Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/36e2c662-db2c-367e-b2b9-58c9fabe3a00.roa
File:                     36e2c662-db2c-367e-b2b9-58c9fabe3a00.roa (raw, json)
Hash identifier:          DvCU+oIaqnS+GqJOsN0vEFg5W7yGiWjiusONgwGhaNM=
Subject key identifier:   C2:C7:72:F8:A1:00:2C:B6:EA:1D:BE:F8:5B:F4:37:9C:E2:D7:A9:98
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584CDC67B55DE9F6324130ECCE40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/36e2c662-db2c-367e-b2b9-58c9fabe3a00.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     397220
IP address blocks:        204.74.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:b5:5d:e9:f6:32:41:30:ec:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=04bf2df2-72fa-40d6-b9e2-5291afc3b175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:83:25:17:f9:17:99:d0:ca:d2:51:00:d2:23:
                    b7:25:fc:7c:72:d1:67:13:49:30:32:6a:e1:44:f0:
                    72:b2:e6:9f:03:34:75:45:08:88:2d:30:16:52:47:
                    92:0c:77:9f:b8:78:cb:2b:01:41:c1:19:bc:5d:c7:
                    2d:13:b7:69:03:be:e6:db:e4:1d:bd:c7:82:6c:3f:
                    21:d4:4a:7d:45:d5:21:b1:5e:3c:79:44:95:54:1f:
                    ac:b1:b2:b4:65:7e:4c:c7:45:a6:31:90:a7:93:2c:
                    6c:f0:77:41:fb:a2:7c:18:6c:91:88:2e:34:8d:26:
                    87:a1:bb:e8:48:7b:0d:cb:f2:55:a6:cc:d1:ed:a3:
                    5a:30:ea:c6:ff:cb:b7:7a:e8:3c:c4:71:b9:0f:28:
                    73:66:3d:2a:25:63:2f:ee:a4:c8:71:64:21:54:d2:
                    4f:57:c7:f7:d1:48:f8:5b:5b:29:ec:cf:db:a9:3e:
                    34:49:37:c7:4d:db:db:86:1c:74:8a:5a:35:b7:b9:
                    08:92:1d:14:d8:b9:0d:23:1d:3e:1c:2e:f5:a9:cb:
                    bb:52:90:c5:7a:f3:44:84:31:58:df:13:b2:af:3b:
                    16:43:01:50:27:92:f7:a9:9f:78:1b:e1:b5:23:d1:
                    31:c0:e8:50:6e:a6:26:20:a4:5d:6b:07:9a:4f:23:
                    c8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C7:72:F8:A1:00:2C:B6:EA:1D:BE:F8:5B:F4:37:9C:E2:D7:A9:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/36e2c662-db2c-367e-b2b9-58c9fabe3a00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:78:9f:3e:97:6c:e3:d8:e0:66:11:b7:38:33:f4:a4:5c:b7:
         01:2c:54:8f:18:66:26:76:cb:35:30:0f:67:46:e6:0e:b7:c6:
         2d:ce:7b:dc:f8:0f:49:d2:fa:a2:ab:72:91:07:ea:41:9d:83:
         b7:b0:9d:a2:b4:c4:ec:e8:5a:c5:5e:d5:5f:9e:84:8a:22:24:
         37:1d:f2:d2:5a:80:1e:14:1a:9c:09:fe:14:b3:d1:91:06:ad:
         f1:d9:18:ba:dc:c2:d1:2b:b5:33:d3:bd:22:57:80:de:b9:6c:
         a7:11:92:a8:9e:6f:31:87:a2:c6:4d:59:53:8b:94:b4:3d:ee:
         68:12:b5:21:81:51:71:ed:00:7d:2a:29:ba:2f:ee:3d:ae:15:
         ae:a1:b2:b7:b8:f9:d0:c6:14:84:69:cf:9f:33:f1:a4:e7:4e:
         d5:de:d4:23:0e:1d:f4:b2:fb:e5:73:bb:b1:77:1a:3d:09:16:
         21:bc:78:7d:f1:84:cb:ae:60:00:ac:c1:b8:cb:21:50:c1:69:
         62:5c:50:40:21:2c:63:b1:7d:2a:6f:60:84:0c:4a:19:60:46:
         ec:aa:1d:87:7a:9a:6f:dc:0a:c5:19:bf:28:07:a8:70:f1:bc:
         f9:34:9f:b8:6b:8c:ef:a4:92:61:b9:10:47:97:38:22:32:67:
         f6:70:9f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:05:44 2026 by rpki-client