Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/a3a8d2ca-d72b-33db-aa7f-201b26852588.roa
File:                     a3a8d2ca-d72b-33db-aa7f-201b26852588.roa (raw, json)
Hash identifier:          Co+7yvgyZMLf/Dn5WemCE0sVJ+kQ8QXaZg7YJP7TbbE=
Subject key identifier:   2D:32:71:09:DF:7F:8A:68:4A:0A:FD:4B:64:C7:D7:B2:F5:9C:68:60
Certificate issuer:       /CN=abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd
Certificate serial:       010D0C9F4328584F20F7B714427FB95C252F8980
Authority key identifier: 2D:2F:8B:20:43:CA:0F:03:65:13:72:30:29:D2:27:D7:3E:E9:77:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/a3a8d2ca-d72b-33db-aa7f-201b26852588.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     3688
IP address blocks:        74.117.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:b7:14:42:7f:b9:5c:25:2f:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=411296f4-3511-4db8-bd28-b371ab8bb993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cf:2b:f5:98:e8:ab:0f:b6:06:fb:c6:91:a4:
                    a3:0e:22:68:42:05:25:76:32:ce:b0:2a:24:51:ea:
                    e4:21:4d:4b:e6:90:13:af:77:c0:39:2d:cc:a9:ec:
                    2b:61:14:98:ae:bf:c0:26:75:4b:00:70:03:42:aa:
                    f7:49:6e:8e:16:4f:9a:ab:6c:10:a4:8b:a1:de:ef:
                    85:0a:0b:09:f8:df:51:4a:50:a6:1a:d2:d2:8a:ee:
                    43:b2:9f:06:6f:d0:38:1a:6c:95:a2:d9:35:ba:d4:
                    06:99:a1:bc:f6:b0:6e:26:24:60:aa:c3:92:31:d5:
                    3f:37:3e:92:62:0f:c3:1c:4e:04:79:ff:bc:f1:9f:
                    76:65:b3:0c:13:ed:22:63:3f:e0:27:53:c3:a2:60:
                    bc:a9:bb:66:51:e3:42:18:d5:b2:4b:80:a1:50:fb:
                    7e:a8:44:d9:10:48:f5:a1:9e:e1:e6:76:1b:f8:17:
                    94:b2:83:10:0a:6e:f4:70:f8:66:20:c0:23:87:46:
                    77:01:ef:17:bf:31:b5:e0:3f:5b:f7:1a:6a:88:91:
                    2b:ac:6c:1e:d4:ec:c8:c4:53:ad:cb:38:66:ea:14:
                    a4:4f:46:11:61:93:c7:a9:3c:54:8b:ca:6d:d0:2e:
                    40:8f:71:e7:07:38:27:e7:c8:24:0c:dc:0c:17:4f:
                    40:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:32:71:09:DF:7F:8A:68:4A:0A:FD:4B:64:C7:D7:B2:F5:9C:68:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/a3a8d2ca-d72b-33db-aa7f-201b26852588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.crl

            X509v3 Authority Key Identifier:
                keyid:2D:2F:8B:20:43:CA:0F:03:65:13:72:30:29:D2:27:D7:3E:E9:77:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ed:28:b0:f8:cd:63:a2:23:b6:b9:ed:6d:99:24:cd:be:99:
         31:45:0c:e4:70:89:e1:8f:16:35:9f:ba:70:b2:d3:44:17:ad:
         42:49:07:39:18:6c:07:5f:6f:6f:42:3a:fc:fb:93:e4:92:f3:
         13:72:35:d3:9b:18:86:6e:85:65:97:61:5a:8f:bc:4f:26:3b:
         1d:d7:17:fe:88:ce:3c:00:55:6c:1c:98:7f:b4:ce:85:1c:cd:
         39:6f:31:2a:df:9b:94:74:26:0d:e8:9e:0c:54:27:99:47:24:
         82:23:a1:4e:c0:2c:17:6c:1a:6b:c9:af:d7:69:3b:ce:34:91:
         77:ec:13:3a:30:d2:b1:0a:5c:1e:70:03:64:db:df:f2:af:46:
         e1:b0:ca:17:0f:a8:c0:58:5e:cd:49:89:29:72:b5:2c:13:77:
         b8:c5:51:47:4d:4a:8c:e8:fc:95:2b:10:0f:f1:35:25:8a:59:
         4c:36:37:de:7f:18:94:ae:b4:5b:23:fd:02:b8:ee:67:e2:d8:
         04:f6:12:e4:05:04:36:52:05:ba:bc:72:01:20:86:b7:a5:79:
         98:41:9c:8d:f3:a1:8e:b4:8e:ff:d8:4b:32:5b:55:e4:28:48:
         17:65:f9:a2:9d:d8:0f:3d:bd:85:d5:33:e7:f6:9e:2d:a1:9e:
         f9:cf:2e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:45:29 2026 by rpki-client