Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cf70d300-25bd-30f4-a6fd-23a33417314e.roa
File:                     cf70d300-25bd-30f4-a6fd-23a33417314e.roa (raw, json)
Hash identifier:          /kpjsm/mgmKGNKBIBjypBvbOU3T4HUh5k/EXjFwLTWU=
Subject key identifier:   D2:58:E6:12:D5:70:22:0C:BF:5E:30:99:A3:CB:A8:18:2F:E0:CC:39
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584D8C2A9E2622A8A91FA9110D80
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cf70d300-25bd-30f4-a6fd-23a33417314e.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     397003
IP address blocks:        76.74.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:9e:26:22:a8:a9:1f:a9:11:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=92dbc3a5-e765-4781-9eea-706259f16fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2b:71:78:0c:cc:98:26:8d:74:72:2c:31:9f:
                    07:a4:93:8d:9a:e6:b2:3c:a6:53:69:33:32:50:96:
                    b6:a1:b6:b5:9a:5f:ff:e4:ee:26:00:d9:5f:83:e7:
                    3b:6d:7b:ee:86:9a:41:89:11:c1:fd:4b:91:62:30:
                    2d:f1:1f:ca:42:37:df:9e:7b:dd:13:0e:83:fc:ff:
                    d6:c3:7b:24:9c:25:a0:ec:04:bc:ff:e9:21:d4:d1:
                    1d:13:9d:07:f3:55:4e:cc:59:e9:35:97:dc:0a:2c:
                    02:76:bf:0c:af:7b:95:75:d7:a1:42:4b:7a:bb:f5:
                    44:2d:3f:72:a9:7b:7a:d1:7a:c2:0c:66:0b:e3:de:
                    c6:78:a8:78:b9:38:36:68:b8:8f:02:ba:7b:c2:ee:
                    00:1d:35:52:65:3c:b2:72:aa:d6:63:1b:13:34:3f:
                    4d:4d:95:5e:28:b0:6e:22:cd:c1:29:71:eb:10:20:
                    73:ed:3f:76:3c:ad:e7:57:2b:19:78:59:31:7b:9d:
                    2b:5c:03:1a:9c:68:4f:d6:80:9f:38:1c:25:db:f7:
                    f4:4f:1c:c3:5e:4f:d8:26:71:9f:3e:61:7d:d0:16:
                    92:9c:f6:52:94:17:ef:2a:17:fa:c5:78:2b:b2:03:
                    2f:ba:24:a3:af:79:af:a9:8b:aa:d8:07:57:ac:0c:
                    cc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:58:E6:12:D5:70:22:0C:BF:5E:30:99:A3:CB:A8:18:2F:E0:CC:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cf70d300-25bd-30f4-a6fd-23a33417314e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.74.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:11:da:bc:71:6a:93:f5:b3:a9:4d:e6:c6:7f:a4:76:e6:7d:
         f7:fa:dc:08:88:78:dc:6c:20:58:49:56:36:1d:2e:7a:10:d4:
         eb:ed:3a:91:c2:7e:aa:92:7b:47:b6:e8:96:13:fb:99:6b:54:
         40:29:21:0c:f7:64:31:c6:80:eb:db:d8:ad:1f:05:e8:35:e9:
         8b:8e:e5:aa:24:79:e9:c8:b3:b8:b8:3e:3c:f6:ae:b1:8a:7f:
         45:88:8e:d5:d4:ea:45:03:1f:8d:20:fe:61:97:39:e1:72:0a:
         0a:5a:2f:cd:6f:65:70:00:ab:ed:be:b8:65:3e:34:16:4c:85:
         d1:ac:e1:5e:95:55:1e:5c:7e:48:b6:36:f8:5d:26:2f:45:ce:
         cd:95:7b:ea:dd:55:02:8c:65:9b:d3:cd:4f:db:85:32:c6:55:
         67:63:f3:a8:7f:f4:b8:b6:48:d5:89:d5:82:c6:1d:02:e0:90:
         c6:2c:47:a9:56:8a:1e:21:f3:23:f6:85:eb:08:68:3f:a8:2f:
         05:a7:d0:4f:d9:4e:01:cc:48:a5:34:1e:f8:4b:ce:ce:16:fa:
         80:f6:fb:1e:cb:b2:74:72:71:29:05:ef:d7:cc:19:5d:e6:19:
         da:de:a6:fd:38:7a:f8:9a:da:bc:ca:bf:a8:45:77:98:2b:18:
         2e:7c:ea:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:02 2026 by rpki-client