Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/1a374771-b68f-3942-97f7-974f497d59c8.roa
File:                     1a374771-b68f-3942-97f7-974f497d59c8.roa (raw, json)
Hash identifier:          qb8yEOYCZngCEJ8RcQWyYKdS/MfXAPZcpHNshanmOLg=
Subject key identifier:   2C:09:5A:B6:CF:47:FD:82:31:D5:5D:B4:44:1B:48:7C:85:18:2F:C3
Certificate issuer:       /CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
Certificate serial:       010D0C9F4328584E9B4BD353B4C0B6EB64734020
Authority key identifier: 2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/1a374771-b68f-3942-97f7-974f497d59c8.roa
Signing time:             Fri 24 Jul 2026 15:51:35 +0000
ROA not before:           Fri 24 Jul 2026 15:51:35 +0000
ROA not after:            Thu 22 Oct 2026 15:51:35 +0000
asID:                     31898
IP address blocks:        149.26.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:4b:d3:53:b4:c0:b6:eb:64:73:40:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
        Validity
            Not Before: Jul 24 15:51:35 2026 GMT
            Not After : Oct 22 15:51:35 2026 GMT
        Subject: CN=59b839a0-a05f-42e8-bd08-c24ab4c6c131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:91:a1:4d:5a:4e:b9:02:4c:de:a0:a7:38:
                    e4:c8:a1:85:fd:ab:a6:4c:5d:70:b7:d6:83:5f:99:
                    1c:ca:04:ea:d6:bf:16:31:f4:de:d0:b6:bc:c4:a3:
                    f4:43:e9:7d:d5:01:72:d6:49:8c:d3:86:ce:7b:00:
                    6c:2e:a6:d1:91:29:89:54:a4:bc:da:c8:5e:6b:21:
                    f8:57:c8:29:cf:1c:f6:b0:48:a7:d8:47:fa:7b:3e:
                    2d:16:66:e0:15:ee:ac:e2:59:f2:2a:93:2e:d7:22:
                    c9:d6:26:94:d1:f5:b4:7c:7b:54:ea:f5:86:87:d4:
                    99:3f:00:74:59:44:84:81:4f:9e:d6:58:ee:fc:fa:
                    fd:21:9c:bc:dd:46:47:99:f9:6f:d0:3e:27:bd:3c:
                    ba:ba:c7:31:e9:f4:34:f9:a7:82:2f:e1:71:77:bd:
                    70:95:62:8a:83:05:70:94:5d:6d:87:c2:4f:86:7b:
                    eb:01:e7:df:58:4a:61:92:f8:22:31:6a:6d:26:1e:
                    66:49:76:ab:60:e1:15:86:98:ec:73:e2:38:88:83:
                    7a:06:10:0c:0d:e5:f8:1a:f3:86:ce:22:29:57:e9:
                    7f:52:9a:92:e3:bc:bf:2d:fb:f2:1a:88:1c:6b:f0:
                    8c:6f:8d:60:97:d6:42:ba:5f:ae:8f:37:6f:61:d9:
                    81:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:09:5A:B6:CF:47:FD:82:31:D5:5D:B4:44:1B:48:7C:85:18:2F:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/1a374771-b68f-3942-97f7-974f497d59c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl

            X509v3 Authority Key Identifier:
                keyid:2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.26.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:01:09:b5:d7:79:6c:7a:b8:a1:27:de:28:53:9d:47:59:78:
         6c:5d:6c:88:6a:07:39:46:91:e0:f4:36:24:3e:5d:e1:f0:a4:
         ee:2f:1e:5f:ae:08:73:6f:7c:76:b9:8b:84:9e:a1:a7:67:f4:
         60:6f:6a:ae:d8:9f:9c:89:a5:fb:5c:68:86:dc:30:38:f1:6d:
         e6:92:8a:b5:e8:03:46:fe:1d:ad:89:48:01:98:4f:bc:9c:5c:
         ec:b6:ff:bb:7b:ad:ea:fe:60:63:ff:e6:b1:25:4c:f1:a7:e7:
         12:0a:61:8a:28:c5:ab:a4:fa:4a:2c:16:de:37:1a:63:a9:8f:
         c6:d1:ba:67:97:af:cd:b2:d6:da:09:43:ac:e8:c8:68:8f:7c:
         95:0c:76:00:60:ea:de:1f:dc:b9:a1:3a:d4:ec:4a:6a:b4:80:
         92:21:15:84:12:c5:10:4b:c9:78:59:c8:52:0b:02:ee:2b:c1:
         3b:28:ca:7f:12:cf:4a:5d:62:3c:e9:4b:bf:dc:04:5a:d0:2e:
         91:94:b5:31:b5:39:30:60:cf:f6:8a:0a:b9:02:6d:ed:5e:04:
         65:1c:ca:73:d8:70:eb:ce:8b:9c:b5:d0:88:8a:92:e5:0b:7a:
         62:33:45:e3:8d:ab:c2:45:70:79:af:6e:4a:42:60:c9:7d:9e:
         00:b1:db:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:15:06 2026 by rpki-client