Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/70226b31-5a81-344d-af5a-5f010e3fea64.roa
File:                     70226b31-5a81-344d-af5a-5f010e3fea64.roa (raw, json)
Hash identifier:          ShcCABSFRFAPytR5gEyTstO0hFZPqlI7fulSXomQSbQ=
Subject key identifier:   36:12:31:24:22:E1:E9:BD:40:7E:10:9F:D8:7B:C2:13:FF:27:CA:6C
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F4328584B99D7AD9A130FEA534C40FA00
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/70226b31-5a81-344d-af5a-5f010e3fea64.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     2734
IP address blocks:        208.74.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:ad:9a:13:0f:ea:53:4c:40:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=835476ee-3248-4197-9df6-c40a8fc1e2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:c8:ac:a8:37:9a:38:16:b3:1e:2d:33:d5:
                    9e:af:4a:f2:db:46:3b:bd:69:5d:a9:3a:06:fc:52:
                    37:01:41:48:05:36:72:03:0e:18:2e:d9:98:8a:d7:
                    74:6b:23:39:80:37:40:78:9c:18:f9:80:3b:07:66:
                    cb:28:85:43:55:8f:f8:0e:95:5c:f9:94:10:70:1a:
                    38:2c:0a:25:eb:45:b9:6a:4a:ef:44:05:df:64:23:
                    a0:d3:c2:d3:0c:b6:2c:09:4e:03:f8:3f:1b:4e:44:
                    9c:38:78:8f:e6:5c:4e:fd:d9:d5:84:a2:51:1b:0a:
                    08:e8:14:32:a3:6a:93:5c:05:23:66:4a:9f:47:d6:
                    96:63:68:e6:5e:32:de:9c:fa:06:38:19:f6:1d:20:
                    0a:b1:61:96:eb:16:d1:b9:10:7d:1a:38:2b:af:ad:
                    8b:28:57:26:8a:37:30:1c:61:c5:d1:da:5f:61:4b:
                    cf:ae:2d:c9:e8:5c:18:4d:bb:85:72:b2:2f:ad:c2:
                    2c:b8:96:aa:ec:92:e6:aa:1a:87:0f:14:f3:87:50:
                    49:06:2f:64:c6:92:26:71:ea:cf:7e:2f:e1:bc:1f:
                    cb:00:dc:c1:53:cd:73:9a:61:ad:ff:b7:19:1e:e2:
                    5f:9e:25:ae:d2:8c:7d:07:f4:08:cd:ca:e5:b3:cf:
                    5f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:12:31:24:22:E1:E9:BD:40:7E:10:9F:D8:7B:C2:13:FF:27:CA:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/70226b31-5a81-344d-af5a-5f010e3fea64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:70:41:11:94:2d:8f:9a:e0:13:b6:ce:a8:7d:c6:fa:15:d1:
         b8:ba:d5:2d:15:ed:e7:91:0f:b1:1d:39:6b:09:98:93:02:8b:
         8e:22:7f:21:21:15:6d:9e:3a:41:39:7a:5a:35:b1:42:6a:7a:
         33:16:81:01:af:5c:c4:f8:12:09:e2:b3:ab:55:ef:a0:3d:f9:
         74:69:fb:2c:75:e0:fa:08:97:4b:2f:26:49:cc:e7:b7:d4:9f:
         36:e6:7a:34:3d:cb:07:63:50:06:85:68:67:15:80:bf:19:d1:
         f5:23:d8:f7:3c:da:4b:14:89:72:6f:b2:92:74:62:d4:09:23:
         13:25:89:44:7e:88:3c:e2:01:9d:2a:8e:52:d8:d0:b6:a3:b9:
         62:72:06:90:41:ca:58:a9:78:b5:cb:0c:fb:d2:36:96:6c:5d:
         d1:52:ed:e7:90:80:64:c5:7a:e1:5f:4d:1c:16:7d:e9:34:8e:
         c6:6b:51:d5:72:8d:3b:3c:3a:a8:8f:bb:54:33:cf:44:36:21:
         23:12:de:95:2a:eb:0a:e7:f5:b5:a3:39:29:8a:56:9f:d0:f7:
         f9:47:2b:67:ec:ec:2b:72:d8:11:b1:93:78:6d:25:3a:0c:97:
         da:54:0c:6c:64:1d:48:96:35:14:31:20:a9:db:ba:2e:9f:01:
         b8:de:eb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:49:55 2025 by rpki-client