Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/f984caa1-48ee-3a26-8d40-a1b14e45f110.roa
File:                     f984caa1-48ee-3a26-8d40-a1b14e45f110.roa (raw, json)
Hash identifier:          WlB0tAvDl48ClpH5rLCz00N7L2dqyUQo2kmZoFmytIU=
Subject key identifier:   E6:58:C8:39:6E:4D:9F:B7:4E:50:5F:00:D9:AB:A7:06:A7:16:64:A8
Certificate issuer:       /CN=74a39a1b-8414-451d-8610-7af7342dc8f6
Certificate serial:       010D0C9F4328584CB551CB260186DC947ECEBF74
Authority key identifier: 88:75:5D:06:26:22:ED:1A:A5:7A:D7:55:4B:CC:AE:C4:D8:8C:3A:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/f984caa1-48ee-3a26-8d40-a1b14e45f110.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     21976
IP address blocks:        192.16.204.0/24 maxlen: 24
                          192.108.106.0/24 maxlen: 24
                          2620:45:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/74a39a1b-8414-451d-8610-7af7342dc8f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/74a39a1b-8414-451d-8610-7af7342dc8f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:cb:26:01:86:dc:94:7e:ce:bf:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a39a1b-8414-451d-8610-7af7342dc8f6
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=1f96dbf4-b17a-43a8-85f4-3fc48315ee7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:25:d7:57:57:16:ce:7a:71:3a:4b:47:d9:85:
                    a4:bc:9b:88:42:28:bc:0c:19:7d:56:09:4f:09:7a:
                    f7:f0:b1:31:e2:62:c7:9e:bc:b1:7e:a2:0d:64:b5:
                    f7:b3:ae:e1:01:40:c6:a4:f3:db:6c:a8:43:f8:81:
                    50:4d:65:8a:29:8f:9e:78:94:20:9f:e0:b9:73:b3:
                    06:20:2a:7b:f8:93:45:56:03:84:bb:1b:1f:c6:54:
                    ea:57:02:05:ec:12:16:6f:46:03:99:e5:df:0c:a3:
                    2b:98:ad:63:80:58:f8:b1:29:40:4a:89:fd:f1:c8:
                    11:2f:41:18:25:6b:38:42:e6:f8:5e:79:7d:a6:c5:
                    ad:da:0d:af:29:6c:f5:91:9f:63:b2:13:14:6b:76:
                    12:2f:66:28:00:25:49:c4:93:1f:2c:b0:f6:fe:05:
                    64:33:36:2d:e2:47:84:e1:c8:eb:ba:1b:ee:a1:26:
                    56:f4:76:13:35:8c:62:9c:a2:f8:ad:ee:e9:b0:61:
                    0b:e1:a7:d5:8e:2a:1f:73:da:86:be:83:da:e9:3c:
                    46:82:c8:cc:b9:8a:fa:92:30:b0:f3:8f:9b:ab:d5:
                    21:38:90:1b:ce:05:fd:fa:c3:0f:dd:6f:df:5c:91:
                    04:65:2d:d2:48:4c:b3:2a:42:6f:28:07:93:b8:d0:
                    83:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:58:C8:39:6E:4D:9F:B7:4E:50:5F:00:D9:AB:A7:06:A7:16:64:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/f984caa1-48ee-3a26-8d40-a1b14e45f110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/74a39a1b-8414-451d-8610-7af7342dc8f6.crl

            X509v3 Authority Key Identifier:
                keyid:88:75:5D:06:26:22:ED:1A:A5:7A:D7:55:4B:CC:AE:C4:D8:8C:3A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.204.0/24
                  192.108.106.0/24
                IPv6:
                  2620:45:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:6a:fc:e9:65:f9:08:5b:66:a4:57:94:f6:8b:d0:15:cd:74:
         9c:c0:80:47:2c:49:8f:e1:98:58:33:d8:ab:c8:10:ba:68:a1:
         72:a0:f0:bd:19:7a:50:fd:f8:55:9a:c2:06:3b:37:a2:ba:e5:
         0d:ae:d4:a4:db:af:51:e6:93:09:40:d8:83:a6:68:af:68:2b:
         77:cc:cc:1e:29:fe:3a:d4:9a:97:40:1e:6c:c6:12:ef:56:98:
         ad:16:d9:52:25:10:7e:33:48:e5:d8:0d:2e:c7:dc:33:df:3a:
         db:55:5d:36:1a:8c:d5:4e:d6:90:21:ff:fd:45:ab:51:b0:d1:
         fa:16:6d:25:78:29:5d:cf:c7:9f:1e:5a:ab:19:2a:07:18:d3:
         95:98:93:4d:25:ae:13:a9:50:76:a9:7b:6a:c8:07:25:9a:d9:
         6d:9d:b1:e8:5d:9c:0a:b3:d2:71:12:78:c7:8a:36:2f:24:e3:
         b2:9c:07:fc:fc:5c:12:f6:4d:0c:03:1d:50:e9:0e:d4:44:03:
         7f:12:fd:62:1c:79:99:82:e3:0b:a0:30:52:c4:a3:87:3b:f1:
         94:d0:57:7c:80:13:00:67:22:d7:cc:8c:d5:35:67:bf:84:da:
         8d:75:40:5a:0d:32:fa:de:1c:31:0a:1e:21:3e:11:26:a3:ba:
         65:eb:df:45
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:47:31 2026 by rpki-client