Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/7b603c52-5369-37f7-bc4d-c7cc4bab9298.roa
File:                     7b603c52-5369-37f7-bc4d-c7cc4bab9298.roa (raw, json)
Hash identifier:          zPcTAnr0sLM9owM75xT1M9Y+DGsO5LC/5ylFIavIXXE=
Subject key identifier:   39:BC:6A:52:21:5B:9B:91:71:DD:49:E4:CE:7C:FD:A4:C1:F0:88:0A
Certificate issuer:       /CN=30ed4af0-ad84-44f1-84da-cd9b1c667340
Certificate serial:       010D0C9F4328584EA7885D35B25364A042C196A0
Authority key identifier: 7C:37:81:36:D0:60:6A:2C:D8:E4:1D:C9:4F:E7:C0:DB:38:5D:76:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/7b603c52-5369-37f7-bc4d-c7cc4bab9298.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     32707
IP address blocks:        216.8.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:5d:35:b2:53:64:a0:42:c1:96:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30ed4af0-ad84-44f1-84da-cd9b1c667340
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fbe11292-3948-4261-92f5-6672143e80ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:a1:3e:59:1d:55:71:ed:3f:14:3f:16:4d:
                    79:bb:d6:94:ce:e6:8b:95:61:82:af:ef:6f:f4:2f:
                    3f:36:a5:48:75:d6:32:40:21:ef:db:2e:0b:b9:b2:
                    02:71:ed:6d:0c:24:b5:b5:66:c9:bb:d0:a1:46:83:
                    12:84:b6:23:c9:94:d4:8f:b0:5b:21:5a:cb:15:6b:
                    a3:31:8e:5e:a1:9b:9b:e2:34:ef:86:db:9f:e9:2b:
                    26:86:27:2f:c2:5c:a2:af:5e:f6:d8:28:db:0c:ca:
                    97:3b:c4:3d:bb:1f:b9:6e:6f:fe:50:d3:70:bb:97:
                    1c:19:63:29:89:16:bb:a5:97:3f:fb:ac:bc:ce:80:
                    61:8f:69:af:ea:00:9f:60:db:d5:f3:45:6c:96:a8:
                    a7:af:3f:8d:f8:f2:b2:4b:0d:ad:3c:ba:3d:4a:82:
                    2e:14:2f:93:60:ef:e4:41:a4:b4:e3:dc:7a:7d:22:
                    4d:7e:13:1c:ed:13:ca:94:82:99:21:ed:17:71:43:
                    24:32:f8:89:c9:54:60:cc:40:78:1c:f0:6b:47:1d:
                    dd:95:a0:f4:b1:1c:86:47:c2:04:f5:93:03:01:6c:
                    a3:c5:93:09:9a:c6:33:96:bd:34:58:dd:45:79:66:
                    9f:80:e0:e3:a5:09:7c:7f:90:19:f6:97:a3:94:fd:
                    33:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BC:6A:52:21:5B:9B:91:71:DD:49:E4:CE:7C:FD:A4:C1:F0:88:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/7b603c52-5369-37f7-bc4d-c7cc4bab9298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.crl

            X509v3 Authority Key Identifier:
                keyid:7C:37:81:36:D0:60:6A:2C:D8:E4:1D:C9:4F:E7:C0:DB:38:5D:76:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.8.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:e0:bc:9d:e0:d8:4b:9c:34:55:9f:0e:e8:6b:0f:42:f2:93:
         92:cb:72:82:a8:4d:3e:b9:62:2e:0f:6f:ce:9b:d5:e5:3d:a1:
         96:b3:39:52:84:c4:56:b5:3f:c5:dc:ec:94:2f:0a:d6:8c:6b:
         4f:17:92:04:17:5c:9c:80:5c:48:94:ac:81:d9:3b:45:bf:45:
         69:d2:40:c4:34:21:7f:36:69:08:53:9f:c5:01:9c:4e:be:58:
         28:0e:73:d5:4b:30:02:35:bd:e8:28:f5:e8:96:99:34:1a:58:
         f9:17:24:1e:d7:b2:20:b6:1f:02:dc:cd:6d:04:c8:2a:1c:c1:
         b2:bb:e2:62:ee:f5:56:88:1c:fb:90:4e:21:f5:e9:e7:5b:04:
         83:a3:71:bb:73:d7:8c:21:96:3a:e9:85:54:08:99:46:63:59:
         24:4d:71:4a:9d:d1:f7:0c:dc:09:41:89:dd:4f:c4:83:5e:47:
         ed:aa:71:7a:59:3f:87:8e:bb:5f:10:8a:51:d5:89:4c:b4:99:
         06:89:10:b9:f7:29:2c:6c:79:06:4d:5b:47:5d:0c:8f:a2:45:
         e3:f6:91:d9:d0:32:86:62:e3:0e:c8:8a:3e:8d:8e:c3:f1:80:
         fc:a7:95:6d:86:5b:81:48:f8:55:45:70:cb:fc:0a:8a:71:24:
         f7:bf:98:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:13:43 2026 by rpki-client