Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/588d1da0-84ff-3345-a35d-b8277788e0e0.roa
File:                     588d1da0-84ff-3345-a35d-b8277788e0e0.roa (raw, json)
Hash identifier:          t/boB23J9MAzuOUjjBm+CqXW1xIfzs9PPJEIZAdMmcQ=
Subject key identifier:   4E:5A:D4:59:2B:6C:BF:F1:8B:96:10:92:86:22:04:1C:A5:D6:8D:BD
Certificate issuer:       /CN=d0930e1f-1a25-4d85-8ca1-12fed5aa27fd
Certificate serial:       010D0C9F4328584CDC677637EA25D16F7290A9A0
Authority key identifier: CD:AC:48:51:9E:78:0B:88:20:9E:96:6F:F6:98:4E:A6:8F:44:84:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/588d1da0-84ff-3345-a35d-b8277788e0e0.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     693
IP address blocks:        129.74.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:76:37:ea:25:d1:6f:72:90:a9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0930e1f-1a25-4d85-8ca1-12fed5aa27fd
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=bc65215b-3524-44d0-be2b-5fc737c71cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4f:a2:82:9a:7f:fc:d1:b2:11:12:8e:68:b2:
                    ee:2c:d1:47:01:d3:79:1b:23:b8:e1:5e:3c:0c:d1:
                    e9:22:fc:f6:60:71:eb:4e:76:3b:6b:da:50:e8:8a:
                    7f:25:2e:ce:9a:6b:d3:28:37:32:0c:1a:3f:17:f5:
                    97:d8:8c:33:8d:88:d9:dd:91:29:9d:1c:59:21:7b:
                    e3:7d:d3:7b:93:c7:e2:94:9b:c5:95:9e:3f:26:3b:
                    e1:b1:65:7a:af:d3:c9:41:b9:07:82:37:ce:cd:a0:
                    29:90:f7:15:97:40:73:56:99:12:6f:41:21:4e:40:
                    86:9e:6c:75:07:ca:47:5b:e7:8b:e4:24:a6:fb:1b:
                    c0:e8:c8:27:21:f7:5f:f7:7e:62:d2:83:e3:42:34:
                    d5:d9:44:58:17:84:08:89:2c:d9:8d:93:01:84:b3:
                    39:01:78:4f:5a:40:75:53:01:0b:d3:f9:33:e1:38:
                    fc:5f:ae:b7:be:f7:61:f2:99:55:b7:6e:45:9c:11:
                    0e:ea:5c:f9:75:f1:f3:ba:73:24:f7:56:e4:3d:b5:
                    c7:f4:90:b3:09:4a:64:63:5f:bc:14:04:0f:b7:87:
                    36:16:bc:3c:65:2e:04:b2:52:dd:4e:84:5f:5a:7d:
                    60:c7:87:fb:8f:c0:c1:63:e3:3b:38:a1:83:5b:4f:
                    0b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5A:D4:59:2B:6C:BF:F1:8B:96:10:92:86:22:04:1C:A5:D6:8D:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/588d1da0-84ff-3345-a35d-b8277788e0e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.crl

            X509v3 Authority Key Identifier:
                keyid:CD:AC:48:51:9E:78:0B:88:20:9E:96:6F:F6:98:4E:A6:8F:44:84:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.74.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:63:90:44:40:ae:1a:ac:14:11:01:94:39:f1:8a:12:b6:b7:
         dc:ce:08:41:34:13:e6:89:13:95:4b:ee:5b:d5:25:9f:19:8d:
         4d:60:d6:41:21:82:9e:2b:ce:c5:f9:4c:3e:89:51:5e:0d:d5:
         91:1a:36:f1:9a:dd:91:90:4b:eb:b8:d4:58:46:55:8c:ef:ac:
         4e:41:2a:7f:b9:03:53:dd:b3:bb:ad:34:7e:48:6e:f0:7d:56:
         6e:6c:dd:9e:a0:be:4f:09:18:72:7d:41:f8:e0:04:dd:e8:8b:
         ea:af:1a:47:77:f4:ac:ed:ed:1a:e6:29:b6:e3:0f:48:a0:02:
         aa:70:a0:e5:66:3b:3e:e4:fe:2b:24:85:ce:f9:86:de:6f:d5:
         1d:73:cf:30:89:f1:b5:e2:b0:9b:e1:6d:a7:bb:43:59:be:17:
         f1:e7:ea:aa:c7:93:0e:df:a4:f7:83:6d:37:a8:9a:52:fc:89:
         4a:00:d7:d3:fb:c7:45:46:bf:d0:bf:f8:2f:eb:a4:fd:6b:04:
         3b:8d:9d:cf:ac:ed:b2:f7:00:30:47:27:ec:21:f6:4e:27:5a:
         45:3f:7e:68:93:f9:34:9b:21:ba:24:b1:5f:c6:a9:c7:1d:97:
         f7:5a:cb:a1:20:55:1f:8a:c6:26:d7:d9:78:4d:9f:8c:13:ea:
         d9:df:2b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:02:10 2026 by rpki-client