Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/90c7e3a0-a2d1-34bb-ba48-84c378895cd4.roa
File:                     90c7e3a0-a2d1-34bb-ba48-84c378895cd4.roa (raw, json)
Hash identifier:          UxOKkb9jSI9p8+OulnIutCXHwITW74FawmxdLQaDV1g=
Subject key identifier:   8C:46:81:45:BB:92:90:B5:AA:C7:71:C7:37:9E:F6:08:DF:F5:6E:60
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D0D424E2A4FC5AFEAF116F680
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/90c7e3a0-a2d1-34bb-ba48-84c378895cd4.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     15247
IP address blocks:        207.34.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:4e:2a:4f:c5:af:ea:f1:16:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=5bb574da-be97-41bb-9773-b9fcae613630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:50:d5:20:2a:d4:8f:b1:7b:8c:ea:07:d4:9c:
                    11:1a:d1:e9:8c:e3:54:8e:a0:0a:95:ff:59:d2:3b:
                    7a:41:1e:85:5e:a0:6b:70:b8:3c:31:17:2d:14:7c:
                    c5:84:42:a4:4f:d3:2c:00:78:82:31:b9:b5:81:f0:
                    a4:a7:a9:74:6b:2b:cd:40:9b:c8:dc:34:b0:02:27:
                    40:8a:e3:c7:63:f4:56:06:d5:fb:37:ee:b4:fd:b6:
                    b5:6e:b3:4f:81:b6:92:dc:1b:cd:99:8a:2a:33:e5:
                    1a:2d:26:86:b4:88:f8:b6:29:d9:6a:21:8e:50:9f:
                    4b:40:ea:7f:e0:81:a6:5f:d1:af:6a:7b:4f:00:58:
                    d3:26:3d:21:be:bf:32:61:97:e4:f8:7d:67:f4:b5:
                    a3:66:c7:7b:38:d0:85:3f:9c:1a:ce:f6:2c:ff:d8:
                    90:49:ec:d0:49:63:77:42:0d:5f:9a:ed:43:58:a8:
                    90:a5:83:d9:74:f6:ba:17:7d:d1:9b:a9:f6:0c:05:
                    a5:93:2f:85:3f:aa:d3:b6:67:ce:c9:9b:ee:b1:80:
                    13:17:7b:6e:6a:f3:a2:0a:9d:bc:b3:0e:4c:5e:8d:
                    36:df:7d:43:db:5c:00:e7:9a:ad:81:a4:46:ea:52:
                    5b:d6:f7:62:cc:9c:9e:6f:76:62:81:a8:ad:fc:1a:
                    25:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:46:81:45:BB:92:90:B5:AA:C7:71:C7:37:9E:F6:08:DF:F5:6E:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/90c7e3a0-a2d1-34bb-ba48-84c378895cd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:11:d2:4e:cd:b0:04:42:bb:42:dd:96:a5:82:4a:86:59:96:
         b7:7d:84:4b:5b:6b:8e:c4:90:fb:db:bb:96:df:ea:3d:88:9d:
         15:31:e6:dc:68:63:a0:ab:0d:cb:96:91:aa:be:b5:c8:ef:95:
         36:7a:c6:24:69:3b:7b:bb:d0:dd:40:32:4f:18:34:63:2a:ae:
         da:72:4d:41:29:e7:8a:e7:f2:9e:c4:06:7b:3f:90:72:41:9c:
         42:97:53:cc:15:6d:49:26:8b:f1:1f:2c:eb:c3:64:97:c0:db:
         43:65:b7:b7:19:2a:5c:5e:18:45:9b:c8:3f:a8:b0:ef:85:77:
         50:ec:ee:a6:ff:9c:42:4c:81:5e:bf:4d:cc:3f:d8:5b:12:70:
         0e:5c:90:d0:7e:25:a3:1d:9f:bb:b7:79:6c:d2:5e:e2:b2:84:
         72:da:53:30:4b:d6:13:68:b7:ba:2a:f2:86:70:ba:c1:7b:1c:
         51:e8:78:3b:38:25:ad:c7:09:08:0a:34:01:9b:1b:67:3c:02:
         84:03:0d:b7:4a:2f:6d:a4:3a:15:21:18:02:0c:6b:96:10:61:
         5e:b6:4e:7a:c7:48:74:41:05:4e:bb:8f:06:16:df:41:d0:91:
         d3:1a:b4:07:0f:a4:04:01:09:59:27:f4:8d:b0:95:a2:cd:13:
         79:1d:66:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:54:16 2026 by rpki-client