Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/8bd691ab-32da-3d38-8979-813d9a45a73c.roa
File:                     8bd691ab-32da-3d38-8979-813d9a45a73c.roa (raw, json)
Hash identifier:          ApKguH8MG1yMgABvKkRd7IAbfc28YZQHilYhA7Xq6V0=
Subject key identifier:   B1:CA:DE:AF:C9:E4:DA:B0:7F:CC:67:83:10:A9:07:39:75:5A:51:6D
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F4328584D8AC53BF32ACF2CABD88D5B00
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/8bd691ab-32da-3d38-8979-813d9a45a73c.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     399122
IP address blocks:        74.123.98.0/24 maxlen: 24
                          2602:fcd5:1a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:3b:f3:2a:cf:2c:ab:d8:8d:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=0952c0e8-f2eb-4568-84c0-4d835a2e9a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:97:68:5c:4e:fb:1e:19:e7:d2:cf:07:e0:e5:
                    49:1b:d0:cf:06:93:fd:d1:91:74:b4:cf:29:89:96:
                    a9:5a:ad:ad:74:5c:f7:3b:fc:ba:23:32:f6:b5:97:
                    db:2e:8c:cb:67:78:19:be:3c:27:6a:e7:34:d5:4c:
                    12:9f:9c:cf:10:9b:18:bd:dd:55:f6:f7:ee:aa:bc:
                    2f:39:37:4a:4b:06:ad:f2:25:13:58:79:8e:0a:ce:
                    2f:57:3b:18:24:f7:88:68:d0:03:64:f6:17:e4:c5:
                    61:6f:d1:5d:37:48:1e:b6:42:01:ec:ab:50:c7:6e:
                    28:3c:54:55:c0:7d:6c:57:43:b2:7c:0c:74:6f:53:
                    cd:cd:2e:b3:08:7b:5b:ae:7b:fd:4f:61:5c:01:fb:
                    70:4d:49:51:30:73:20:33:c4:27:d4:bc:46:df:0a:
                    83:e1:aa:cd:2e:8a:19:51:7b:dd:8a:71:f6:75:c9:
                    15:1b:92:53:6e:44:d9:26:1e:5a:cc:82:9f:4c:e0:
                    e7:01:6d:81:99:60:0e:fa:8d:b3:a6:d2:c1:ad:9d:
                    98:57:f0:94:f9:23:8c:b5:1f:a2:da:fb:0b:ce:6a:
                    38:88:b4:8b:2f:f8:d0:9f:be:97:80:2d:e2:e6:ef:
                    c6:ce:a5:96:08:b7:fd:51:cb:4a:2a:23:ed:c7:13:
                    b0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CA:DE:AF:C9:E4:DA:B0:7F:CC:67:83:10:A9:07:39:75:5A:51:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/8bd691ab-32da-3d38-8979-813d9a45a73c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.98.0/24
                IPv6:
                  2602:fcd5:1a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:4f:f6:03:2b:41:e1:d9:c8:89:ab:74:30:4d:7f:a6:6a:ae:
         7a:c1:98:db:af:02:ad:54:98:16:fc:d0:a5:1b:de:2f:c7:43:
         03:dd:8a:34:51:d6:e3:0b:f8:a7:98:53:a0:18:cb:83:57:7e:
         17:15:09:aa:e2:e6:c9:95:20:41:60:e9:2a:22:aa:b8:da:2f:
         a6:08:c4:9c:ef:0a:37:5d:6b:87:c8:13:fa:0d:2a:73:2b:1f:
         a7:93:9e:4f:53:27:93:f8:33:34:90:eb:87:d0:2c:0c:2a:e6:
         92:10:41:16:8f:9d:86:27:3b:86:3d:7d:77:7b:d8:6c:9e:83:
         63:b5:b2:eb:1c:30:c2:e0:1c:73:81:aa:4b:09:1a:6f:7c:8d:
         a2:5c:d7:65:aa:cd:f3:b1:7e:3e:37:4d:ea:b3:79:9f:16:f0:
         b8:c3:67:89:38:10:c0:3c:0c:ea:70:9c:1c:3a:bd:81:67:d7:
         5e:9c:99:28:36:1a:81:20:d0:b2:12:27:97:20:eb:0d:5b:2b:
         44:25:2a:04:54:1f:37:15:62:8b:c1:a3:66:a1:6e:77:2c:a4:
         3c:2d:69:c3:75:bc:d9:a9:66:53:c4:21:aa:29:3d:c6:76:51:
         ce:50:4a:cf:b6:e0:42:d1:33:23:22:65:ab:52:b3:43:b1:c0:
         9c:e5:fc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:37:28 2026 by rpki-client