Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/43d5d7a8-6c43-3cb1-aa10-fe75f49e40ee.roa
File:                     43d5d7a8-6c43-3cb1-aa10-fe75f49e40ee.roa (raw, json)
Hash identifier:          iMfyhGtngRme8EQFZggpuM+iE03tkwK7xZSpgsCgtIk=
Subject key identifier:   F7:13:59:E0:78:AC:41:BD:F9:45:A3:8B:6E:A4:06:04:C1:DC:2E:2B
Certificate issuer:       /CN=2b0745c6-87b9-4dc9-87d6-03dfe0664bda
Certificate serial:       010D0C9F4328584F268D0D8FD7570F59CAAEC680
Authority key identifier: 4B:DB:D2:A6:55:98:B7:4D:D5:AE:15:A8:5F:56:3E:08:1E:56:EF:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/43d5d7a8-6c43-3cb1-aa10-fe75f49e40ee.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     4913
IP address blocks:        74.119.160.0/24 maxlen: 24
                          74.119.161.0/24 maxlen: 24
                          74.119.163.0/24 maxlen: 24
                          74.119.164.0/24 maxlen: 24
                          74.119.165.0/24 maxlen: 24
                          74.119.166.0/24 maxlen: 24
                          74.119.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8d:0d:8f:d7:57:0f:59:ca:ae:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b0745c6-87b9-4dc9-87d6-03dfe0664bda
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=2734efe7-5dbb-455b-87ae-eae8b826275a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5d:8b:d1:68:4a:32:9c:6c:f7:c8:fd:64:72:
                    b1:7b:35:50:82:eb:bd:74:f0:3c:86:4f:aa:8c:7b:
                    dc:bd:b7:83:d2:bb:e0:af:d7:5f:47:70:75:f3:f8:
                    99:9d:df:f0:59:f9:a9:fa:8d:06:74:48:ac:9c:56:
                    fb:a6:9f:c4:15:07:ad:42:4b:73:b1:a9:11:a8:a3:
                    2b:09:e5:ca:f9:08:2e:a0:cc:a7:b1:fe:5a:b1:52:
                    8b:3b:14:14:6b:f9:b8:17:0e:87:a9:5b:a7:47:1c:
                    de:4e:a5:93:9b:20:d6:33:1b:c3:8a:fc:ee:7e:f2:
                    0f:80:94:ab:72:05:d6:ef:13:17:3b:f1:e6:e7:44:
                    93:49:c3:45:5b:9a:b7:1c:4f:90:35:7e:a4:86:d7:
                    c1:20:a1:f6:25:13:7a:de:b7:1e:13:61:82:e4:e9:
                    c6:20:d1:64:4d:d4:e6:22:f9:eb:63:bc:62:fa:ec:
                    56:30:66:33:27:a6:a5:bc:e0:7e:72:8b:a5:2e:e0:
                    a6:cd:9c:53:d8:6f:b9:d9:7f:32:3d:d5:07:1e:2f:
                    9a:40:34:d8:ec:a5:d4:21:07:bf:d4:80:8d:23:00:
                    91:29:62:ef:55:65:a2:bb:3f:4c:ac:39:b2:5d:2b:
                    fc:c1:a2:f7:af:98:3a:1f:9f:35:42:ca:88:e4:9a:
                    a5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:13:59:E0:78:AC:41:BD:F9:45:A3:8B:6E:A4:06:04:C1:DC:2E:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/43d5d7a8-6c43-3cb1-aa10-fe75f49e40ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.crl

            X509v3 Authority Key Identifier:
                keyid:4B:DB:D2:A6:55:98:B7:4D:D5:AE:15:A8:5F:56:3E:08:1E:56:EF:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.160.0/23
                  74.119.163.0-74.119.167.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:7d:78:0e:33:ce:59:f1:b9:84:60:84:d5:c4:8d:6d:5d:eb:
         0c:9b:c9:24:aa:d5:1d:c2:94:bb:58:1c:f4:72:b3:f4:49:54:
         0b:73:a6:18:0f:93:50:e1:4a:65:f7:14:2c:af:6a:c8:3e:68:
         4e:20:ed:34:a0:b9:af:1d:35:eb:51:3e:5a:c8:3b:08:68:fd:
         77:f6:5e:d2:0e:d4:48:da:07:71:54:e0:b9:bc:72:e9:1a:75:
         12:7a:60:3c:fc:53:fc:24:dd:4e:b8:95:72:d0:76:7a:72:c3:
         d6:70:f7:fc:fa:f6:35:96:78:04:fb:eb:e0:3c:0c:8b:47:94:
         72:c9:c9:97:66:10:20:f5:15:db:c2:01:2d:ac:6c:7a:c2:c4:
         70:90:e2:67:12:c3:39:3c:23:49:19:24:f7:1a:ab:9a:1f:da:
         70:07:bc:29:a8:4a:fe:dd:07:b2:b6:07:ba:52:9a:c3:28:e5:
         4e:a2:54:e9:21:64:63:e9:ec:4f:8c:0e:3b:35:fe:14:9a:a1:
         b1:77:d1:23:7c:d0:4d:1f:e8:b4:fc:c2:6e:d7:de:f7:bb:cd:
         b8:79:42:74:89:14:ec:96:8a:07:eb:24:45:60:3e:f0:a1:4c:
         ff:cf:68:d5:2f:96:46:11:c6:e9:27:6d:ba:a2:bd:a6:47:27:
         e6:9e:d6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:31:32 2026 by rpki-client