Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/180710eb-bdac-3840-bd5c-5d3ad5388c54.roa
File:                     180710eb-bdac-3840-bd5c-5d3ad5388c54.roa (raw, json)
Hash identifier:          ifmKmfq9EAhpUIHR22/AgzgZa1tsojxaPqAC+ytYgj8=
Subject key identifier:   C8:FD:67:3E:6C:09:25:0C:85:1C:0E:1C:DD:77:D6:DE:3F:2D:62:A3
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA7972CAAB946E669BB25EF80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/180710eb-bdac-3840-bd5c-5d3ad5388c54.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     852
IP address blocks:        207.34.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:2c:aa:b9:46:e6:69:bb:25:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5f51b254-5970-46df-899a-2a0996b7a6d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:85:57:49:66:fa:ae:91:10:59:66:83:db:30:
                    15:d9:29:fc:3b:72:e8:06:0d:22:52:6d:ba:9c:94:
                    74:35:e8:cb:03:23:89:3c:18:16:62:ad:4f:b4:b6:
                    52:79:0a:d7:68:36:97:f1:dd:99:f7:10:26:25:24:
                    d8:bb:24:db:f6:f5:7a:3e:aa:8e:d3:e8:a4:06:f6:
                    cf:84:91:cb:e7:48:66:bd:8d:e7:23:4b:0b:4e:1a:
                    63:da:92:d1:b1:a5:dd:d2:d1:e0:b6:bf:17:b1:da:
                    be:17:a5:ee:36:7c:a5:cc:5b:58:46:70:d9:5e:58:
                    bc:e9:cf:93:2f:cc:58:bc:2f:39:99:f5:21:2b:92:
                    68:59:75:12:da:84:b6:53:d7:b8:fd:46:9c:48:8f:
                    c0:8c:f6:66:c6:ea:4e:89:f7:61:7e:3b:7a:23:b0:
                    dd:dc:ba:21:d0:9c:a4:66:4f:ec:e1:05:59:e4:ea:
                    17:f7:a5:41:81:e9:7a:73:44:fd:dc:1a:a9:93:34:
                    8a:ef:f1:ec:90:24:12:4a:77:db:12:c3:71:2e:d1:
                    7e:5d:07:02:89:a4:eb:5b:1e:c6:71:45:3d:fa:45:
                    66:d2:e3:1d:a2:c1:f4:3c:7e:e5:eb:fb:2f:a0:77:
                    b5:0e:15:2b:01:9f:c4:c9:80:f2:84:1c:aa:4f:94:
                    d6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FD:67:3E:6C:09:25:0C:85:1C:0E:1C:DD:77:D6:DE:3F:2D:62:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/180710eb-bdac-3840-bd5c-5d3ad5388c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:7f:7d:ff:5c:df:c5:e8:8b:cc:c3:3a:a6:dc:69:01:5d:60:
         43:33:35:f9:86:2d:73:b5:ad:ef:48:59:f8:b1:95:a5:0a:02:
         c8:ae:1d:29:e6:96:b5:47:59:b8:9e:6d:b3:dc:24:4e:43:cb:
         b5:b0:f5:cf:fd:93:0e:33:87:bb:05:1e:bf:d1:08:3d:10:9f:
         55:b8:b8:d7:70:b5:09:73:f5:c0:98:c2:e2:ba:dd:83:e8:ca:
         60:a9:28:73:bc:4f:fe:b5:66:4a:30:8d:4d:b5:db:64:e9:4f:
         c2:46:4e:e2:a9:6e:11:1e:e9:ee:77:36:43:df:1a:02:64:ff:
         43:6d:11:43:e2:6c:ee:79:7b:34:25:89:6e:7d:b9:4b:60:4c:
         51:4f:2e:3c:84:00:08:be:ae:99:c4:ee:ce:c9:70:af:b5:d5:
         a1:25:20:14:25:be:06:26:ca:71:b4:a8:a0:70:4c:c5:2a:26:
         69:ea:4d:8c:a3:6e:42:87:8d:3e:fb:88:03:bb:59:c0:2c:11:
         33:cf:7a:b8:17:4f:7e:86:ed:51:b2:fb:dd:88:50:54:34:44:
         b0:d0:21:1c:06:b2:15:1c:25:0c:36:8f:54:d3:3b:ac:2b:51:
         93:7d:80:0c:5c:b5:8c:b6:0e:8a:bf:19:5a:5b:04:1d:e8:4b:
         13:02:b8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 08:42:41 2026 by rpki-client