Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7c8dea26-fd51-3016-9371-cf841d680f6b.roa
File:                     7c8dea26-fd51-3016-9371-cf841d680f6b.roa (raw, json)
Hash identifier:          +9+RkSCkO1/3gXCnpig3Ti20KJ22B3+mV8UDeK+7M+E=
Subject key identifier:   44:C8:92:8D:39:23:CB:63:B8:A9:2E:BD:31:69:69:7C:82:2F:08:12
Certificate issuer:       /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
Certificate serial:       010D0C9F4328584CFB1CEBE41111B170E9BB1200
Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7c8dea26-fd51-3016-9371-cf841d680f6b.roa
Signing time:             Wed 25 Feb 2026 14:00:39 +0000
ROA not before:           Wed 25 Feb 2026 14:00:39 +0000
ROA not after:            Tue 26 May 2026 13:00:39 +0000
asID:                     6079
IP address blocks:        167.253.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:1c:eb:e4:11:11:b1:70:e9:bb:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
        Validity
            Not Before: Feb 25 14:00:39 2026 GMT
            Not After : May 26 13:00:39 2026 GMT
        Subject: CN=f2802cc6-372a-4877-aab7-b29634446f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:11:8e:ae:f8:a6:79:29:93:08:32:9a:52:d3:
                    4f:d9:3d:1e:4c:32:cf:2a:f6:bd:cb:48:eb:3c:f2:
                    a0:1e:f9:08:1e:d4:4c:08:30:f2:2d:38:57:79:0f:
                    63:5e:7f:7a:87:90:49:3d:4f:57:00:ec:c6:31:5b:
                    58:c0:ce:4e:78:67:5a:a4:2c:ca:4c:9a:43:b7:6a:
                    69:25:1f:7a:87:04:6a:20:47:bd:33:54:57:3a:86:
                    e7:ce:61:d7:50:64:8a:4c:5d:bf:1e:52:87:93:94:
                    a1:ad:f6:b3:81:6f:0e:7f:7e:13:9f:53:e2:57:8a:
                    8b:49:68:82:12:77:6f:7d:65:d1:56:5b:5d:2f:eb:
                    22:4a:3c:78:0d:56:45:6f:06:5c:d8:c3:e7:43:2e:
                    c4:55:6e:2a:10:0d:05:6a:6f:15:6d:6c:3b:5b:be:
                    db:ff:98:7b:ea:c2:71:b1:01:2e:2f:58:b4:6b:6d:
                    46:6c:f1:8d:60:99:a7:7a:10:bc:b7:ed:27:38:fb:
                    bf:45:a3:1b:cf:88:83:89:a0:43:95:7b:58:5f:0b:
                    5c:1c:44:fb:fd:da:c9:28:13:6b:d0:a0:1a:2c:62:
                    61:d9:94:c1:22:01:d2:d0:4c:0b:4b:68:f4:ff:20:
                    e8:cd:76:55:5f:5d:1e:e5:e7:38:d6:ab:ed:cc:f7:
                    92:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C8:92:8D:39:23:CB:63:B8:A9:2E:BD:31:69:69:7C:82:2F:08:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7c8dea26-fd51-3016-9371-cf841d680f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:9f:b4:1d:56:e7:5c:75:33:7c:0d:e1:2c:b5:8d:75:04:56:
         cb:79:3b:32:e9:08:e1:1d:c5:41:09:13:38:00:dd:6f:c7:4e:
         0c:e6:fb:a6:03:7a:1e:c8:25:72:c0:c5:58:f3:04:1b:d5:c0:
         e5:27:c1:13:7c:4a:2b:b1:71:fe:80:54:be:49:df:07:b5:52:
         24:9e:75:1d:88:d6:9d:29:d4:b1:60:45:5a:6f:83:e6:0b:2a:
         04:f0:44:eb:73:10:42:65:d2:dd:0e:19:30:b9:c8:81:f7:90:
         4a:db:94:2c:c1:a8:43:89:f5:85:cf:92:d4:69:a5:92:6e:c8:
         65:b1:ac:a4:4e:ba:18:f8:a1:93:6a:ae:8b:2a:32:cf:73:24:
         ee:6a:b9:6b:fa:be:b3:30:28:e4:97:d7:66:c3:90:dc:e5:58:
         7c:53:c3:06:ba:ae:90:ae:19:a5:bb:c2:f6:c8:7f:0f:4e:20:
         d2:c0:a6:af:50:9b:9c:1f:8f:bb:85:2e:9b:7d:10:84:16:8b:
         1c:9b:b9:17:a8:ff:16:f2:8e:30:5b:66:47:9b:a5:39:e5:84:
         0f:13:5e:9a:29:12:84:60:d6:02:b0:0d:81:53:8a:0a:ba:8a:
         30:cd:c6:d4:22:63:bf:9b:75:03:33:1a:0e:5f:2a:0f:53:cb:
         23:e8:b6:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz7HOvkERGxcOm7EgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2RmMDU0YjctMGRiZC00MTBhLThhNmEtMTBhZjU3Mjhl
ODRhMB4XDTI2MDIyNTE0MDAzOVoXDTI2MDUyNjEzMDAzOVowLzEtMCsGA1UEAxMk
ZjI4MDJjYzYtMzcyYS00ODc3LWFhYjctYjI5NjM0NDQ2ZjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRGOrvimeSmTCDKaUtNP2T0eTDLPKva9y0jr
PPKgHvkIHtRMCDDyLThXeQ9jXn96h5BJPU9XAOzGMVtYwM5OeGdapCzKTJpDt2pp
JR96hwRqIEe9M1RXOobnzmHXUGSKTF2/HlKHk5ShrfazgW8Of34Tn1PiV4qLSWiC
EndvfWXRVltdL+siSjx4DVZFbwZc2MPnQy7EVW4qEA0Fam8VbWw7W77b/5h76sJx
sQEuL1i0a21GbPGNYJmnehC8t+0nOPu/RaMbz4iDiaBDlXtYXwtcHET7/drJKBNr
0KAaLGJh2ZTBIgHS0EwLS2j0/yDozXZVX10e5ec41qvtzPeSJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFETIko05I8tjuKkuvTFpaXyCLwgSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ZGYw
NTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFmNTcyOGU4NGEvN2M4ZGVhMjYtZmQ1MS0z
MDE2LTkzNzEtY2Y4NDFkNjgwZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2RmMDU0YjctMGRiZC00MTBhLThh
NmEtMTBhZjU3MjhlODRhLzdkZjA1NGI3LTBkYmQtNDEwYS04YTZhLTEwYWY1NzI4
ZTg0YS5jcmwwHwYDVR0jBBgwFoAU6Pw7x68gRdZTF4LOUkaYgOVYgCswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83ZGYwNTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFm
NTcyOGU4NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/15MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKftB1W51x1M3wN4Sy1jXUEVst5OzLpCOEdxUEJEzgA3W/HTgzm+6YD
eh7IJXLAxVjzBBvVwOUnwRN8Siuxcf6AVL5J3we1UiSedR2I1p0p1LFgRVpvg+YL
KgTwROtzEEJl0t0OGTC5yIH3kErblCzBqEOJ9YXPktRppZJuyGWxrKROuhj4oZNq
rosqMs9zJO5quWv6vrMwKOSX12bDkNzlWHxTwwa6rpCuGaW7wvbIfw9OINLApq9Q
m5wfj7uFLpt9EIQWixybuReo/xbyjjBbZkebpTnlhA8TXpopEoRg1gKwDYFTigq6
ijDNxtQiY7+bdQMzGg5fKg9TyyPotsI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:49 2026 by rpki-client