Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/0434ae35-d285-3b68-bda0-804f0386c6a6.roa
File:                     0434ae35-d285-3b68-bda0-804f0386c6a6.roa (raw, json)
Hash identifier:          YdCTo0Q9fVur2kAQm1Ajzj7vNO/cUb/EmcYjr6fOS+c=
Subject key identifier:   B5:4C:61:6C:6E:4E:D2:52:D1:84:F9:D0:7A:A7:77:52:6F:1B:4F:C9
Certificate issuer:       /CN=c7b9cd73-4753-42b2-a13f-2213f0bfe4f8
Certificate serial:       010D0C9F4328584F4D83802058EE9DAB15253E80
Authority key identifier: A8:15:D6:9B:2D:72:3E:B8:83:15:9A:96:34:2C:FF:91:2A:0B:3F:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/0434ae35-d285-3b68-bda0-804f0386c6a6.roa
Signing time:             Sat 26 Sep 2026 11:57:39 +0000
ROA not before:           Sat 26 Sep 2026 11:57:39 +0000
ROA not after:            Fri 25 Dec 2026 12:57:39 +0000
asID:                     203
IP address blocks:        74.115.129.0/24 maxlen: 24
                          170.137.223.0/24 maxlen: 24
                          198.160.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4d:83:80:20:58:ee:9d:ab:15:25:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b9cd73-4753-42b2-a13f-2213f0bfe4f8
        Validity
            Not Before: Sep 26 11:57:39 2026 GMT
            Not After : Dec 25 12:57:39 2026 GMT
        Subject: CN=f238190b-3cc6-4d11-997f-996f413484e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2c:5b:22:4a:94:35:6a:bf:e6:11:86:cf:7f:
                    d0:2c:26:6f:16:ea:35:6f:ae:b2:6d:fc:d9:2b:14:
                    3d:10:f8:47:89:b7:7d:54:65:47:93:27:32:03:53:
                    61:80:81:33:07:99:20:9d:12:99:4f:96:ab:c5:c1:
                    4c:e2:fd:91:84:9e:d0:44:08:5f:8d:be:6c:fe:2f:
                    fa:d3:65:61:c7:80:47:c5:8f:cf:8b:8f:42:fe:c3:
                    99:9d:74:79:84:30:a4:d1:9e:74:be:07:d5:06:54:
                    32:cb:03:df:b3:0c:aa:4d:49:34:18:8b:b3:6b:ae:
                    9d:83:af:99:da:07:22:ae:c5:1a:7a:59:1e:cb:08:
                    5c:82:e3:89:3a:de:11:25:a9:2a:ea:4f:e1:7f:c8:
                    e0:a5:2e:42:9b:86:63:41:49:23:8f:71:c8:24:9f:
                    56:41:a8:f0:15:e8:b7:be:65:04:3e:6b:b6:3a:b0:
                    26:3e:8f:20:fc:d2:24:37:87:8e:02:81:94:18:b4:
                    5e:0f:d0:3c:43:d8:37:9d:5d:af:5a:37:a8:5b:7c:
                    61:b6:0b:8c:b3:13:d2:39:ed:23:f6:11:47:cd:ec:
                    c1:21:9e:e4:49:cd:59:be:b2:da:97:21:cb:25:66:
                    f0:fe:f9:a8:f7:06:a6:28:5a:6b:92:3a:2e:ac:1f:
                    a4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4C:61:6C:6E:4E:D2:52:D1:84:F9:D0:7A:A7:77:52:6F:1B:4F:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/0434ae35-d285-3b68-bda0-804f0386c6a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.crl

            X509v3 Authority Key Identifier:
                keyid:A8:15:D6:9B:2D:72:3E:B8:83:15:9A:96:34:2C:FF:91:2A:0B:3F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.129.0/24
                  170.137.223.0/24
                  198.160.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:2f:09:b1:12:bb:02:5f:40:67:dc:46:5b:95:41:98:d6:9f:
         4f:47:0c:2e:cf:ee:da:25:0e:e6:6e:23:f8:cd:52:65:d6:98:
         00:21:a1:09:04:b5:c3:a9:ee:8e:01:68:d9:df:06:6b:43:42:
         fd:d6:2c:d8:35:93:80:0d:5f:66:da:5c:55:97:ef:12:f3:65:
         1a:a9:6f:f0:84:d1:82:dc:8c:15:1f:b6:30:5d:c3:81:fd:9a:
         88:ed:f2:1f:28:41:53:b4:95:9e:59:df:4d:95:05:c6:76:b4:
         b5:44:8f:f0:8d:fd:1e:fd:0b:b9:3b:87:9f:83:db:ba:2c:b6:
         8e:e0:92:b0:7a:ba:5e:30:e6:33:94:67:70:c4:db:a5:4e:ba:
         f4:dd:7d:04:0e:3e:04:60:cd:f2:d3:67:99:74:81:ad:0b:24:
         b2:6b:23:91:3a:23:29:7b:3d:b4:82:29:c5:a3:36:fe:17:d7:
         80:f4:17:c4:aa:37:29:66:01:69:f3:e5:3d:07:24:95:be:97:
         21:77:65:11:f3:05:53:93:c0:5f:ec:36:98:8c:ea:22:9f:6b:
         36:c8:df:46:60:27:74:b5:84:10:ac:23:ed:6b:b4:cd:2c:95:
         3e:e6:27:8f:16:7a:0a:f3:e6:39:38:30:7f:d1:fe:3f:b1:7b:
         fe:1b:50:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:08:13 2026 by rpki-client