Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/70974390-6693-3c28-afa0-4b3fba230159.roa
File:                     70974390-6693-3c28-afa0-4b3fba230159.roa (raw, json)
Hash identifier:          n4v0j2MNW2AUtwnyva0jVXBHSTTA7wlJBXTk2Er4Tko=
Subject key identifier:   AC:DD:4E:B1:52:97:8A:3E:06:B8:5A:1C:68:73:52:30:3E:6A:1C:7A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA7879189DFF9E42D5A24ABC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/70974390-6693-3c28-afa0-4b3fba230159.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     2914
IP address blocks:        207.251.0.0/24 maxlen: 24
                          207.251.1.0/24 maxlen: 24
                          207.251.2.0/24 maxlen: 24
                          207.251.3.0/24 maxlen: 24
                          207.251.4.0/24 maxlen: 24
                          207.251.5.0/24 maxlen: 24
                          207.251.6.0/24 maxlen: 24
                          207.251.7.0/24 maxlen: 24
                          207.251.8.0/24 maxlen: 24
                          207.251.9.0/24 maxlen: 24
                          207.251.10.0/24 maxlen: 24
                          207.251.11.0/24 maxlen: 24
                          207.251.12.0/24 maxlen: 24
                          207.251.13.0/24 maxlen: 24
                          207.251.14.0/24 maxlen: 24
                          207.251.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:91:89:df:f9:e4:2d:5a:24:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=731b8778-5b92-44f6-9273-72269f28940f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3b:30:2f:52:3a:ce:03:43:82:75:d5:2a:ca:
                    1c:17:3e:63:59:da:d5:c0:88:79:95:77:f5:ff:09:
                    25:8a:a7:20:de:b9:e9:09:e1:85:99:e6:41:a6:fe:
                    3b:72:40:42:c6:2a:ef:74:78:d1:c1:44:f1:85:b6:
                    be:b3:e9:5f:30:01:2d:85:b4:3d:56:7f:cd:fa:af:
                    84:61:cf:51:61:25:c4:88:ba:98:eb:31:e5:05:d9:
                    16:02:c4:04:85:18:83:51:f7:79:7d:60:42:a8:a3:
                    82:76:59:f7:43:f1:00:9b:c5:7b:7f:28:e3:78:b4:
                    a4:2c:66:18:84:57:7e:ae:2b:a7:a6:69:f0:74:3a:
                    af:34:49:e4:a3:25:ad:2c:52:4d:41:8f:42:4d:1e:
                    3b:33:a3:b0:db:6d:b1:38:b0:fa:ad:3e:03:6b:7f:
                    fd:d4:9e:ee:6f:b8:e3:4d:91:2d:c2:7b:56:61:22:
                    70:74:07:e2:f0:8b:70:96:7e:dd:3a:aa:ef:23:34:
                    05:27:a1:b3:67:01:89:96:ef:84:c4:a8:a0:60:e9:
                    68:02:c0:ab:c8:06:ad:83:8d:5a:d0:25:8b:aa:7a:
                    dc:d1:8f:b6:e2:da:f7:ff:73:3b:c3:58:39:79:92:
                    9a:75:15:32:a9:40:8a:4d:63:f0:1d:68:cd:c6:ff:
                    fe:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DD:4E:B1:52:97:8A:3E:06:B8:5A:1C:68:73:52:30:3E:6A:1C:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/70974390-6693-3c28-afa0-4b3fba230159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.251.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:7e:c8:80:75:00:57:e0:fc:61:ce:e7:b5:c7:00:57:b8:77:
         60:3b:ad:32:a3:8c:28:c3:9c:da:5b:82:8d:27:ba:43:7f:bb:
         fd:29:5a:26:a2:f2:3f:58:68:6f:fa:fe:a8:d2:3a:9e:d1:b2:
         ca:ac:7e:f8:57:26:b1:7d:37:c6:09:7c:96:fd:ca:4f:cd:3f:
         92:4e:99:0f:8b:01:db:7a:fb:df:83:b8:e5:92:85:2b:9b:40:
         0c:be:4f:75:2c:22:af:b7:69:1b:2e:36:3b:45:87:cc:61:86:
         53:18:12:0c:58:ac:aa:43:c0:7e:c5:c6:a9:cb:b7:fe:90:5b:
         83:6b:8d:a5:e2:dd:ec:2b:83:58:1f:f2:76:de:fe:ea:e4:2e:
         1a:18:23:ec:34:97:d8:43:a9:1d:ae:ce:d4:1c:f0:76:44:f9:
         4d:0e:b6:de:22:d2:2d:be:82:99:55:46:d4:bc:81:52:58:95:
         9d:a2:4a:73:7c:a5:7d:5f:c2:e9:7f:73:e3:eb:f3:a5:cc:3b:
         67:77:bc:86:69:78:97:a4:8c:71:c1:61:39:14:3c:2a:ce:db:
         65:58:fd:ba:a3:78:03:b0:55:db:c6:42:e3:ec:4f:d6:97:5d:
         a6:e9:10:25:47:01:1a:f4:87:6f:5c:68:b6:1a:26:92:e7:8d:
         a0:27:7e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:45:52 2026 by rpki-client