Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/729cef94-85c1-3f6b-aae8-927a0db22d32.roa
File:                     729cef94-85c1-3f6b-aae8-927a0db22d32.roa (raw, json)
Hash identifier:          4LhAFHsTi+wKE/slgkJ9yoMw1lB8ugLxc1B+v45CkjA=
Subject key identifier:   F6:9D:98:BB:A1:F1:39:35:4E:D9:54:DE:F5:7E:B0:19:44:F3:69:DB
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F4328584D59EA7884ABD48A824B7C7F00
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/729cef94-85c1-3f6b-aae8-927a0db22d32.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     2734
IP address blocks:        208.74.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:78:84:ab:d4:8a:82:4b:7c:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=30884920-a9fd-4118-be96-3bb9e54a8cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:03:ca:f5:29:a5:83:a0:30:7a:f9:cf:ab:c8:
                    10:c7:0d:ef:73:55:85:93:07:d7:b6:83:fb:43:be:
                    43:52:b4:8b:91:5f:87:e5:6b:0b:3e:39:43:31:f6:
                    ba:94:d4:35:03:04:33:1d:4a:b2:1f:d7:ee:b5:9b:
                    4d:d4:30:06:43:11:fa:1c:37:0e:3b:20:fe:8d:d6:
                    36:db:18:76:ae:f0:71:27:e0:2a:ff:d6:f8:25:25:
                    a1:8f:80:73:2c:76:d5:ea:3e:35:84:3d:ae:7d:a3:
                    fe:73:cc:4f:04:cd:93:2b:0b:46:e3:1e:bd:cc:19:
                    12:0a:69:31:87:c0:10:d1:5c:79:50:1d:26:db:0e:
                    ee:1a:da:78:05:94:c3:7a:f3:27:c5:e9:eb:ca:77:
                    ef:7b:0a:da:e9:ae:6c:b8:43:96:8d:de:66:5a:7d:
                    7a:99:67:ea:97:8a:dc:e2:b9:fc:e6:a5:4a:bc:ed:
                    c3:c2:55:49:0a:56:94:f3:ac:fd:87:ae:e7:45:dd:
                    ad:6d:cb:a7:97:40:83:46:e7:3b:8f:52:1a:6f:6b:
                    f4:fc:3a:49:83:56:cc:0b:4b:59:51:6f:a6:06:74:
                    84:8a:ca:ac:b1:4c:08:67:87:e4:18:06:85:7b:98:
                    87:38:b9:e9:1e:f4:ec:a0:f1:1d:68:f3:01:dc:21:
                    60:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9D:98:BB:A1:F1:39:35:4E:D9:54:DE:F5:7E:B0:19:44:F3:69:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/729cef94-85c1-3f6b-aae8-927a0db22d32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ef:a7:da:f4:14:48:eb:dd:19:78:45:00:e6:b2:e6:2f:dd:
         ec:6f:a0:0b:6d:e8:e7:63:71:9f:3d:1e:c8:28:32:91:dd:21:
         4c:88:33:d1:d4:c6:27:0a:8a:73:e9:d9:0b:c5:36:b0:e7:73:
         46:05:d1:ea:25:9d:85:82:3a:ae:3c:34:41:4b:15:81:c5:f7:
         e7:87:29:d8:dd:b1:5a:ce:f8:49:e0:ad:a8:17:b7:fb:4a:d5:
         5f:64:3d:98:63:eb:9a:3b:0b:d5:a5:65:2b:5d:47:f5:f7:8b:
         b7:47:be:3b:e8:9e:54:5f:76:42:26:e6:6e:bf:b4:c3:48:6d:
         a6:45:ff:9b:21:9d:64:9a:27:fc:3b:58:d4:4a:18:54:cc:2d:
         9a:ae:84:ff:03:d6:91:2f:9a:89:f4:90:0c:61:a4:5b:0d:61:
         6c:f2:19:a9:90:41:c0:b9:25:c1:47:d6:e4:fd:d9:cc:7b:ee:
         a7:b4:be:bb:db:e2:c6:24:bc:81:b2:53:d8:9e:ee:2c:ec:99:
         81:85:f7:4a:a4:0c:a9:ac:4c:03:46:3f:19:00:0f:99:9a:4b:
         31:52:b2:06:a3:5c:0e:91:d5:1d:54:93:b9:8d:be:58:25:7e:
         34:d4:36:6a:cf:df:a3:8f:a2:5b:44:a6:90:fc:ee:d6:94:0e:
         29:db:cf:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:46:42 2026 by rpki-client