Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/963208ad-1bda-38d8-9261-2903b02db328.roa
File:                     963208ad-1bda-38d8-9261-2903b02db328.roa (raw, json)
Hash identifier:          5n2sk3A+QpOZG0qy9Aeu2tJOFu2BKOSpF/mmq4S4ank=
Subject key identifier:   69:04:AC:6E:DF:99:B7:A9:26:2F:04:A2:23:D1:7F:4B:C8:19:E5:6C
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584D225F82E2BD3F27310B0A3600
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/963208ad-1bda-38d8-9261-2903b02db328.roa
Signing time:             Wed 11 Mar 2026 15:31:30 +0000
ROA not before:           Wed 11 Mar 2026 15:31:30 +0000
ROA not after:            Tue 09 Jun 2026 15:31:30 +0000
asID:                     16509
IP address blocks:        207.202.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:22:5f:82:e2:bd:3f:27:31:0b:0a:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Mar 11 15:31:30 2026 GMT
            Not After : Jun  9 15:31:30 2026 GMT
        Subject: CN=89d0f856-b759-424d-9fc6-e5da99a111db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:37:9f:14:d1:c6:56:05:70:69:0a:94:14:8e:
                    55:d2:3b:0d:1f:a9:b6:ba:b2:84:66:96:13:da:a7:
                    f2:34:0c:3f:2c:71:98:07:10:e6:80:0e:97:d0:33:
                    63:b8:1c:96:3b:94:75:e4:cd:92:06:c2:9f:c4:d1:
                    19:5e:8a:60:40:12:6d:d6:e3:bf:81:d5:1f:d0:ff:
                    58:9d:53:9c:2c:32:2e:ea:53:88:ef:5a:be:f2:a6:
                    c4:7f:10:cf:54:b9:47:46:cf:21:da:92:ea:98:2b:
                    11:ff:8a:8f:7b:0d:1d:13:66:83:87:d4:23:70:65:
                    4b:32:d2:7a:5a:0c:19:8e:53:88:90:ad:29:10:33:
                    66:59:ca:83:66:e5:22:e9:42:ce:4b:45:19:dd:89:
                    b0:c2:1e:0b:b8:64:7b:4e:d2:d5:f0:6d:23:bc:23:
                    e4:e8:8c:5c:a0:f6:fb:c5:05:d2:6d:7d:d1:b1:18:
                    0c:41:8e:59:08:6a:e9:cc:4a:b6:52:21:b3:bb:fe:
                    33:52:0d:89:3c:fe:39:76:50:50:98:3c:ba:04:8a:
                    54:7b:5f:cc:06:a0:36:2c:7a:57:a5:11:00:35:fb:
                    16:b8:87:6e:cb:c0:7d:2f:c0:68:8d:24:a4:36:23:
                    3f:23:00:05:fd:12:11:23:34:6f:fd:a2:f0:5c:10:
                    63:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:04:AC:6E:DF:99:B7:A9:26:2F:04:A2:23:D1:7F:4B:C8:19:E5:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/963208ad-1bda-38d8-9261-2903b02db328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:15:2f:43:5b:eb:af:fd:12:bc:3d:4a:60:37:6e:a2:82:4b:
         19:d5:35:24:d2:1a:38:c0:66:08:ac:d2:83:ca:7a:4e:e2:48:
         f8:0f:77:c7:b4:75:ea:a7:80:06:d1:cb:96:af:07:e4:f3:be:
         03:7e:3e:dd:57:e6:a2:e9:84:fe:0b:9f:5f:e7:11:e5:22:c5:
         d6:70:3a:18:29:67:3c:1b:86:32:92:82:83:f9:aa:ea:e9:e1:
         73:46:b3:e4:08:62:43:a9:9d:f2:c7:55:9c:31:8b:29:3c:fb:
         5f:09:b5:83:7b:d4:8a:06:83:32:6c:70:1e:59:17:90:e1:e1:
         23:93:4e:b0:13:03:94:ac:98:fa:74:e1:0c:3b:0b:86:dc:86:
         ec:cc:26:0a:b1:86:09:73:29:5d:3f:5a:03:75:33:a3:6f:fa:
         fe:fb:6f:2e:29:8d:d2:1f:8d:11:c8:85:0c:cf:b5:4a:cb:30:
         81:7d:06:3c:43:2a:24:82:ae:2f:4c:79:ce:a8:0e:26:05:df:
         60:60:db:e2:db:dc:56:fa:13:a8:48:09:6e:15:d9:b3:fc:75:
         54:14:fc:66:25:e5:cb:8b:21:e8:53:c7:1e:43:b1:35:09:6f:
         cc:3e:aa:2f:54:dc:32:09:ce:ec:3a:61:d2:ba:61:a2:67:13:
         fc:1f:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:31:08 2026 by rpki-client