Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/71c49c68-f4fa-33f0-ac53-bdc737e2e8f7.roa
File:                     71c49c68-f4fa-33f0-ac53-bdc737e2e8f7.roa (raw, json)
Hash identifier:          2Qa/LXrJ5qWMcDA2wcgtX5g2capVfbsAPWnMfF7mp3E=
Subject key identifier:   BD:36:7F:FD:06:70:3D:68:84:CE:5F:1B:7F:FF:0F:9B:B9:7D:90:3F
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584D1B1A11B9693B52FA8FDD4E00
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/71c49c68-f4fa-33f0-ac53-bdc737e2e8f7.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     394437
IP address blocks:        74.124.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:11:b9:69:3b:52:fa:8f:dd:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=853d2d6c-c84c-4134-88d1-4f47cadd647a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a3:e7:7d:d0:8e:b0:aa:75:ff:c6:6f:3e:c6:
                    5c:00:b1:d9:c9:57:be:5c:9f:76:20:8c:e3:d3:9f:
                    62:d7:62:5c:3d:57:db:ce:d3:e7:8b:ef:25:14:e4:
                    9c:8b:a3:3a:e3:ef:e2:b3:53:d4:e5:cc:9b:a7:ca:
                    18:5b:a4:43:3d:45:44:5a:97:28:21:7b:37:66:f7:
                    10:93:97:d3:8d:69:bb:00:b5:57:87:01:69:43:50:
                    d8:07:53:f9:9f:55:f1:7a:79:a8:29:c2:fd:6b:0d:
                    08:58:76:b9:19:43:13:a5:85:b7:68:44:61:bb:2a:
                    42:8e:b7:29:36:5d:89:17:62:45:c1:95:c7:bf:68:
                    e1:f5:57:4f:84:eb:a7:49:7a:12:44:a6:4e:aa:4e:
                    95:c1:2a:d7:09:95:87:76:58:52:3b:fa:31:49:df:
                    01:f4:48:b8:7e:d0:6d:36:b3:63:8f:06:a6:45:6e:
                    f8:0a:8a:cb:69:16:04:b0:ef:69:05:97:44:ab:56:
                    16:e9:af:9a:87:7a:14:a9:43:68:67:e4:90:08:59:
                    7f:de:b0:8b:84:06:0a:84:4c:55:33:f9:c9:45:56:
                    e4:f0:9d:2a:b0:d5:20:53:3a:1c:7d:bc:00:b8:10:
                    11:58:80:db:1a:93:53:61:e0:85:a2:ed:0f:28:9a:
                    c8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:36:7F:FD:06:70:3D:68:84:CE:5F:1B:7F:FF:0F:9B:B9:7D:90:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/71c49c68-f4fa-33f0-ac53-bdc737e2e8f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:21:54:d2:0a:97:74:ad:cd:ed:92:e6:02:50:55:0c:b4:cf:
         1a:2e:83:0d:63:24:40:1d:59:01:6c:e3:03:61:13:94:5b:ea:
         55:23:2e:c3:58:e4:c5:29:30:db:19:a4:85:32:ed:2c:82:30:
         91:45:a0:bb:89:2a:f6:50:f4:9c:6a:2b:40:ee:f2:4c:f2:0d:
         84:04:49:d2:96:83:12:83:94:24:75:11:c1:27:fb:6c:ec:e6:
         37:0e:c9:f7:c2:f8:96:6e:c3:f1:ab:9b:30:ef:6f:e9:9e:d6:
         39:be:3d:f5:90:4c:c5:ff:8e:04:65:43:31:d2:57:70:c9:c1:
         4c:a6:2e:47:eb:12:42:8e:91:00:e7:6a:7e:cf:ce:91:78:e1:
         b7:cd:77:f1:2a:d5:3f:f7:81:00:96:08:16:7d:72:59:31:78:
         f3:99:a6:f9:5e:e3:65:bc:c8:59:bc:81:8b:d3:2e:aa:a8:2d:
         52:a6:2d:49:9a:0d:06:99:e6:58:8f:91:c8:aa:d3:1b:76:21:
         d6:cc:94:18:7b:af:ba:0a:5b:08:9a:dd:d4:d4:3f:66:73:9a:
         76:d8:ff:32:57:57:26:f3:f6:c7:db:af:a5:4b:8d:de:0e:db:
         59:6e:ba:e3:c8:a9:ea:de:1c:a8:5f:4c:8a:20:3a:bc:10:48:
         62:2a:4b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:39:26 2026 by rpki-client