Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/24ba5273-3345-3148-8db9-2c7983ba89c8.roa
File:                     24ba5273-3345-3148-8db9-2c7983ba89c8.roa (raw, json)
Hash identifier:          EluUxJpmFqAtU0nY64kx5YKlgMTT2M+dq2dUYZCVA1M=
Subject key identifier:   94:E7:FC:FC:B8:56:A5:68:3F:C5:79:D6:77:3D:C7:35:21:0A:A5:44
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F4328584CD407688124C5A2E8E7D48D80
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/24ba5273-3345-3148-8db9-2c7983ba89c8.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     13451
IP address blocks:        74.205.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:68:81:24:c5:a2:e8:e7:d4:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=3f54e2ab-21f5-47f2-aa0b-5a145b8b5820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b8:00:08:58:19:4f:7c:38:dd:67:4e:ee:51:
                    93:ad:5a:1d:ab:be:88:e8:11:30:61:10:73:9f:12:
                    51:32:06:94:18:fa:79:0a:16:84:12:36:de:28:d7:
                    2d:64:3b:0c:7f:c0:72:7a:63:6a:3c:3b:f5:7e:18:
                    36:57:9e:7b:1f:3d:9b:b6:50:0f:ec:34:92:89:63:
                    db:f4:d1:20:7f:d7:ff:93:93:8d:b7:0f:46:07:22:
                    95:f2:c7:69:a8:7a:54:d3:4b:29:b6:28:9b:7e:69:
                    01:28:4d:15:4a:62:55:63:f9:c6:3f:d5:a6:fe:ef:
                    d5:b9:eb:8d:09:d2:42:26:95:97:eb:d6:07:41:2c:
                    de:9c:4a:f0:f8:36:ea:67:0f:f7:0a:5a:c9:6c:55:
                    21:34:44:38:6c:10:48:61:5f:02:c1:6a:db:dd:d1:
                    fb:5b:ad:41:69:c2:8a:51:b4:20:bb:5b:37:43:56:
                    73:0d:15:99:ad:c0:bd:67:6b:b8:24:63:bf:83:4f:
                    34:a2:56:0e:37:13:67:91:47:d7:0b:76:27:43:81:
                    b2:2c:89:b8:3e:c7:90:20:36:1a:63:db:73:fb:21:
                    fa:f0:ca:1a:2f:2d:94:00:0b:83:31:1b:a7:62:53:
                    8d:a8:ed:b9:08:ae:7f:ae:f6:bc:66:30:b7:26:f3:
                    ad:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E7:FC:FC:B8:56:A5:68:3F:C5:79:D6:77:3D:C7:35:21:0A:A5:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/24ba5273-3345-3148-8db9-2c7983ba89c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.205.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:22:68:4c:9f:4a:63:a9:62:34:63:3b:aa:22:82:e7:28:ec:
         d2:57:72:ec:2d:94:6e:51:c5:39:3d:eb:09:c4:dd:69:7a:25:
         79:f8:ff:39:16:54:a9:fb:d8:c9:09:b5:28:af:b6:84:5c:73:
         7c:54:03:17:8c:55:fe:00:30:01:6d:97:d0:57:4f:c0:51:2a:
         fa:07:a5:67:51:1e:25:ad:a0:4c:45:09:7d:71:3d:83:7d:5d:
         68:09:9a:0f:04:11:2a:eb:f6:fe:d0:80:3e:2d:9d:95:4e:5a:
         f2:10:91:12:6e:ae:c8:45:8b:59:03:dc:7b:32:c7:a5:58:c8:
         f0:0a:cf:30:4f:5b:9d:da:73:34:7d:46:05:21:85:54:73:93:
         cc:4e:53:f5:86:db:9b:9d:f4:93:06:e7:d8:e5:45:e9:41:7b:
         82:62:1c:7f:04:15:bf:c9:85:b2:ce:b9:c6:69:84:77:21:26:
         44:1f:df:bc:52:67:51:fa:c5:e8:bc:fb:34:43:b5:e5:7f:94:
         9c:c7:6b:07:2a:26:9a:77:de:fc:15:d4:d2:6b:5e:19:1e:e9:
         ba:97:e2:5b:ff:f6:64:cb:db:10:d1:8f:1c:c5:81:1b:27:58:
         6c:94:a1:95:fc:1b:79:42:3a:c7:6d:dd:26:35:3a:a8:96:9a:
         4b:c7:3b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:21 2026 by rpki-client