Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa
File:                     bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa (raw, json)
Hash identifier:          ZXMw5M9q1qOZ6jSTebEUZoMh3MOO0v/BnHK5YrIc5A4=
Subject key identifier:   56:9E:23:4D:48:87:AE:C3:C4:D2:94:79:9F:A0:1F:B6:72:DD:67:37
Certificate issuer:       /CN=0942cd1e-1350-41d5-a14e-51bddb52c336
Certificate serial:       010D0C9F4328584EA798B31D808AC0C76F2ED2C0
Authority key identifier: 5A:C7:58:9A:CA:A2:C9:1B:EE:76:CD:53:D6:2E:A3:69:1B:10:32:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26157
IP address blocks:        207.174.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:b3:1d:80:8a:c0:c7:6f:2e:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0942cd1e-1350-41d5-a14e-51bddb52c336
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0ec4acb6-dfcf-4b6c-90cf-5aa7c0ffa837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:62:31:3b:40:03:fd:71:38:b7:07:ee:3e:47:
                    02:fd:4d:18:db:1f:14:ea:ed:14:95:b2:85:20:bb:
                    ae:15:6b:3a:9e:b0:87:8b:81:0d:45:2e:29:3c:25:
                    a1:92:66:53:26:48:fd:41:8c:55:85:a1:fd:39:e4:
                    3d:8b:3a:eb:76:39:2b:83:77:3d:0e:4c:ac:20:7b:
                    6e:0d:a9:d8:c9:36:6d:64:d2:c4:db:51:76:ca:fa:
                    1f:38:bc:fc:79:b4:b9:15:10:59:66:57:4d:0e:e5:
                    66:c8:bf:50:91:1d:af:63:13:21:f3:d2:8d:0f:3f:
                    34:af:f7:ff:e7:9a:48:24:30:22:d2:76:82:72:f8:
                    4d:c8:2d:8a:1a:75:a7:ab:c4:d2:06:4c:0c:05:18:
                    5c:09:10:5f:96:7f:64:59:2e:1f:be:e9:4f:02:26:
                    cc:fb:71:ce:b6:05:f0:b7:98:ce:a0:3b:21:10:e8:
                    b2:e5:0a:f5:42:b6:f9:6c:58:74:12:18:c8:7a:41:
                    44:54:5c:2b:fd:d4:2c:0d:73:74:19:b9:c1:1d:d7:
                    3b:1f:12:5a:d9:83:b9:1a:1b:11:e9:93:e5:c6:6c:
                    87:a9:71:3f:d9:1a:a9:20:ea:e7:94:6a:08:db:cc:
                    53:78:21:e3:72:4f:c3:72:3f:78:98:3f:8c:9e:ae:
                    3b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9E:23:4D:48:87:AE:C3:C4:D2:94:79:9F:A0:1F:B6:72:DD:67:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/bca5aa20-0ab9-3315-8d97-f2ed503368a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.crl

            X509v3 Authority Key Identifier:
                keyid:5A:C7:58:9A:CA:A2:C9:1B:EE:76:CD:53:D6:2E:A3:69:1B:10:32:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:11:a3:52:76:c6:17:e2:b3:23:eb:44:6d:4a:59:62:d4:2a:
         95:a4:2e:fc:6e:83:e4:6b:56:9e:8e:b8:76:f5:77:75:aa:bf:
         af:9e:2d:30:63:5c:c2:c6:99:bc:5e:2c:3b:29:c6:19:f4:01:
         b9:1b:d3:a4:c2:03:e5:e3:35:36:00:1e:f5:cc:97:b8:4b:fa:
         de:92:b4:19:d9:b9:72:bb:0c:09:96:d6:b1:f7:a2:bf:40:59:
         6c:50:7d:bd:fa:2d:d0:fb:bf:11:13:77:f6:6d:ac:5e:7f:04:
         a6:03:a2:87:4b:64:b9:08:8d:77:5b:2c:27:9f:9a:56:dd:0f:
         78:a4:1c:3c:f9:18:0f:33:3f:03:12:f6:79:20:70:35:a0:d4:
         17:bc:78:78:20:9d:c8:60:9b:40:43:1e:8d:3a:4d:d0:4b:5b:
         6a:42:36:c2:6f:ad:9e:4f:c6:79:71:40:be:d4:d7:03:09:d5:
         08:7a:5a:45:ec:af:cb:68:b4:8e:3b:96:fb:21:74:a3:7b:61:
         52:fb:88:e6:98:40:f0:7f:36:37:8c:bb:a3:5c:9e:77:7d:dc:
         fb:3a:95:6e:a2:64:05:b5:d8:68:5b:61:97:27:64:e1:b6:d3:
         36:a3:c3:b3:49:c4:6c:e6:ec:8d:00:86:d0:53:df:b6:2f:cb:
         c0:08:55:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:08:19 2026 by rpki-client