Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f7917142-ccc9-32c4-9c51-a2a941f0984a.roa
File:                     f7917142-ccc9-32c4-9c51-a2a941f0984a.roa (raw, json)
Hash identifier:          Vi0EfWC8+zHTcysasapdTjHdmBsoOjsn6W61DdHz1Vg=
Subject key identifier:   DF:E1:3C:E7:6B:0B:36:FF:D1:2E:BC:87:B4:E2:DA:35:F5:2E:DC:B1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA7952445EBBB654B84F07A40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f7917142-ccc9-32c4-9c51-a2a941f0984a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398211
IP address blocks:        207.34.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:24:45:eb:bb:65:4b:84:f0:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=eeabac10-36ae-4687-89c6-20e1f877c69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a9:49:1e:8f:e9:39:01:1f:9a:61:6b:34:97:
                    6c:e8:74:27:ff:bc:64:2e:79:45:1f:1f:52:f2:3b:
                    16:0a:e3:02:9e:7b:c3:dd:5b:8f:a3:26:8e:4f:22:
                    f0:05:15:6b:88:e6:a8:54:01:71:8f:78:13:3f:a6:
                    e8:21:87:38:41:9a:60:bd:f7:2b:c6:99:2a:54:9a:
                    9c:3f:64:fb:17:49:b0:e9:1a:72:18:a1:c4:0a:fb:
                    fb:ff:1b:c5:f0:7a:46:7a:09:5d:0a:f3:48:af:84:
                    8b:68:61:50:b4:2b:e0:49:54:84:f9:ac:34:63:cf:
                    72:5d:27:5e:ee:d9:e8:33:e6:c2:2a:4d:43:be:f3:
                    f6:6e:4e:e2:1e:04:1b:8d:2b:6a:22:34:b1:39:9c:
                    c2:dc:38:ce:43:ce:cb:97:93:d4:dc:b5:f0:74:02:
                    88:18:04:7d:7a:3f:7d:0d:5c:35:fd:e6:40:ff:85:
                    3e:f0:6b:d1:93:82:25:fa:80:88:75:de:89:b2:75:
                    08:35:c7:ce:50:ca:4e:96:64:db:34:4f:70:30:1c:
                    2a:9c:62:e5:e7:0e:e4:7f:d9:5c:58:f0:cf:dc:fa:
                    d7:4a:30:d9:68:7d:1f:be:b5:06:a4:b0:35:45:91:
                    72:91:e1:43:38:fc:6d:a2:93:6f:69:37:b4:ef:c6:
                    55:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E1:3C:E7:6B:0B:36:FF:D1:2E:BC:87:B4:E2:DA:35:F5:2E:DC:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f7917142-ccc9-32c4-9c51-a2a941f0984a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d1:63:40:aa:f5:24:98:2b:57:77:c9:9d:26:34:33:c7:35:
         c7:d7:47:b5:00:1e:47:9a:0e:aa:58:82:26:ff:00:ac:e3:58:
         84:8a:eb:8f:86:b0:74:f7:cf:ec:00:ef:d5:58:ab:96:25:33:
         e8:4d:b2:b3:51:9a:95:24:fd:49:a7:f1:f0:4f:b9:61:c4:45:
         12:74:de:f0:26:1d:92:54:a9:44:95:36:a6:ef:14:ca:50:4c:
         52:2d:69:92:a1:0c:5f:cd:ea:36:1f:8f:7a:91:4c:ac:54:af:
         c6:95:75:2b:f1:bd:65:d8:fd:4b:f2:90:14:e8:3e:9c:74:23:
         e7:3e:65:5b:45:ce:01:0a:bb:c0:9c:4f:4b:af:d6:f3:10:bd:
         d5:0f:76:f5:03:51:ce:05:99:77:5a:34:c8:93:af:5b:aa:87:
         6f:d1:9c:59:1b:d0:ec:53:f1:0a:78:59:94:a8:1f:8a:7f:db:
         c9:d6:d4:a4:75:be:84:59:11:18:ab:bb:1c:53:9e:89:0b:cb:
         cd:73:cf:38:b4:c8:8f:2c:96:a5:d4:fa:de:9b:17:38:ed:ca:
         b0:49:ee:b3:cb:cf:dc:cd:0e:cc:56:1d:96:ef:9e:9a:ec:fe:
         0e:b6:a6:99:88:51:9d:37:c9:00:da:df:45:3f:eb:e8:da:d8:
         f8:03:0c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:50:53 2026 by rpki-client