Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ec7f044b-67e6-396f-b7cd-3b58e31ace4c.roa
File:                     ec7f044b-67e6-396f-b7cd-3b58e31ace4c.roa (raw, json)
Hash identifier:          cQt71nKsTxCiRe3K6N0U/ULGLL6VahzDGf9isGbRGJM=
Subject key identifier:   0B:9C:C0:D0:0C:4D:F5:1E:66:00:D9:AD:A8:FB:FE:B3:F9:88:C9:1B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F497EB22A16EE3761A828A440
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ec7f044b-67e6-396f-b7cd-3b58e31ace4c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397227
IP address blocks:        204.74.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:b2:2a:16:ee:37:61:a8:28:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d2c501d7-2f31-4951-8c0b-088da120b3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:52:f8:68:3e:be:e0:e1:2d:62:9d:89:38:f0:
                    12:73:e5:4c:43:05:b7:86:48:6e:ba:34:3e:4f:f0:
                    91:63:ce:c1:04:ac:79:0d:c3:a0:e6:9c:20:9a:40:
                    7e:58:10:51:af:f2:6f:49:74:20:17:ca:8d:99:24:
                    da:37:3a:8d:dc:87:09:4b:d0:3a:7d:fa:8e:7e:80:
                    ce:6f:29:87:39:01:7b:0d:6d:75:42:29:9c:64:e4:
                    80:97:80:dd:b5:dd:08:e7:a7:f3:84:97:c6:f0:26:
                    21:d0:94:35:30:4a:4c:ed:91:bb:05:fd:b9:82:0d:
                    c8:0f:19:d9:e6:17:1e:84:8a:88:fd:49:e6:93:6e:
                    ee:a4:df:d6:68:1b:1b:c8:ad:ff:4a:fd:83:a0:c3:
                    6d:b5:db:84:d8:12:f7:2e:7b:39:b1:bc:14:59:54:
                    e9:b1:25:41:20:5d:32:d6:6e:8f:11:b4:23:49:9d:
                    fe:f9:53:fb:7c:ce:15:c5:1b:1b:d0:86:f2:1f:ec:
                    2f:a3:04:51:14:29:1a:a3:c9:7c:15:d9:68:97:39:
                    d8:d9:df:83:36:5c:b9:65:19:46:70:e8:12:a1:7a:
                    98:eb:84:09:9a:d8:3b:73:cb:bc:e2:f0:9a:b0:e5:
                    70:4c:51:80:57:a2:ee:bb:c2:44:e9:41:60:96:97:
                    00:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9C:C0:D0:0C:4D:F5:1E:66:00:D9:AD:A8:FB:FE:B3:F9:88:C9:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ec7f044b-67e6-396f-b7cd-3b58e31ace4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c1:18:e7:71:4c:fa:1e:fb:49:fd:d4:1a:ee:71:ee:ad:0a:
         5c:45:cf:c8:f5:ae:76:47:10:c2:b0:2c:9b:66:35:d2:c2:f1:
         af:ad:42:ab:2a:5e:f1:46:b8:ed:50:3e:c7:f4:4c:ac:97:d9:
         e8:e9:0c:aa:3f:0a:2d:ae:f9:ec:3c:ad:6c:21:aa:e2:34:7b:
         ac:9a:5a:08:14:5d:74:1c:49:d1:e8:9c:f0:28:59:20:7b:99:
         3e:23:07:1d:b8:26:88:ca:69:48:eb:8d:45:0b:cd:99:37:c5:
         5f:b7:fd:12:cf:c4:97:0a:dd:8a:84:f6:ba:b6:85:ee:8b:96:
         6b:cd:7f:e9:9c:0e:8c:45:00:65:26:34:83:e2:9f:88:ce:bf:
         89:c6:7b:b8:3a:78:a3:67:86:19:be:7b:12:43:73:b0:d7:98:
         b7:90:43:73:2e:f8:f9:fb:21:24:d2:a9:e5:26:ae:ba:ab:5c:
         48:91:23:d4:7b:09:99:bd:0b:7d:9f:7d:bd:30:16:a5:9a:aa:
         f4:45:22:7c:9a:f9:55:70:24:ff:c5:ef:3f:b0:4f:c6:c1:f7:
         24:f5:16:9c:67:a4:dc:bc:d4:c6:9d:ca:72:c7:10:67:d2:ab:
         c3:9c:75:d7:3d:46:7b:d2:11:50:90:b4:e6:3b:12:b5:c0:97:
         5a:32:c9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:20:34 2026 by rpki-client