15:55:e5:17:db:c7:91:cc:5f:c9:
                    a6:c4:cf:08:9f:ef:c6:c8:56:a0:83:71:2f:e8:36:
                    67:f8:e8:2d:7b:d4:e4:ae:a3:0e:fa:91:e3:d5:77:
                    2e:53:98:6f:0f:69:1a:95:ad:eb:c6:a1:6e:76:24:
                    81:ec:79:75:34:17:a0:05:b8:24:ac:db:3c:8e:ab:
                    04:a7:8b:b2:24:2d:c4:92:dd:f4:87:6e:85:0f:d6:
                    74:cb:3d:16:91:8c:02:6b:43:7c:61:40:09:e4:e6:
                    ee:58:01:89:d3:80:18:d6:97:ae:ff:99:d1:6b:f7:
                    97:ba:67:35:44:3e:cf:f4:a0:4d:79:88:e5:4e:95:
                    bd:18:78:d9:6f:0a:36:cd:43:ac:bb:54:52:d0:b0:
                    bb:31:d3:0a:2d:8b:c4:14:0a:4d:6d:77:e1:8c:c5:
                    03:2c:cd:9b:58:18:34:9a:5f:33:cd:99:a1:05:2d:
                    07:1b:e1:b8:3e:89:73:a8:72:14:4e:ee:a1:ef:de:
                    7d:76:cb:2f:c8:6a:77:b7:02:41:d2:fe:47:a4:5c:
                    b2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4F:18:13:4E:B4:DF:F6:A3:3E:D7:C3:C9:DC:4D:74:40:61:66:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1a2cc2e6-121f-34db-96f2-78447ed5a094.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:b4:4b:55:e6:35:ef:60:22:6a:13:63:26:3e:d4:84:36:43:
         5b:d7:50:65:01:82:07:c4:a5:dc:38:bc:0a:a5:83:3e:fd:bf:
         91:a4:53:40:8c:89:1c:1d:46:e4:05:25:8b:65:d2:eb:7a:24:
         e2:47:bb:51:d3:28:c7:1a:ab:41:fb:1b:61:05:9f:aa:49:12:
         ff:69:ff:bf:a7:c0:0b:f1:76:8d:bb:c5:8e:3b:52:0d:71:11:
         f9:42:15:f3:5c:0e:25:35:ad:06:e8:af:eb:1e:e4:ba:a6:21:
         ac:2f:87:2d:ea:c2:2f:d7:f4:78:e4:24:83:35:23:0b:e7:9b:
         b4:47:a8:28:1d:7c:b7:20:c3:32:75:6f:92:cb:05:5e:81:97:
         07:b5:40:92:07:a3:24:ae:8c:cf:b2:51:39:55:25:b9:76:fa:
         da:cf:cb:71:f8:76:37:0d:c4:40:9f:6d:b4:a1:22:e1:11:17:
         9c:06:cd:9c:df:01:a3:a4:7c:e0:37:b2:15:7f:90:b6:46:16:
         3c:2c:2a:86:d7:df:79:b8:d5:80:c1:55:cc:e0:06:52:53:2b:
         2b:30:bc:7a:ff:5e:d8:98:7b:3d:40:e1:ae:94:31:9f:5e:2b:
         3b:dd:da:93:ec:c5:a3:9e:16:a1:a8:5d:3b:c5:ea:db:1b:75:
         b4:28:8e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:19 2026 by rpki-client