Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fd6e5b2c-d926-360d-abdc-70d272ffcf21.roa
File:                     fd6e5b2c-d926-360d-abdc-70d272ffcf21.roa (raw, json)
Hash identifier:          Bd4ZdKL9IdqWcGv1oqidgmLcT4t98LQTtXTkPKmcFOQ=
Subject key identifier:   8D:B7:8F:B5:86:A5:4B:FC:B7:4F:AE:E6:D7:66:34:AD:9C:44:26:27
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA794083DEEB5D5288E3BC380
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fd6e5b2c-d926-360d-abdc-70d272ffcf21.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15247
IP address blocks:        208.181.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:08:3d:ee:b5:d5:28:8e:3b:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=07dda77f-1cce-45c8-a7e4-79d179e9d96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:46:af:f0:a2:54:83:ef:1d:3a:69:00:68:1f:
                    9b:d3:26:a5:47:fc:cd:c6:22:ee:69:3b:01:7b:71:
                    0c:37:8b:de:52:f2:12:06:cd:07:9a:3f:2e:71:07:
                    ea:a5:6d:89:d8:35:20:1f:5c:a0:4f:88:8f:41:f1:
                    1e:0b:26:ec:61:aa:20:6b:75:e6:23:08:3e:72:8f:
                    a8:6c:d3:03:4e:fa:05:7b:30:6e:bc:22:80:69:c1:
                    88:69:bd:fd:c2:e5:82:2f:f4:df:1b:84:8c:c2:46:
                    8d:64:2e:6c:86:3a:19:19:dd:75:99:ca:a5:7b:bf:
                    bb:92:0a:a2:26:80:c0:e2:23:d8:ec:ec:21:7a:29:
                    ca:50:38:c6:87:06:2d:29:09:55:ef:78:e1:0f:67:
                    46:ff:f3:74:b5:11:ef:80:44:63:89:b0:d3:24:68:
                    75:70:d0:61:f9:c6:fc:ff:d4:1d:2d:ec:b9:b9:18:
                    3f:cf:fe:c2:3d:88:c4:3e:e7:09:c5:03:61:94:fd:
                    03:33:a3:03:e8:73:8f:48:df:ec:47:a8:61:23:59:
                    3a:9d:dc:aa:e5:c1:cc:73:7d:9d:a1:f3:1e:a7:d5:
                    bc:14:8d:ea:d6:d1:61:b9:32:76:bb:10:d9:b9:b1:
                    2f:79:e3:6d:b7:03:2c:ac:25:52:96:33:f5:aa:d9:
                    91:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B7:8F:B5:86:A5:4B:FC:B7:4F:AE:E6:D7:66:34:AD:9C:44:26:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fd6e5b2c-d926-360d-abdc-70d272ffcf21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.181.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ec:7f:00:90:b0:c3:a9:13:01:65:5d:8b:51:57:32:8d:b7:46:
         73:6f:00:e1:f2:4d:ca:b8:fe:b0:bd:58:09:61:f7:98:0d:4e:
         e2:76:94:79:de:15:9d:2c:24:40:b3:ab:b9:2f:5a:15:00:71:
         3f:8b:49:2a:1d:79:67:d1:eb:04:c0:9b:a3:e1:c9:67:ff:a9:
         d8:e1:1b:9b:03:76:a8:21:37:f3:72:33:1d:0c:df:88:62:57:
         06:f6:9e:73:d1:0e:f5:c3:ea:6a:d8:c2:c4:06:41:40:79:e6:
         20:cb:7d:91:37:d9:1e:61:c8:db:4a:95:7b:b7:9b:2e:25:60:
         ff:58:de:f9:c9:ae:67:3f:ae:b1:93:6b:e7:13:21:4a:ec:a2:
         4f:c3:57:77:a9:da:0b:d1:e0:fd:41:da:91:1a:9e:60:7a:af:
         aa:b5:fd:c2:00:4a:61:19:fa:ba:63:81:cb:02:5f:da:74:66:
         93:92:da:8a:2e:cb:ce:d2:3f:7d:03:a7:16:b6:b3:72:d9:a5:
         c8:a9:99:3b:f8:76:b8:54:21:a1:01:33:87:3d:5e:a3:93:8f:
         62:cd:94:15:f5:2f:f9:78:9c:45:a2:5f:d6:ce:70:91:54:65:
         5d:c6:43:c1:3d:c1:99:2a:eb:a7:14:03:3d:f0:34:64:70:13:
         24:46:4b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:36:20 2026 by rpki-client