Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/783949e5-7bd4-3752-a0e3-d9a4210145a5.roa
File:                     783949e5-7bd4-3752-a0e3-d9a4210145a5.roa (raw, json)
Hash identifier:          0ecvpovAkfEIBBdLxEI0rXMSppmSBMLtuhldGYLTxmI=
Subject key identifier:   22:1D:90:C6:4D:04:66:0C:6C:9E:54:7E:C8:EF:B0:76:57:96:04:8D
Certificate issuer:       /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
Certificate serial:       010D0C9F4328584CFB44AFA973929BBA839EAAC0
Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/783949e5-7bd4-3752-a0e3-d9a4210145a5.roa
Signing time:             Wed 25 Feb 2026 15:20:56 +0000
ROA not before:           Wed 25 Feb 2026 15:20:56 +0000
ROA not after:            Tue 26 May 2026 14:20:56 +0000
asID:                     141968
IP address blocks:        207.180.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:44:af:a9:73:92:9b:ba:83:9e:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
        Validity
            Not Before: Feb 25 15:20:56 2026 GMT
            Not After : May 26 14:20:56 2026 GMT
        Subject: CN=7e0891eb-5f15-4708-9ec2-e74360eccb8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2f:0c:df:a2:e8:2a:9b:9d:40:f5:5a:a6:71:
                    b7:7c:01:88:8b:3c:20:48:69:c5:3e:a9:b4:b0:a9:
                    37:b2:17:79:3a:0a:59:62:17:8a:77:a1:03:d5:ae:
                    79:8e:ea:f1:69:f7:8d:c8:2d:c0:c4:4e:0f:c1:c4:
                    59:d5:4f:cc:68:60:e8:98:5d:36:0a:a8:79:62:6c:
                    66:32:f6:f1:00:08:ea:02:54:eb:b8:13:83:e4:d6:
                    b5:fb:4b:ea:bb:e0:8f:f6:27:f3:63:7f:13:7e:cc:
                    f5:20:1f:4d:64:fe:c6:27:42:f4:ae:df:73:d7:a1:
                    3c:e0:a8:bc:e6:fa:a5:bf:b6:75:34:03:d0:83:5d:
                    72:20:13:fc:f8:2e:39:e3:55:25:c4:de:fb:73:e4:
                    0d:04:7e:96:1e:59:69:12:ef:22:23:c3:4c:4d:b1:
                    ca:35:1d:39:b1:d5:b7:41:a4:03:f9:ed:b0:fa:16:
                    1c:3b:54:3f:68:d2:0e:a3:3d:5f:e7:19:aa:08:8d:
                    12:3d:b3:9f:3d:d0:84:27:04:18:ee:96:9e:08:5e:
                    24:43:af:12:ee:08:19:cc:f3:48:1c:98:23:fb:59:
                    5e:d0:9d:19:6b:f1:8e:95:16:52:67:5b:46:d5:40:
                    87:67:73:9b:17:03:30:ac:fb:b1:40:58:1a:62:46:
                    e3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1D:90:C6:4D:04:66:0C:6C:9E:54:7E:C8:EF:B0:76:57:96:04:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/783949e5-7bd4-3752-a0e3-d9a4210145a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl

            X509v3 Authority Key Identifier:
                keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:58:40:ff:ea:08:ce:78:e9:bd:41:fd:07:ca:6d:75:72:97:
         5f:62:f2:e9:7c:66:cf:61:3c:9d:e6:02:70:61:95:1e:71:3f:
         54:e5:a3:d2:f4:c6:93:57:f7:da:31:15:d0:2f:e8:87:a7:b6:
         f1:7c:b0:ff:92:a2:6b:93:ab:90:bc:cd:ff:48:ec:6f:61:5a:
         98:42:2d:92:56:5b:a5:5c:e4:95:2e:be:bc:3b:ab:83:68:03:
         2a:02:cf:e1:5d:b7:8e:05:8d:47:ca:9c:9f:e8:81:88:d6:74:
         ba:f5:73:1b:92:74:8b:04:39:3e:d6:8c:09:4d:74:e3:4e:9d:
         64:90:b8:a9:d0:9b:7d:1b:ac:e0:c8:75:e7:6a:08:9d:bd:be:
         57:28:80:10:07:ae:7f:a1:65:69:1d:33:de:0a:8a:d6:c6:76:
         76:68:9f:7c:9c:91:b6:70:17:0d:a6:86:49:d8:08:7e:8d:bc:
         87:2e:35:01:73:b2:64:da:b8:a7:61:20:c1:27:5c:9a:f7:a8:
         75:ae:0b:72:d4:ba:f9:c5:7e:3a:dc:11:b5:80:8d:ec:8e:7c:
         6f:ff:d9:cc:b8:93:81:87:03:c3:37:72:4f:fc:71:78:86:e1:
         de:c7:f8:c1:81:21:a1:47:ef:94:4a:dd:83:30:83:54:dd:9d:
         f3:75:50:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:26:25 2026 by rpki-client