Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d8250a82-42c8-3463-b657-35c42e18025c.roa
File:                     d8250a82-42c8-3463-b657-35c42e18025c.roa (raw, json)
Hash identifier:          i3T3PA5rRKDRL4CwwPsu/8AzCdeknSzUG4T093b0FWE=
Subject key identifier:   FB:38:50:0D:0F:B8:72:31:0C:F8:9F:31:FB:38:B7:8E:46:3B:63:62
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DF640A27670BE359BB148D540
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d8250a82-42c8-3463-b657-35c42e18025c.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     852
IP address blocks:        207.194.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:a2:76:70:be:35:9b:b1:48:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=5b752e35-fd7b-49e5-bd96-a9a458584947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:98:9a:fe:90:50:ca:88:d3:3d:ee:9d:c9:18:
                    5e:ad:d2:b3:a9:d8:b1:63:67:bf:3f:63:85:97:61:
                    29:c2:33:ed:39:ec:90:c8:9f:01:47:b1:8e:6f:a0:
                    5a:10:42:55:94:9f:16:33:c6:b0:63:5c:42:41:15:
                    51:13:7c:59:92:72:30:80:bc:a5:dc:e3:10:dc:77:
                    13:5e:c6:e5:54:e8:4b:97:10:9f:5a:b0:32:d9:30:
                    53:15:e2:54:8c:d3:f2:44:83:ce:07:3f:48:b6:2d:
                    bd:3e:80:86:70:35:27:8a:2b:36:e8:ba:61:ad:41:
                    fd:0b:0d:0e:cd:e8:0d:6d:fa:e3:fe:2c:e6:6f:41:
                    10:74:5c:14:66:99:4d:46:ea:0c:3e:e8:81:ac:7d:
                    ae:bd:04:ca:29:1a:ae:fd:9b:34:b9:59:2d:0e:25:
                    c2:68:18:16:5c:0e:16:ec:89:4a:71:d8:37:19:05:
                    30:1e:eb:53:db:52:fb:eb:6a:dc:d0:9f:e4:8e:6f:
                    c2:f7:2b:97:b7:bd:68:db:c1:e9:16:13:f8:08:65:
                    86:c6:0c:c7:47:34:bc:1d:b2:02:6a:3d:67:76:43:
                    5f:85:bc:e9:2d:cc:ed:a6:d5:95:29:8a:92:c6:dc:
                    a6:63:77:58:e3:5c:be:0a:b2:03:72:56:fd:b5:ce:
                    e9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:38:50:0D:0F:B8:72:31:0C:F8:9F:31:FB:38:B7:8E:46:3B:63:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d8250a82-42c8-3463-b657-35c42e18025c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.194.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:e9:ca:e0:1b:0d:ac:4a:ce:03:00:ec:a9:98:08:ec:7e:95:
         94:1f:58:db:05:84:af:9a:cb:2e:70:34:3d:7d:c5:23:c0:bc:
         ba:06:2c:4b:b6:b9:7f:2d:a4:5a:da:86:d3:85:0a:47:b3:3c:
         c9:8e:75:80:b1:73:15:78:36:77:83:89:5d:8c:27:72:62:ae:
         e5:79:e8:aa:a8:f6:eb:53:4c:0d:e2:fa:f8:63:72:f0:9f:28:
         e5:00:8c:85:c0:53:18:44:df:a7:6f:b6:03:8e:3a:69:35:97:
         ae:c1:c3:cf:a2:ad:a4:5a:53:88:d4:39:e1:35:32:59:d7:eb:
         ba:e5:27:62:85:67:e6:d1:8f:c1:9e:34:7c:c1:8b:53:3c:62:
         28:88:34:d1:08:3b:3c:9c:c6:61:e6:82:d3:f3:29:a5:91:37:
         94:e2:30:31:68:20:fb:61:af:58:91:73:f4:e0:f5:db:e6:80:
         f6:39:08:a3:c4:d0:9c:dc:ca:44:45:94:30:ed:0c:f0:56:e0:
         7f:60:f9:ed:c2:62:2b:a5:ce:b2:0e:c9:06:86:a7:9c:ca:91:
         30:a8:ec:5c:27:b8:0b:36:c2:23:dc:29:3c:1d:e7:c4:7b:7a:
         2d:40:47:f6:e3:64:8b:b2:f3:6d:11:be:a5:9c:70:fc:58:20:
         08:4a:91:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:51:30 2026 by rpki-client