Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/cb7b4dc1-eb5a-3766-84ef-84426556a075.roa
File:                     cb7b4dc1-eb5a-3766-84ef-84426556a075.roa (raw, json)
Hash identifier:          X4CPZMzUwf/ySwMGNQe0WrTGwJOowEjGbp/+v+r2+TA=
Subject key identifier:   7E:A0:FB:3A:AD:AB:F0:5E:44:47:05:32:1C:88:36:97:1D:3D:8D:02
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584D037D12DEADACD7A3151D5C00
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/cb7b4dc1-eb5a-3766-84ef-84426556a075.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     1288
IP address blocks:        66.185.116.0/24 maxlen: 24
                          74.80.114.0/24 maxlen: 24
                          2620:171:54::/48 maxlen: 48
                          2620:171:e4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:12:de:ad:ac:d7:a3:15:1d:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=e3c49fb0-0eca-4846-ba77-d2839532319d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f7:d3:9d:5d:2f:95:21:69:67:d8:4f:07:55:
                    ad:76:82:7c:49:09:a2:b9:0d:16:70:cc:a4:f9:d7:
                    d9:dc:b5:f0:be:d3:7f:cb:17:c0:e6:f3:60:e7:ac:
                    cd:78:d5:24:8f:44:f3:ad:4c:2f:39:fd:31:22:3f:
                    8f:82:b5:88:64:ba:2c:df:6b:8c:95:2e:e3:b9:23:
                    d5:c7:fc:30:b8:27:d3:e7:17:69:7d:77:c6:8f:82:
                    5e:bf:d9:a6:ba:8c:a2:6e:14:7e:27:40:8f:a1:5c:
                    5b:cc:b6:60:5e:68:bf:62:c4:fb:70:03:f8:43:a2:
                    1a:a9:41:d6:ba:48:48:0d:18:cb:c0:8b:2e:b7:8e:
                    e8:c1:f8:ad:41:92:bc:9b:9f:38:37:e9:b3:a9:cc:
                    14:17:8f:47:cb:eb:7d:08:ea:b8:ad:4c:d7:b3:60:
                    e4:04:95:d6:e4:c1:c6:6c:ae:1e:95:61:57:56:6b:
                    06:dd:e9:b2:40:43:6d:5b:3a:a0:f6:1d:cc:5f:f9:
                    1c:e6:e1:6a:eb:12:4e:8a:ff:41:dd:6f:c0:30:c8:
                    b1:e4:7b:e3:5e:3c:9e:29:38:dc:97:94:4b:12:13:
                    bd:4b:5d:72:b0:43:b4:ac:f7:bd:bb:ed:07:77:00:
                    9d:d5:12:fc:f0:c5:18:9e:f6:5e:e2:91:53:45:f8:
                    b4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A0:FB:3A:AD:AB:F0:5E:44:47:05:32:1C:88:36:97:1D:3D:8D:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/cb7b4dc1-eb5a-3766-84ef-84426556a075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.185.116.0/24
                  74.80.114.0/24
                IPv6:
                  2620:171:54::/48
                  2620:171:e4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:b6:d4:93:26:c9:6f:1a:af:c7:29:bb:8a:ac:6a:75:f3:96:
         90:da:c4:d1:6c:b5:24:ac:7d:66:7a:d8:84:fc:dd:22:70:f8:
         67:14:be:a5:5b:8b:a4:03:d5:06:13:f3:21:55:b4:7c:9c:4a:
         44:ff:08:37:ad:f7:5e:c7:54:14:fc:48:ab:83:56:69:8e:77:
         05:3d:b6:b2:e6:41:37:71:5c:e7:7f:c9:a5:5d:40:5d:9a:1b:
         bc:7a:13:d5:5a:80:1f:33:ac:4f:0e:4f:17:61:d8:13:fc:f7:
         a7:f1:3d:02:9d:ce:58:db:19:01:c9:e7:43:9c:ae:21:b8:df:
         4b:db:2d:2c:b1:0c:1a:2a:ca:bd:f6:03:39:a5:8f:d5:06:ce:
         bc:38:1e:c4:f5:0a:4e:21:44:62:ef:c1:b3:0f:83:9b:b3:e2:
         24:d7:7c:d6:01:19:4e:95:55:6d:b2:fa:f9:cc:3f:e9:4a:c7:
         66:34:6c:21:74:de:7d:2b:74:30:f1:50:b8:c0:5d:2f:b7:ef:
         60:6e:96:e4:fe:7b:19:99:02:f3:78:1e:ba:1b:c8:dd:f3:d6:
         55:a9:19:c2:96:53:da:14:d7:88:33:d1:75:d8:b9:a3:65:fa:
         83:62:16:75:b6:ba:66:32:5f:fc:04:38:01:2d:2f:9f:6e:12:
         5c:c8:1f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:22 2026 by rpki-client