Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/74abb825-6751-3f34-9f0c-a033ce95f33c.roa
File:                     74abb825-6751-3f34-9f0c-a033ce95f33c.roa (raw, json)
Hash identifier:          KVhpaj9b7P5DaIueWsn62xULJseydqGZCydMPVLMwfg=
Subject key identifier:   85:5B:2E:55:41:43:4D:3C:BF:36:DD:B3:26:7D:88:18:B7:FF:1A:55
Certificate issuer:       /CN=c0737391-61e0-4d30-9aa1-7caa06980033
Certificate serial:       010D0C9F4328584EA788053622F9ABCFE7B82E80
Authority key identifier: 4E:F8:70:1B:25:5E:DC:B1:EC:18:C3:8E:C4:C3:EA:40:5D:51:63:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/74abb825-6751-3f34-9f0c-a033ce95f33c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30136
IP address blocks:        204.228.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/c0737391-61e0-4d30-9aa1-7caa06980033.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/c0737391-61e0-4d30-9aa1-7caa06980033.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:05:36:22:f9:ab:cf:e7:b8:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0737391-61e0-4d30-9aa1-7caa06980033
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=94b8dc7d-a9c9-415d-9cf8-61b378d18e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ab:8e:9b:61:59:38:87:6e:a4:64:af:de:cd:
                    87:05:93:bf:c6:98:09:35:b4:bd:1a:6c:78:db:03:
                    b4:15:08:f2:44:f1:89:13:f9:dd:fa:1a:f2:72:f0:
                    4c:b9:04:ab:17:48:fd:b0:4e:09:86:4b:77:05:2d:
                    a8:53:0e:23:d5:5d:3d:5d:ef:c2:71:fd:db:7b:f5:
                    a8:06:74:da:8d:f5:fd:37:fd:19:3e:ad:b9:e5:1e:
                    75:70:30:83:e7:7b:de:27:50:a4:8f:56:e8:1d:13:
                    63:4c:ce:d5:29:0c:2e:f0:10:63:bf:ff:26:15:6b:
                    ea:80:21:c9:aa:bc:1c:56:3e:eb:b3:bc:7a:cf:66:
                    4d:44:2c:d9:17:75:87:8d:6d:7e:03:71:d9:b4:a6:
                    12:4c:d2:7a:76:81:6b:75:07:75:ae:08:96:a8:63:
                    84:de:a3:56:d7:61:6d:73:4d:73:d9:ce:9f:76:17:
                    69:fe:2b:52:ab:b8:e2:10:23:65:fa:c9:eb:5e:67:
                    d1:ad:e6:77:6f:4c:21:6b:23:dc:4d:a1:80:e5:46:
                    0c:34:00:f2:f8:20:13:ea:c1:97:f6:54:8b:f7:ad:
                    9f:55:82:58:4a:de:90:22:36:f3:47:ba:13:82:cc:
                    09:4e:08:29:7c:3c:ab:17:e7:54:6b:fd:8d:87:6f:
                    fe:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5B:2E:55:41:43:4D:3C:BF:36:DD:B3:26:7D:88:18:B7:FF:1A:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/74abb825-6751-3f34-9f0c-a033ce95f33c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/c0737391-61e0-4d30-9aa1-7caa06980033.crl

            X509v3 Authority Key Identifier:
                keyid:4E:F8:70:1B:25:5E:DC:B1:EC:18:C3:8E:C4:C3:EA:40:5D:51:63:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.228.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:af:72:c3:80:50:43:ab:78:af:6c:0a:ba:94:14:e5:29:38:
         54:81:22:e7:38:27:21:86:1d:a4:e4:10:91:33:3e:8b:f9:08:
         59:3d:48:73:36:9b:cb:1f:31:7a:70:14:f5:b7:29:66:97:45:
         75:68:92:22:42:09:30:b1:22:c6:22:0d:b3:79:89:85:a7:1e:
         60:83:f4:f0:59:8b:e5:b8:71:c7:b7:f0:a6:67:50:62:02:a0:
         09:f4:70:e5:22:e0:4d:1b:00:dd:79:7e:64:05:79:5a:7b:db:
         11:82:f2:03:78:9e:c0:4a:43:27:0f:58:d0:7c:e6:0a:52:d0:
         08:db:9d:fc:45:b0:fe:b5:81:6c:98:2a:f2:39:94:f7:b7:2f:
         f8:36:4b:59:52:ae:b8:db:81:4d:03:c1:81:b5:5f:48:04:6b:
         7a:5b:65:aa:fe:53:54:78:e3:5c:5a:0a:99:4b:66:04:ed:7f:
         8f:04:6d:d4:72:06:23:88:32:57:9c:43:96:1e:b2:fe:c6:6c:
         a6:d8:dd:b0:d5:82:de:b3:00:61:31:56:f4:96:34:9a:db:d2:
         cc:8d:f4:86:30:a3:53:86:52:bf:0f:88:e1:7c:6e:0f:a8:c8:
         5b:f0:ac:9a:b3:22:b4:1a:84:ff:9c:7e:b6:0a:f8:6b:fc:43:
         04:aa:46:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 07:02:59 2026 by rpki-client