Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c/dd104210-a1f2-3673-a4e0-6d63ee33b3a8.roa
File:                     dd104210-a1f2-3673-a4e0-6d63ee33b3a8.roa (raw, json)
Hash identifier:          G1B6wjZ1CRY7xattLRx5KBNlwa7wprMvRu2RQzTk2q4=
Subject key identifier:   C6:86:B3:59:D7:2C:A9:76:0C:A1:64:7B:D1:75:EB:26:62:B0:D1:C2
Certificate issuer:       /CN=2f4d7166-541c-4452-8f3e-02dd3cd83b9c
Certificate serial:       010D0C9F4328584CF17CAD6F4DA856C42BC70B00
Authority key identifier: C4:58:50:7D:E2:F0:C8:75:B8:FA:1F:D5:43:DE:77:2A:E2:7A:3B:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c/dd104210-a1f2-3673-a4e0-6d63ee33b3a8.roa
Signing time:             Sun 22 Feb 2026 03:15:40 +0000
ROA not before:           Sun 22 Feb 2026 03:15:40 +0000
ROA not after:            Sat 23 May 2026 02:15:40 +0000
asID:                     49425
IP address blocks:        74.115.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c/2f4d7166-541c-4452-8f3e-02dd3cd83b9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c/2f4d7166-541c-4452-8f3e-02dd3cd83b9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:7c:ad:6f:4d:a8:56:c4:2b:c7:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f4d7166-541c-4452-8f3e-02dd3cd83b9c
        Validity
            Not Before: Feb 22 03:15:40 2026 GMT
            Not After : May 23 02:15:40 2026 GMT
        Subject: CN=97be6329-da83-4356-aa27-d15d0a17ad21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9c:c6:15:cd:4d:b4:bb:59:be:8e:a6:7b:54:
                    3e:db:51:cb:7c:51:30:41:4f:af:74:20:ff:c1:20:
                    a3:e6:f6:f6:f9:b5:6b:e5:f7:ac:de:29:f8:0c:24:
                    d8:a3:9c:41:24:a2:4a:aa:e7:8a:e5:97:b8:b7:7f:
                    10:d7:b2:4c:54:75:88:12:a0:ff:2a:4d:1f:01:00:
                    c9:76:62:06:c1:76:9e:f3:30:1d:5b:7e:d2:76:20:
                    80:0e:a7:90:0d:0f:6c:b9:cd:19:59:53:89:e1:e1:
                    ac:aa:8f:50:15:83:00:26:f6:8d:29:3c:2e:65:2c:
                    26:93:9e:1d:bf:cf:fe:c6:36:98:c2:68:50:e9:42:
                    23:b2:f5:f3:cd:4a:55:bc:36:33:eb:59:59:b2:88:
                    83:42:a8:e9:e3:e4:ce:03:d4:8f:f9:bf:3b:4e:f5:
                    31:29:18:91:3d:48:ba:54:44:d7:5f:9e:4f:31:fd:
                    fe:a9:d2:27:0e:1f:5d:54:52:35:ba:dc:db:83:bf:
                    ba:16:a2:c1:f0:aa:1b:51:28:17:c0:4b:d5:fb:dd:
                    c3:b7:ec:93:51:82:7d:8d:fe:76:5e:86:92:ab:fe:
                    33:15:36:8f:ff:93:0c:26:96:4a:aa:4e:0d:f2:cb:
                    4b:e6:02:e9:3b:18:66:0f:ac:50:4b:37:5a:7b:40:
                    0b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:86:B3:59:D7:2C:A9:76:0C:A1:64:7B:D1:75:EB:26:62:B0:D1:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c/dd104210-a1f2-3673-a4e0-6d63ee33b3a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c/2f4d7166-541c-4452-8f3e-02dd3cd83b9c.crl

            X509v3 Authority Key Identifier:
                keyid:C4:58:50:7D:E2:F0:C8:75:B8:FA:1F:D5:43:DE:77:2A:E2:7A:3B:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:0c:77:8d:5e:29:47:03:81:24:e5:9a:cd:ea:56:31:aa:ff:
         0d:e7:7d:53:7f:31:e0:15:94:2d:81:41:9b:90:8f:2c:11:53:
         ed:26:44:1d:64:6c:06:56:08:72:20:3f:ab:cd:77:5e:c4:eb:
         ad:c1:38:d3:96:db:0c:36:fc:d8:5a:3c:62:e0:0d:06:8f:da:
         22:76:04:f7:ae:58:b2:47:33:da:ec:fe:5c:b6:ff:b1:ef:b3:
         04:80:59:df:f9:85:c3:22:42:ee:3d:e4:20:9b:0e:7d:80:fa:
         ac:b2:52:cd:c4:b1:65:07:ef:2e:0d:c2:95:bb:65:cf:18:4b:
         b7:11:9e:b8:1a:f8:ef:70:dc:41:2e:04:72:1d:93:4d:60:5f:
         2c:1a:9a:d6:1b:4d:83:55:88:ab:cd:ca:5c:ef:7b:0a:26:a7:
         65:13:e4:89:d9:1f:6d:27:4a:a9:51:22:98:b3:b4:28:e5:f8:
         ea:ac:b8:c0:92:73:a0:41:72:ba:fd:ed:63:79:3a:f2:03:43:
         0c:87:30:b3:5a:3a:f0:8f:d5:1b:88:cb:73:56:66:69:e5:85:
         cb:ce:9d:dc:a0:28:8d:49:6a:fe:eb:7c:b9:73:f7:ad:0e:9f:
         06:96:6c:62:aa:74:2f:82:7f:69:1d:fb:1d:66:54:4c:74:bf:
         72:d3:42:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:40 2026 by rpki-client