Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/31daf6b7-f6d3-3a2e-976f-038ddc9bb531.roa
File:                     31daf6b7-f6d3-3a2e-976f-038ddc9bb531.roa (raw, json)
Hash identifier:          eyRNWblqKFT4IGrUj/7BiWzhWlnKXKpydgrfzWOcSKk=
Subject key identifier:   09:EF:A0:8B:A6:5B:BC:53:72:98:10:D1:94:1C:F9:6D:A4:5D:5F:CE
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584D0D4250C1DA0C1E17B0E05280
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/31daf6b7-f6d3-3a2e-976f-038ddc9bb531.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     26722
IP address blocks:        207.54.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:50:c1:da:0c:1e:17:b0:e0:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=69eb64c8-0fa4-48ab-8c33-8e8af6139977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:df:91:c4:f6:45:0f:72:cb:11:74:90:98:3b:
                    6f:97:aa:b8:fd:88:c6:50:c2:b5:a2:d5:5c:f2:d8:
                    64:24:de:3d:98:cb:7d:f3:c8:ec:b4:ce:c2:2a:36:
                    14:71:e2:e7:46:93:01:01:8b:49:11:9b:20:49:10:
                    bf:62:b9:09:6c:5d:4e:fa:cd:d5:87:ed:b6:8f:ae:
                    c9:11:f7:c9:0d:29:95:da:5c:0f:2d:20:fb:ce:1f:
                    7d:4e:5a:09:3c:46:cc:b3:97:01:03:b5:68:41:28:
                    b7:3e:b4:71:9f:5f:38:69:c2:1e:63:f9:43:19:b6:
                    88:2d:e5:ed:fa:55:c4:78:fc:99:7b:b4:d2:ab:e4:
                    3b:f0:e7:67:87:9a:be:94:35:b9:b5:19:0e:46:2f:
                    f4:5c:7b:7f:bb:d3:b3:d0:05:a8:13:40:63:5b:8e:
                    4d:dd:2f:c4:37:28:42:9d:4a:9f:71:d1:40:04:12:
                    37:c0:1c:16:be:c6:e6:c4:24:9b:73:ff:65:a8:ee:
                    b2:2e:b1:c6:b1:d4:58:92:f6:17:85:c3:8a:9f:07:
                    10:f9:fb:cd:78:97:e9:f6:37:3e:08:16:ab:f3:d8:
                    79:ca:f0:21:79:0a:5c:49:82:7b:fe:7e:34:db:2f:
                    f9:62:64:72:a0:21:f3:95:9b:14:48:76:16:fd:5e:
                    7c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EF:A0:8B:A6:5B:BC:53:72:98:10:D1:94:1C:F9:6D:A4:5D:5F:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/31daf6b7-f6d3-3a2e-976f-038ddc9bb531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:68:ba:59:31:cf:26:0f:e2:52:6b:cc:48:21:bd:82:34:30:
         80:97:bd:00:ca:d7:ea:55:2c:b8:93:59:14:f4:9c:8a:1e:2c:
         38:5c:19:19:02:b8:ac:26:69:f0:93:68:e9:62:40:07:12:a3:
         8f:70:50:c5:26:50:22:8f:44:25:94:68:91:13:4e:70:e5:8c:
         92:03:56:db:f5:4c:29:87:46:4c:4f:e2:4e:0d:87:9b:85:73:
         92:d1:2a:a0:2c:15:e0:30:26:cb:08:88:81:c9:be:15:c3:42:
         c7:c8:74:66:f4:24:d8:fb:db:68:14:cd:d0:3f:73:36:49:99:
         fa:a3:36:37:ed:b8:45:d8:07:2e:8f:b5:a6:aa:d7:e9:5f:29:
         eb:ce:50:60:f2:c6:2a:6c:e5:ae:f0:83:12:3f:96:e9:1e:5f:
         12:f1:8f:3e:97:33:43:39:ea:4f:e1:cc:8d:14:5f:30:e7:52:
         85:69:2d:71:bf:5b:f3:c3:66:9c:e9:bd:c6:1f:02:bc:3d:e6:
         77:9e:06:a5:be:d7:47:7d:54:03:58:b2:c5:fb:4c:e4:f8:1d:
         8e:08:91:26:96:00:fa:b6:2e:81:76:e3:1c:74:73:08:b6:5d:
         90:65:7e:42:f6:17:d6:52:a7:6b:c1:ee:ee:dd:2f:ac:43:bc:
         38:11:c2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:16:42 2026 by rpki-client