Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/af367bec-3686-3a36-9b2d-e8f915a5ed4c.roa
File:                     af367bec-3686-3a36-9b2d-e8f915a5ed4c.roa (raw, json)
Hash identifier:          JbfBxMKJrbT6U+HvrnF1bpSrliA4/woIOSPTyO7Y37c=
Subject key identifier:   E8:69:04:E9:20:41:C5:13:1B:D4:80:53:94:13:5A:BC:AB:45:32:E3
Certificate issuer:       /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Certificate serial:       010D0C9F4328584E66DA18064383352F71406800
Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/af367bec-3686-3a36-9b2d-e8f915a5ed4c.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     270764
IP address blocks:        172.84.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:18:06:43:83:35:2f:71:40:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=acee529f-e7b2-4e51-8265-acdc95005ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ec:41:c6:c6:e9:8a:a4:fc:31:9e:c1:db:9b:
                    1f:94:25:e8:9c:4e:03:4f:a5:e8:f9:4b:0d:e1:ee:
                    18:f7:90:86:45:d5:41:77:05:6f:2f:62:cb:da:61:
                    69:bb:c7:0a:36:a7:9d:18:32:fc:70:b5:c6:fe:b9:
                    3a:6a:9d:92:68:7b:a4:f5:4e:4c:b5:e9:f9:63:76:
                    f0:81:0c:e0:4e:ff:de:e3:16:87:a4:92:f6:97:c1:
                    47:7c:51:03:63:fe:f5:27:7d:9c:b9:14:7b:00:9c:
                    a4:25:03:eb:4f:7e:33:df:44:cb:ec:ad:e0:d5:c3:
                    b8:fb:fd:89:49:07:d9:57:e7:07:b6:44:51:0c:da:
                    73:ec:b2:e3:ae:49:55:ee:0a:60:b6:13:0e:e6:f1:
                    d0:2b:cc:ce:f4:0c:b0:ca:fe:b4:ac:7f:c9:57:62:
                    09:e3:46:ae:5d:f4:ea:a8:a9:c0:f4:9d:36:f1:64:
                    89:95:b6:46:f1:6e:87:0f:db:1a:9d:ed:d4:b8:f7:
                    5e:80:46:f0:3c:0e:d8:e3:53:ef:fb:7f:01:a5:3c:
                    9d:78:2d:95:9b:71:25:4b:18:de:22:37:da:8f:4a:
                    ab:9a:5f:27:d6:74:29:81:48:59:f6:9e:5d:1d:9f:
                    f3:15:12:b1:44:08:2e:4a:fa:32:e4:de:59:dd:36:
                    55:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:69:04:E9:20:41:C5:13:1B:D4:80:53:94:13:5A:BC:AB:45:32:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/af367bec-3686-3a36-9b2d-e8f915a5ed4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl

            X509v3 Authority Key Identifier:
                keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:b8:31:a4:17:2d:f8:31:be:fb:b0:36:dd:2d:aa:85:65:6b:
         28:fb:8e:3b:2a:09:69:83:74:2a:ee:34:df:ae:9d:27:02:08:
         14:89:5d:5f:0c:05:66:db:2f:94:d7:d3:56:3b:e2:d6:0a:77:
         d9:cd:d5:11:80:27:7d:76:ad:42:d6:c8:57:bb:ab:d4:67:af:
         67:ba:9b:19:76:cc:36:35:3f:b6:1b:76:01:54:4a:6a:ae:97:
         ea:c5:e1:db:16:3d:0d:4e:e9:86:da:b4:24:47:69:c9:c7:ad:
         2b:12:f3:c2:6f:2e:4a:db:10:77:3d:d3:4b:17:38:46:82:c2:
         6e:8c:61:15:b2:a1:46:0f:6b:d1:37:c3:6e:04:12:0b:14:42:
         45:56:2c:e4:28:d6:16:78:a1:69:90:98:b3:a6:bc:a5:76:1e:
         1b:13:5f:60:b6:a6:83:04:62:71:a9:88:9a:2b:53:86:0c:cf:
         36:75:5c:1b:52:e6:d8:bd:f3:48:df:35:a5:58:4f:6f:87:89:
         cf:b0:60:78:63:be:48:b8:ca:e0:07:fa:fc:18:2d:40:dd:a4:
         9e:fb:f3:e2:b8:e6:7c:b5:5d:b8:37:e9:ca:ac:b2:4e:33:89:
         b0:ee:b5:bd:8a:c1:3b:00:39:c4:cf:ea:47:62:ee:f2:d1:f3:
         a9:2e:60:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:35:59 2026 by rpki-client