Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/ab2df7f0-da99-38bb-9e40-2a087d51251d.roa
File:                     ab2df7f0-da99-38bb-9e40-2a087d51251d.roa (raw, json)
Hash identifier:          /iT0x616iKBF0MRwxLP03JVJLaUg31JPPzTbx2lX+h8=
Subject key identifier:   13:8B:8A:92:A2:B1:A8:05:94:6E:82:2A:60:10:6D:1F:49:9A:BF:0D
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584DE41B6207822A38F646047CC0
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/ab2df7f0-da99-38bb-9e40-2a087d51251d.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     1288
IP address blocks:        74.80.77.0/24 maxlen: 24
                          2620:171:66::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:62:07:82:2a:38:f6:46:04:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=f8e738bf-1b10-4ba9-8142-dd8c1a1fc1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5e:ef:32:15:79:07:72:8b:3d:39:13:14:d9:
                    79:4a:7b:71:33:a3:9a:c8:75:fa:62:f0:7a:31:45:
                    1e:67:03:50:11:c2:cd:31:1c:be:6f:63:ab:85:a8:
                    70:01:1d:5f:de:c2:75:f3:bf:aa:47:83:0d:27:4e:
                    70:aa:74:e8:25:1a:78:ef:81:17:f2:41:8d:a4:14:
                    c8:9c:0d:08:dd:d7:93:c7:40:4b:6d:da:80:ad:89:
                    a2:e1:63:58:bc:34:04:97:48:42:88:ac:1f:cf:0c:
                    2a:67:f4:66:62:cb:34:80:51:d8:5b:9a:26:88:18:
                    a2:2a:bb:5a:df:85:99:c7:3e:cd:aa:5e:49:15:f9:
                    e0:09:3f:13:13:70:e8:37:62:2e:31:56:3b:6d:e0:
                    11:65:a6:7c:71:9f:20:08:8e:88:d4:4c:35:44:23:
                    3b:50:70:93:16:0c:02:e9:d7:ee:97:71:ae:45:ea:
                    b9:b8:2f:c0:63:8b:95:b0:f5:c1:60:25:ee:be:cb:
                    db:97:23:7b:bf:0a:80:2c:58:42:73:f0:c8:cb:38:
                    93:0f:b6:dc:37:bc:17:a7:d6:f2:1a:2f:98:ec:e6:
                    07:f1:bb:ee:43:e8:e7:ea:c2:d2:e3:e4:70:63:b8:
                    17:f0:5d:fc:2c:bb:77:93:56:61:cb:6b:b8:66:08:
                    26:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8B:8A:92:A2:B1:A8:05:94:6E:82:2A:60:10:6D:1F:49:9A:BF:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/ab2df7f0-da99-38bb-9e40-2a087d51251d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.77.0/24
                IPv6:
                  2620:171:66::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:dd:01:ac:ed:06:4c:e1:91:d4:66:f8:81:f8:0e:60:8d:91:
         53:6b:1d:04:86:9b:73:d2:0b:ba:1e:f7:ae:96:42:92:c2:d7:
         ed:b4:7d:85:ad:68:13:7d:a0:83:40:b4:6c:2a:76:1b:53:9d:
         35:83:11:20:d5:24:21:0f:c1:24:c6:8a:a2:2e:cc:45:7d:f2:
         e8:4a:8b:75:d8:ef:8f:2d:c1:c2:e4:18:bd:a3:4b:62:cf:1c:
         24:63:4e:6c:69:ad:65:73:85:85:c9:e1:ac:bb:24:76:19:5b:
         bc:eb:b3:03:b7:36:94:c2:6f:4c:9b:17:4d:ad:96:21:af:ba:
         e0:35:9d:7f:54:0a:28:41:33:88:34:ac:28:57:c7:b7:cf:bd:
         85:39:b8:7e:98:13:2c:ee:2c:f9:0b:d7:73:8e:08:17:83:83:
         4b:e5:83:a0:2e:9f:f6:92:de:a8:e1:cb:72:df:1d:a4:16:bc:
         59:6f:e2:7a:49:3f:09:d5:55:62:f0:e3:0e:e5:51:39:4b:9b:
         f9:47:d7:8e:58:41:a6:64:92:f3:37:86:84:1e:dd:49:04:6e:
         48:ba:fe:15:5d:c0:05:7a:a8:3e:3e:95:e7:ed:c8:ce:d8:d6:
         69:d7:8b:3a:ca:67:4d:95:a7:7a:35:8a:1a:13:5c:ee:9a:09:
         d9:b9:4a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:08:21 2026 by rpki-client