Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa
File:                     74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa (raw, json)
Hash identifier:          N6fylbIWvTanNpitf178VvqP3KP/cM9Ce5PwdnFn9yw=
Subject key identifier:   A3:47:C4:3C:FE:BE:FE:C1:D3:04:FA:6D:E4:C7:CC:4A:A7:6A:75:CE
Certificate issuer:       /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
Certificate serial:       010D0C9F4328584F20F7B0140F2B5734A0DFEF80
Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     53904
IP address blocks:        162.244.229.0/24 maxlen: 24
                          205.189.33.0/24 maxlen: 24
                          2001:410:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:b0:14:0f:2b:57:34:a0:df:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=6e372e8e-b4c2-4dfe-915a-a86288de6625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8f:11:fd:c4:86:91:d9:47:d4:bf:2e:f8:21:
                    67:89:0c:6a:77:58:4e:b3:55:04:bc:06:31:90:e4:
                    97:3c:33:0c:ee:48:55:7e:89:a9:f2:de:ac:3d:f8:
                    9b:e5:4d:b3:65:52:fd:65:a9:a3:80:23:59:15:ba:
                    80:f1:27:56:c6:e0:58:84:de:04:46:f5:db:2a:60:
                    26:09:3e:3c:24:3b:cb:ee:9a:a4:c9:01:c3:a1:3b:
                    91:f2:82:88:84:f1:18:43:b2:b6:d5:9f:27:86:3b:
                    37:1f:08:3b:76:2a:e2:dc:e4:f2:10:1c:99:30:8e:
                    4d:19:43:78:bc:57:6d:cc:4b:7d:f0:cb:2b:54:ab:
                    be:55:17:93:7d:a2:ac:89:4a:aa:e5:ba:07:f0:74:
                    34:f9:cf:c9:09:40:ea:d4:32:fb:7f:bd:06:f1:5f:
                    52:f2:bf:44:e8:45:f9:88:bd:45:0a:c1:1a:9a:f1:
                    45:a1:ef:fe:ad:96:a3:5f:a2:25:26:2d:ae:01:56:
                    a1:93:45:71:3a:90:85:00:27:63:73:b5:4e:50:f6:
                    a0:5d:3b:ad:48:7a:27:ba:c6:70:87:d9:e0:1c:91:
                    5a:30:c2:7e:a2:a6:5b:53:0b:a5:e8:3f:34:01:8f:
                    f2:4a:fb:15:36:c7:c9:34:3e:de:68:03:32:64:ec:
                    fc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:47:C4:3C:FE:BE:FE:C1:D3:04:FA:6D:E4:C7:CC:4A:A7:6A:75:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl

            X509v3 Authority Key Identifier:
                keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.229.0/24
                  205.189.33.0/24
                IPv6:
                  2001:410:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:d8:01:25:3e:17:63:4a:e8:8a:aa:99:2e:5d:98:bb:66:a7:
         02:b7:04:bb:a8:3f:2d:46:03:60:68:fa:27:a8:3b:79:d3:f2:
         43:77:4d:46:ee:4e:59:2a:48:5f:c0:f9:db:8d:44:e9:4a:fb:
         85:38:f0:03:5d:32:b1:c1:f7:0e:d3:8b:0f:4e:f0:d8:b8:ab:
         9a:9a:0c:f5:77:6b:ad:b3:fe:1a:d8:04:ef:bf:cd:75:34:ea:
         36:7d:7e:ca:d1:33:62:bc:7b:5e:ed:b7:16:1e:fa:c5:53:f3:
         92:d7:5e:8f:32:6d:2e:e4:68:fd:29:8b:36:68:83:e0:63:8e:
         d7:a5:d2:41:33:b5:3a:f6:b5:8a:d9:3f:a3:09:70:30:82:c0:
         87:42:21:e5:46:a4:f8:50:53:f1:70:5a:4d:52:e0:91:b8:cb:
         4f:22:35:18:8b:9c:88:c8:91:7e:08:b4:03:b4:ca:92:23:90:
         9c:b2:2b:0e:b3:43:06:33:a9:6a:9e:e7:5e:f1:93:da:92:5b:
         b9:18:27:bc:d1:c5:5a:6b:53:1f:da:17:fd:d6:91:5f:41:64:
         de:82:f3:99:05:ad:f6:15:45:ba:74:51:c5:51:bf:a7:b8:e9:
         a7:b7:94:d1:d8:ef:46:96:d1:0a:89:00:53:95:f4:8a:a4:20:
         3e:be:9c:a1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:53:13 2026 by rpki-client