Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/aef0ccb8-87df-371f-ad58-fb0ef91095bd.roa
File:                     aef0ccb8-87df-371f-ad58-fb0ef91095bd.roa (raw, json)
Hash identifier:          LzyJWC96a6vikZX+OHNb2qoiamWZamaHTgzgUf8Cbzc=
Subject key identifier:   D2:58:D2:B9:AC:10:4A:43:02:F0:96:A2:AF:F2:A0:78:A5:E8:30:6B
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584CDB0200029B2D1F9DC1FB31F8
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/aef0ccb8-87df-371f-ad58-fb0ef91095bd.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     33272
IP address blocks:        207.74.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:00:02:9b:2d:1f:9d:c1:fb:31:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=264126cb-4bd3-4bf4-b3f5-8df3b665139b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:30:55:bb:e9:13:cf:a5:21:dd:1e:85:ed:25:
                    88:a2:f8:2c:59:1c:07:32:97:49:83:8c:08:49:33:
                    5e:bb:9c:a4:e6:d9:59:c3:b9:7e:72:ca:b1:90:b8:
                    2c:30:92:5a:7a:47:10:02:f0:88:a4:ba:3a:9b:c7:
                    eb:b2:f1:df:57:cc:3b:54:0b:b2:02:35:23:1c:2a:
                    67:38:80:37:98:d7:b2:b5:fd:1d:92:86:28:be:b2:
                    7d:ab:47:23:47:58:cc:a7:07:6e:fd:c5:bc:05:bf:
                    86:e9:2f:4e:13:c4:6c:4c:27:a1:97:ff:ba:ea:42:
                    64:93:8e:8b:a5:50:56:11:7d:65:4e:48:af:bf:88:
                    f8:07:64:a2:0f:76:4c:a5:c3:31:88:e4:c4:ed:92:
                    35:c0:70:b5:a7:e4:d4:cc:e2:fa:99:ea:f4:d9:9c:
                    d6:c6:74:ac:d5:52:9e:4a:c7:8f:c2:2e:c5:7f:05:
                    2b:a7:6b:62:c6:66:2e:a5:09:2c:26:07:03:c0:23:
                    67:2e:cc:2a:fa:fc:b7:f2:68:04:65:91:23:ea:5f:
                    47:a1:a3:dc:b4:43:8e:3c:c1:23:08:5f:d7:05:22:
                    f2:94:c6:74:b6:1b:04:47:41:8b:5d:de:df:b9:17:
                    75:02:e4:ce:06:94:96:68:16:9a:6c:67:b7:fc:49:
                    be:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:58:D2:B9:AC:10:4A:43:02:F0:96:A2:AF:F2:A0:78:A5:E8:30:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/aef0ccb8-87df-371f-ad58-fb0ef91095bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.74.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:58:ec:74:56:2a:ac:44:88:6e:99:6b:39:92:31:d6:c1:fe:
         2c:0a:31:31:15:cc:6e:8d:45:93:a9:6d:25:19:55:a8:67:10:
         08:35:84:d9:dc:58:f1:78:24:68:76:ee:4e:65:51:a1:00:dc:
         af:00:b6:b1:58:44:7e:e1:36:ff:f0:cb:13:66:2a:bf:97:07:
         8b:fa:77:26:5d:2d:de:be:52:4a:06:e4:3a:ac:3f:3f:df:8e:
         c5:f3:b7:ee:20:f2:cb:d8:16:c3:cf:10:f4:bd:36:91:e1:2f:
         d5:a4:d3:8a:0d:ce:7a:4d:cb:c7:5c:1c:c0:9d:4a:30:1c:50:
         9f:cc:6d:cd:cf:50:09:ec:20:70:37:71:59:4d:01:84:eb:35:
         3f:c3:59:15:30:d9:a0:3a:35:79:f0:46:30:80:f8:4c:3c:d7:
         b4:5c:ab:f9:7c:b2:b0:b9:71:cd:97:07:d9:5e:e7:97:d4:ec:
         6a:0a:34:08:3b:47:79:d4:26:8f:f1:5b:12:37:b6:b1:78:1a:
         30:13:7e:ca:1e:81:f0:31:31:fa:8f:96:93:2a:38:62:46:f4:
         05:ab:3e:11:d9:2a:49:e9:09:d2:64:8b:63:75:24:ff:44:39:
         44:65:58:1f:85:84:4c:e0:7e:43:39:75:8d:c7:83:08:fa:5d:
         f6:ab:8f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:12:37 2026 by rpki-client