Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7bf96e67-c2fb-3e4f-a4d2-3fdc81859287.roa
File:                     7bf96e67-c2fb-3e4f-a4d2-3fdc81859287.roa (raw, json)
Hash identifier:          zDE0LLLB93oZzza3uzRg4E9lzpn4T4islcrZ1eycsbU=
Subject key identifier:   72:12:EF:A6:FE:CC:52:97:27:41:67:6D:75:16:52:45:79:53:E4:DC
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584F4984FFB25375FF4A6C696F40
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7bf96e67-c2fb-3e4f-a4d2-3fdc81859287.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        207.126.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:ff:b2:53:75:ff:4a:6c:69:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b7d9a5a6-8ede-4dc4-bcdf-ad6f4197edb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:98:11:8c:c2:d1:73:36:3f:6c:28:77:4d:
                    a2:b2:03:ca:2b:24:bb:e1:24:16:46:85:77:ce:e8:
                    14:43:a8:bc:a0:aa:4d:cf:c3:94:85:4c:ec:84:2b:
                    62:b6:7f:be:5a:99:3d:94:16:0d:4a:56:60:66:69:
                    26:30:66:cc:fa:3d:cf:67:95:18:1c:d3:c3:6c:7c:
                    04:8a:b9:29:74:c0:cb:17:5f:4e:51:0d:e0:8d:40:
                    ad:54:13:0e:0d:4c:7f:33:c4:fc:33:70:77:da:d6:
                    00:f6:4f:d2:58:87:f6:a5:8a:65:6a:5c:44:b0:4a:
                    73:74:7a:ce:f4:b4:28:9c:44:43:61:80:12:09:44:
                    f8:b8:8b:cf:3d:26:49:93:f1:23:4b:43:3d:db:5e:
                    9c:e4:d8:ba:0a:66:c2:66:40:f0:9c:b3:78:f3:31:
                    0e:f1:a9:d4:ec:17:8d:98:ba:8b:12:ba:6a:db:74:
                    07:40:85:8a:d7:8a:62:44:83:5e:de:7d:4f:d4:a9:
                    43:cf:0c:c9:5c:e2:9e:20:7e:93:16:ec:10:72:fb:
                    d5:83:ba:dd:da:9b:ca:7a:6d:e7:52:08:37:ea:e6:
                    a5:6f:59:e4:82:c6:24:d2:c6:ab:d6:0d:a4:91:7e:
                    dd:d5:9e:e0:84:22:e8:1b:63:a3:63:ce:4c:de:d1:
                    c8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:12:EF:A6:FE:CC:52:97:27:41:67:6D:75:16:52:45:79:53:E4:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7bf96e67-c2fb-3e4f-a4d2-3fdc81859287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:d6:54:e4:12:68:e7:9b:37:a2:cd:c1:4d:2e:05:1e:5c:df:
         54:46:0e:85:9c:bd:83:d1:7d:af:c7:c6:88:c5:e0:9f:7c:2f:
         b0:f5:96:2f:64:33:3c:f2:32:ae:34:c9:8c:b8:1a:3d:e5:cd:
         a9:06:64:2b:8f:9e:35:8a:f2:00:07:73:90:f5:aa:00:8d:28:
         71:bc:49:36:4e:5e:ca:47:d2:7e:55:7d:d1:cc:d7:c6:2e:92:
         42:7c:39:0b:b6:92:42:9e:93:15:9c:5a:96:29:20:0f:e4:8e:
         50:83:ea:b0:c4:17:8e:6b:88:1c:13:6e:c4:17:53:80:b2:2b:
         1b:f6:7a:fa:cb:57:81:db:7b:fb:06:64:6a:ed:71:8c:38:19:
         83:17:9a:fc:ac:af:5b:2c:a3:13:f1:fa:d6:a5:6e:6a:cd:09:
         37:f6:bd:65:a0:4b:6f:d4:a7:87:26:d0:a9:e6:09:8f:dd:6b:
         e9:89:46:e8:1a:53:1d:fb:69:78:58:f8:d3:8a:00:09:0d:fe:
         69:51:76:85:1d:f5:2c:c8:e1:96:cb:85:fe:6a:90:cb:0b:56:
         54:a0:1d:d8:1f:d9:f8:0b:9e:94:57:cb:88:7b:03:80:b5:24:
         6a:9d:6b:0c:2a:07:a0:10:79:85:31:21:1b:e5:e4:d9:3d:42:
         54:3b:45:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:04:24 2026 by rpki-client