Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7f226e08-db2b-39d7-873d-220605812b85.roa
File:                     7f226e08-db2b-39d7-873d-220605812b85.roa (raw, json)
Hash identifier:          MC+c9WSENXXa6M5FpiTSCjvA787Ur7kboD8DBVhHCEg=
Subject key identifier:   B9:A9:F8:AA:0A:E1:9D:6A:75:04:F1:A2:95:2C:49:F5:46:F8:C3:84
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CB81C979C4DC29D95E43D9C40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7f226e08-db2b-39d7-873d-220605812b85.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     31898
IP address blocks:        207.135.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:97:9c:4d:c2:9d:95:e4:3d:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=63801138-dca6-46a5-bd3e-f39c9522bf42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:61:e9:05:6c:d6:fa:fe:b7:ab:dd:39:a1:f6:
                    72:6b:02:61:28:3b:84:29:ab:f7:9b:b2:51:33:e8:
                    ab:df:4a:51:38:59:80:5e:67:f9:8f:31:6b:fc:c1:
                    0c:56:69:22:5c:84:b8:d9:44:09:37:88:2f:f2:6c:
                    75:53:73:86:78:eb:24:ef:32:9e:a1:65:73:c2:d3:
                    d2:60:18:be:18:c9:47:0d:9a:0b:a5:89:43:88:0a:
                    c4:48:84:9d:fc:06:62:ea:6e:a8:f0:c6:95:be:74:
                    43:76:89:fe:a7:3c:9c:0b:55:74:f8:6f:9c:41:6c:
                    c0:fa:02:5c:3a:e7:b8:ab:fa:be:9e:d8:9d:17:73:
                    d5:0c:6f:28:a5:f9:3b:56:2a:fa:cf:29:5e:83:15:
                    c2:02:41:2d:61:a9:fc:e2:d8:2a:0c:53:15:a9:95:
                    80:d4:73:6b:65:e7:15:f1:44:ae:ff:c8:40:d2:95:
                    60:88:93:bc:b5:5b:02:7e:81:ea:a2:14:47:0b:44:
                    21:b0:c0:91:be:4a:95:57:17:96:de:3b:09:d4:97:
                    a7:a5:65:ad:1a:b2:b5:b0:6b:86:63:aa:c7:c6:5a:
                    d8:9a:25:6e:ea:04:c7:2b:5e:9f:9c:db:0c:35:9e:
                    97:6c:63:d9:3c:80:73:57:a7:05:f2:64:a9:5c:ff:
                    5c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A9:F8:AA:0A:E1:9D:6A:75:04:F1:A2:95:2C:49:F5:46:F8:C3:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7f226e08-db2b-39d7-873d-220605812b85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.135.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:4b:f1:17:00:f2:15:7e:2c:9c:c3:f3:f9:c0:39:c1:4c:8f:
         90:ad:80:6d:eb:07:60:d8:0b:25:54:f6:87:2e:9b:50:d9:b8:
         27:53:5d:da:76:dd:da:aa:d6:8d:e6:f7:c7:a1:73:1b:58:b5:
         7c:97:0b:d6:84:cb:29:65:38:57:d1:bf:d9:ba:4f:9e:86:03:
         45:ca:58:0c:1a:f9:6a:6b:30:0f:93:3a:75:9b:ca:75:20:b8:
         be:2e:aa:8e:c0:f9:8b:99:a1:02:ce:52:16:00:d2:40:80:73:
         97:47:ce:7d:44:29:e1:8d:a5:27:fb:a8:e6:08:55:5d:10:ab:
         31:5e:75:9f:7b:1e:f9:16:9b:07:d8:8d:22:fc:1b:0c:7e:ab:
         db:89:d0:81:17:78:4a:af:96:48:21:d1:0c:6e:87:74:dd:79:
         60:10:d7:40:68:13:27:17:90:e3:b1:c9:6b:7c:36:3d:9a:de:
         37:1c:d4:7a:30:e0:49:e6:09:0c:2c:db:b7:ea:f6:99:45:0c:
         36:e2:be:00:5a:f8:98:0c:1c:30:9a:be:38:60:2d:77:e8:f3:
         0a:80:f5:53:77:d4:5f:9e:b7:68:7c:aa:e1:7f:c1:3d:42:dd:
         47:fb:a3:c1:87:3e:f9:d8:08:2a:48:e3:78:38:61:a7:3a:c1:
         e4:5e:4b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:38 2026 by rpki-client