Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/74e9ae05-0fb2-33a8-96b1-27a18c43a8ec.roa
File:                     74e9ae05-0fb2-33a8-96b1-27a18c43a8ec.roa (raw, json)
Hash identifier:          qmLBhnR65dg6NVH42K3oSydJ+W3yC+sexBawpbyJm/Q=
Subject key identifier:   41:95:F9:0F:BC:EC:73:B8:48:A4:8A:B9:CA:D5:99:AF:1A:75:57:9E
Certificate issuer:       /CN=ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0
Certificate serial:       010D0C9F4328584CB981D6FB5CBA0C18C6CF3340
Authority key identifier: 60:91:E4:47:FE:45:BF:10:7C:41:41:7E:CF:EB:96:27:4E:4D:AC:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/74e9ae05-0fb2-33a8-96b1-27a18c43a8ec.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     398020
IP address blocks:        23.133.48.0/24 maxlen: 24
                          66.205.243.0/24 maxlen: 24
                          174.136.212.0/22 maxlen: 24
                          209.142.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:d6:fb:5c:ba:0c:18:c6:cf:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=636e34c5-2d2a-4b82-ba32-ff04008f925c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:59:45:c5:ee:49:86:86:99:3e:08:cc:f0:57:
                    79:74:b3:0a:5a:2e:a2:c9:73:e2:36:88:71:1d:56:
                    87:fc:27:43:16:ab:8a:c8:48:6b:a9:10:d5:6a:05:
                    4d:2c:69:89:36:09:ea:74:58:29:0d:34:22:dd:13:
                    f8:13:b3:10:21:2b:3c:06:c8:ed:dc:62:eb:9d:6c:
                    8e:f7:db:12:0f:72:f8:05:b6:c1:ce:27:26:23:24:
                    ac:c9:06:92:7a:60:22:7d:49:9e:73:ee:36:79:ae:
                    0b:c0:52:c5:99:e6:7d:ff:15:27:21:8f:57:f5:8a:
                    c7:72:ac:dd:16:11:96:f3:fd:8e:5f:5a:90:f6:0c:
                    e0:da:22:05:d9:a6:96:77:bc:ed:a3:08:7a:35:7d:
                    85:aa:9d:a8:56:fd:12:15:ed:ad:eb:63:bf:8b:b5:
                    d7:14:83:ba:70:df:b8:5e:3d:f1:a9:0d:91:f0:d0:
                    8c:7c:31:e4:28:c3:4d:d8:94:df:cf:13:8b:dd:0a:
                    6e:63:be:2a:c2:34:90:ae:9f:b1:98:66:c4:f1:53:
                    db:f5:63:41:37:a7:cf:22:cc:0b:a6:e9:76:b7:6e:
                    44:b1:23:e8:ca:6e:5d:d7:8e:f6:4f:e0:3c:51:2d:
                    29:f6:19:ef:e0:71:65:8f:07:03:92:b8:9a:10:62:
                    0f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:95:F9:0F:BC:EC:73:B8:48:A4:8A:B9:CA:D5:99:AF:1A:75:57:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/74e9ae05-0fb2-33a8-96b1-27a18c43a8ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.crl

            X509v3 Authority Key Identifier:
                keyid:60:91:E4:47:FE:45:BF:10:7C:41:41:7E:CF:EB:96:27:4E:4D:AC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.48.0/24
                  66.205.243.0/24
                  174.136.212.0/22
                  209.142.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:64:30:8c:d8:29:21:9c:54:b3:d9:f7:1e:85:30:45:75:1c:
         e0:50:8d:2d:97:f4:3b:3c:87:b9:d4:a8:1e:a0:18:f6:f7:cb:
         27:a0:f7:f7:c4:79:47:9b:10:d1:dd:7e:93:69:6a:c7:70:5e:
         33:4c:d0:e9:92:cd:d3:47:47:cd:fb:96:26:5b:81:b7:7f:36:
         6b:6f:8c:1c:40:a9:f8:15:9a:c8:00:63:41:d1:03:d3:08:93:
         71:ef:03:54:37:ec:9b:22:9b:d3:97:6a:86:5c:2a:6e:24:84:
         ad:02:12:71:8e:41:5b:3c:73:61:a3:55:db:ff:77:f0:61:8f:
         e1:a7:e7:96:03:d8:d1:83:92:f7:b4:2d:d1:0c:e1:1a:a4:6e:
         35:02:ee:bc:64:2f:b8:f4:4c:f9:82:5e:59:98:c7:17:2f:64:
         61:50:bf:de:ab:80:b8:cf:71:52:8e:a8:5e:ef:95:5c:af:c0:
         8a:90:de:3c:2e:fe:7d:19:c7:fc:10:ee:0c:88:a2:7f:1d:f4:
         ba:31:36:b6:99:17:0f:81:ac:92:ab:dc:4e:81:e1:56:44:57:
         b7:05:bd:b0:63:69:6d:5a:34:42:a4:08:74:29:be:4e:3c:c3:
         ed:29:f4:2d:4b:1d:bd:a7:cd:bb:2e:4c:e4:4d:7d:7d:a8:b7:
         8c:11:1e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:17:33 2026 by rpki-client