Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/30079a91-fb5d-3424-8f27-0f729eb213ef.roa
File:                     30079a91-fb5d-3424-8f27-0f729eb213ef.roa (raw, json)
Hash identifier:          0MVrrTZ/M5+xk2mxF40yqCK3hDd0I5LuvHm1rMruiRE=
Subject key identifier:   89:6E:6D:64:C6:7F:E9:98:4E:64:EA:B7:65:A3:72:4E:80:5C:F4:1F
Certificate issuer:       /CN=7ec658ee-f1e4-45ca-b167-d7f1ddec24e6
Certificate serial:       010D0C9F4328584D0EA7A6A8D6E7138941210840
Authority key identifier: 7E:84:9B:E3:FB:3E:6B:AC:C9:E0:F1:FC:4E:FF:81:7C:3E:54:BF:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/30079a91-fb5d-3424-8f27-0f729eb213ef.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     0
IP address blocks:        149.112.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:a6:a8:d6:e7:13:89:41:21:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec658ee-f1e4-45ca-b167-d7f1ddec24e6
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=07feff2d-6696-4fcb-b3da-2f46f89ad144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:9a:40:fd:ba:46:88:df:b4:cb:0d:7e:7b:
                    df:d7:50:19:b7:65:22:3c:11:dd:95:a5:a5:16:8e:
                    a8:61:8c:c4:08:c4:bc:a1:0d:65:92:d8:25:3e:19:
                    1a:c3:de:6e:bf:f2:9b:b5:4e:b5:30:aa:c8:3b:f2:
                    d5:03:b2:7b:7e:b5:cd:ce:b9:82:74:a9:a9:d2:2d:
                    97:40:ee:8f:52:d7:6a:5f:72:4b:7e:cf:b5:db:31:
                    0e:73:2b:1c:27:54:23:06:93:0f:9c:b7:45:67:67:
                    8f:a0:4f:b4:79:88:07:89:14:a8:61:86:42:f2:51:
                    aa:eb:61:75:16:da:0d:d6:f0:19:6a:a4:b1:25:16:
                    f8:09:84:5c:45:45:60:50:d9:d5:93:4e:35:15:f0:
                    76:5b:b6:50:ce:86:ac:4e:3c:cb:96:2b:37:24:58:
                    78:fa:c4:6a:e0:e2:6f:03:20:17:4a:d3:7c:33:6b:
                    3a:04:6b:ef:e9:7d:98:35:a2:09:0a:7d:42:0b:e4:
                    5e:e5:9b:38:57:5a:22:9e:75:7a:42:36:01:8e:1f:
                    bd:49:0d:79:ba:b8:d6:c5:e4:31:c6:7c:89:85:cc:
                    38:1c:f8:81:96:56:a7:88:c4:4b:92:12:85:9c:46:
                    31:96:6e:55:29:dc:e0:0a:a1:fa:e5:5b:a0:59:f1:
                    57:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6E:6D:64:C6:7F:E9:98:4E:64:EA:B7:65:A3:72:4E:80:5C:F4:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/30079a91-fb5d-3424-8f27-0f729eb213ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.crl

            X509v3 Authority Key Identifier:
                keyid:7E:84:9B:E3:FB:3E:6B:AC:C9:E0:F1:FC:4E:FF:81:7C:3E:54:BF:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9d:d7:0b:99:e4:6c:ca:37:79:2f:bc:73:2d:f6:71:45:f6:
         74:10:5b:ee:d8:a9:46:bd:7d:ed:fc:40:0c:a3:f9:ff:93:01:
         fd:4b:33:ad:bc:1f:8d:ca:84:7c:c9:da:b2:9b:77:76:73:59:
         7f:60:1f:82:47:0f:a3:61:fe:d2:3e:27:5e:2d:e3:b9:44:a2:
         6e:b1:09:b5:d7:da:a6:9e:a4:8a:a3:a0:49:6d:6e:90:23:f0:
         61:af:e5:ae:16:47:61:68:b0:1d:c9:e4:94:08:a9:8e:2a:42:
         91:06:de:6d:c2:bf:69:29:4d:0a:04:96:49:eb:41:f4:0f:94:
         bd:13:89:12:1d:b3:57:45:84:49:e0:7a:d0:8e:ef:8a:7a:14:
         b0:01:59:ab:24:d3:32:4b:a7:81:07:b7:a0:1a:51:48:94:d4:
         92:ec:2a:33:e2:58:33:40:9e:51:63:2e:76:b4:92:76:72:7e:
         a9:ea:3a:0c:39:bc:43:aa:07:e9:3e:29:aa:4a:2b:45:85:28:
         ac:7f:85:d1:38:31:87:02:ed:90:8b:20:11:f3:b9:5f:12:1a:
         ea:a0:cd:09:ad:78:69:f9:d5:09:26:0a:4b:05:31:04:71:f6:
         ff:bb:e2:9f:32:40:01:e7:91:da:a2:22:2b:2d:41:2e:e4:f6:
         be:18:71:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 00:57:02 2026 by rpki-client