Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1db32ab1-641c-330d-8f26-9316a8a7082a.roa
File:                     1db32ab1-641c-330d-8f26-9316a8a7082a.roa (raw, json)
Hash identifier:          d3bqWTgwjI0q6fUbQvjlsxQVf/VZ5pJbU4LO6XxHre4=
Subject key identifier:   EB:45:26:FA:0D:61:C5:02:EA:0A:AB:14:5F:89:49:F9:CF:62:46:3F
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584D1B1A11E77B3BD8CD0486CEC0
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1db32ab1-641c-330d-8f26-9316a8a7082a.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     394437
IP address blocks:        74.124.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:11:e7:7b:3b:d8:cd:04:86:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=1a60aa5b-12d1-4ab0-829f-721a4ebc9cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fa:6d:7e:c3:03:d9:ec:88:48:14:8f:dd:a8:
                    b1:5b:24:9f:5b:30:4d:0e:55:5e:bb:2a:88:47:43:
                    e7:8f:a7:15:5a:0f:1c:af:c6:6e:23:a5:5a:ed:7c:
                    da:d8:ad:54:71:00:4a:34:38:2b:69:23:c6:de:27:
                    49:1c:55:c7:6d:c4:a8:fc:ab:ea:6e:7a:64:9e:b5:
                    f5:8d:b0:0e:72:54:c7:59:4d:d7:33:cf:0b:f9:8b:
                    2b:04:0f:52:50:36:c7:77:33:97:5d:8c:b0:72:d8:
                    59:a6:32:0e:f2:ce:d2:8a:1a:0b:87:fc:92:38:88:
                    4a:fa:7e:9f:ff:38:1c:9e:12:89:68:9f:94:ec:ba:
                    93:67:fb:a6:22:9a:2d:7c:5e:93:42:4e:fc:e2:60:
                    fd:0f:38:44:77:e3:4d:e3:75:11:80:33:67:72:05:
                    f6:c6:b0:3d:76:4c:29:ed:c3:c0:26:32:39:23:d0:
                    12:6f:9a:8a:a7:b7:a5:eb:74:69:26:a1:67:20:ac:
                    ef:d6:4d:11:49:e5:e9:da:55:ee:78:cc:0c:aa:30:
                    0b:96:bf:23:a6:a9:99:39:44:bd:08:80:73:53:c8:
                    c5:10:1f:19:fc:13:b9:4e:af:78:f2:65:af:c7:d5:
                    ce:7a:ca:52:e4:e4:2a:bd:22:c4:fb:19:6b:3a:35:
                    9d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:45:26:FA:0D:61:C5:02:EA:0A:AB:14:5F:89:49:F9:CF:62:46:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1db32ab1-641c-330d-8f26-9316a8a7082a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:5c:57:ee:0e:c7:c7:8e:84:f9:d7:e7:f6:d6:d3:bd:4b:1b:
         d0:45:8a:fb:4f:05:5b:c0:01:20:d5:26:31:52:21:77:e4:6d:
         44:82:c9:44:a5:17:f9:50:cc:74:53:43:fc:9a:23:1d:34:54:
         6a:44:72:a1:65:12:e9:8b:70:dc:68:b9:51:bf:a9:7c:87:03:
         d0:81:e8:09:04:fd:1e:40:d3:ab:0a:73:91:45:ff:83:2d:67:
         f9:8b:6d:ae:4d:97:7b:74:cc:62:c1:2a:3c:f4:62:ff:9b:69:
         db:0d:d7:7b:ea:0a:fb:8c:c5:c4:65:0c:ce:ca:fd:7b:b8:d9:
         22:7f:d4:5d:84:75:5e:ad:f3:e1:97:09:8d:b2:f7:0f:c0:ad:
         3a:a9:b4:21:84:bc:b9:ab:7c:54:8e:9d:7d:c3:61:3a:f2:71:
         17:c8:ea:bc:b5:e6:a1:9c:5c:b2:36:47:0e:2d:e5:7d:6d:67:
         2d:e1:85:c4:78:0a:7e:9b:1a:cf:d8:06:01:4b:bd:3a:4b:fa:
         a5:6d:2d:be:e3:60:84:5e:cf:8c:85:d3:ec:e3:8d:81:16:f5:
         56:73:2f:34:0e:14:a8:88:8f:a2:c9:e8:11:5d:33:f7:ae:c5:
         df:06:5d:f9:07:c7:3e:c5:19:85:e7:5e:ab:af:2a:9c:de:8e:
         52:3d:77:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:39:23 2026 by rpki-client