Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/6e3468c4-90ed-3c55-9272-bfaed0242e22.roa
File:                     6e3468c4-90ed-3c55-9272-bfaed0242e22.roa (raw, json)
Hash identifier:          OH887ZtWnaL4BW3aRUJ3BYXxHGzoCKDRb8mK6ZH5nZ0=
Subject key identifier:   35:8D:51:E0:47:BD:1B:A6:A3:92:78:77:C7:DF:4A:B9:DC:E0:59:0A
Certificate issuer:       /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial:       010D0C9F4328584CCD0CA046F1FD047F5D08FD30
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/6e3468c4-90ed-3c55-9272-bfaed0242e22.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     19229
IP address blocks:        171.74.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:a0:46:f1:fd:04:7f:5d:08:fd:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=1065bc1c-aa03-4b15-a80a-0c419d0ff30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:96:90:e2:c9:19:88:39:e5:2f:6e:5d:09:
                    1b:50:f5:cb:26:3a:d9:64:48:6e:70:20:af:a1:bb:
                    33:fa:94:29:28:c2:82:ca:ae:7c:d1:78:44:d2:a6:
                    d2:f3:81:97:4d:e1:23:86:8b:92:e0:1c:45:8b:ec:
                    21:74:61:f5:86:fd:14:24:e5:5e:23:47:72:61:51:
                    90:fb:a6:c3:6b:26:c8:d9:2b:26:32:7f:0f:a4:48:
                    2e:0c:4b:17:40:c6:29:52:c1:06:d7:e6:9f:29:9f:
                    de:c5:b1:9f:1a:4a:17:92:ed:5e:9f:8c:4e:13:f6:
                    2a:e2:60:df:e5:bd:20:ea:c5:77:71:e9:09:54:3a:
                    7a:81:53:6e:37:07:91:65:8e:fa:9e:9f:ad:17:39:
                    93:7a:54:61:24:d3:3a:13:58:f0:4f:cc:08:a4:e8:
                    c3:ac:60:d2:78:5a:38:43:40:2e:9b:db:b8:fa:b5:
                    fa:49:45:34:5a:59:f1:9e:e9:de:d3:a0:95:96:ed:
                    90:df:96:68:7c:7d:38:79:39:d2:bc:3a:a7:05:08:
                    f4:33:81:22:34:6f:1a:aa:51:c9:f2:5e:fb:3f:3c:
                    c0:10:cf:59:5d:a1:a9:98:38:50:49:c7:61:38:3c:
                    ab:16:4d:09:da:31:94:0b:c1:8f:cb:c6:58:2d:bc:
                    70:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8D:51:E0:47:BD:1B:A6:A3:92:78:77:C7:DF:4A:B9:DC:E0:59:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/6e3468c4-90ed-3c55-9272-bfaed0242e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl

            X509v3 Authority Key Identifier:
                keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.74.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:a1:d5:15:af:e6:75:4f:fa:5a:39:48:65:f0:24:9f:0b:dc:
         6a:af:f3:99:7c:ae:81:9f:ff:5a:46:62:a5:a4:74:9a:4e:50:
         af:8e:53:6d:57:2e:36:4d:be:5a:34:20:14:96:a0:d7:2c:70:
         1b:ab:62:80:c4:08:7a:5b:c9:63:f7:fe:9f:1c:1b:94:f1:13:
         6a:79:d7:57:56:02:07:cd:b5:8b:51:d5:d6:48:9f:3e:c9:1b:
         96:b7:c3:68:56:24:6e:fe:2c:a3:0d:02:cd:15:14:a1:2f:6d:
         5b:8e:26:bd:ab:63:55:15:6f:08:94:59:c0:d1:4f:75:6a:89:
         d3:7b:02:a8:6b:8f:bc:2c:17:dd:f5:9d:c3:29:2b:bd:2e:3a:
         f1:4a:66:99:79:0e:80:fe:a2:5b:9f:e4:f0:af:ee:2c:da:a9:
         3a:48:8b:eb:db:70:96:66:f7:45:c4:81:91:7b:93:6c:26:31:
         88:74:5f:d2:06:cf:c3:2b:69:52:1c:ea:84:8b:01:8d:1d:3b:
         53:fc:4d:4a:bb:7c:d0:1d:d2:3f:6a:0c:88:cc:50:de:34:74:
         20:8a:32:0d:10:80:ef:cf:9c:58:28:6d:e9:b6:80:01:d7:aa:
         d2:97:81:b3:cc:3e:5e:d8:dc:30:c3:e7:42:73:80:9a:97:83:
         50:48:3e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:05 2026 by rpki-client