Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/78ab4a2b-659f-39a2-994d-1b8d86e741bf.roa
File:                     78ab4a2b-659f-39a2-994d-1b8d86e741bf.roa (raw, json)
Hash identifier:          tIQQKJP/0Ru8xwaf6pY56VJsHfhSyBzhokog2ZOGWJk=
Subject key identifier:   AB:3B:36:D7:C0:29:78:3A:B0:7E:8B:9B:45:34:87:CD:E5:63:04:5D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D09127E9FB1B65E2F9B2D8500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/78ab4a2b-659f-39a2-994d-1b8d86e741bf.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397239
IP address blocks:        204.74.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:7e:9f:b1:b6:5e:2f:9b:2d:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=f8610d2a-1c0e-4088-a695-cf29943f6e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a1:6a:62:84:0c:04:64:83:a8:18:c9:b2:f6:
                    03:d7:4c:14:c9:c6:4d:4d:bb:6b:92:97:42:ec:c8:
                    e4:13:39:1d:ca:c2:a5:b0:d5:80:c9:df:c8:56:8a:
                    5d:40:d4:08:3a:85:fb:0d:3f:f7:7b:fa:b3:0b:63:
                    82:66:5f:11:db:a7:9e:40:00:72:d4:52:df:60:2e:
                    bb:89:76:64:8f:06:b1:83:01:63:e8:5e:d3:72:5c:
                    e9:ba:06:30:a2:16:60:9c:4f:65:56:a8:75:6c:b8:
                    a3:42:17:37:d4:d6:c2:2f:6e:a8:be:40:31:6f:f1:
                    22:a5:bb:32:24:13:ae:b1:a4:15:64:ee:58:94:cc:
                    b1:c1:69:02:8f:68:d3:f5:b4:63:e1:64:17:39:4d:
                    2b:8b:ad:86:fd:b9:a5:a4:d6:e0:91:15:f0:60:b3:
                    11:20:53:c5:0d:59:37:6e:e1:82:91:29:ac:7e:5d:
                    db:2a:c5:53:cb:09:78:8a:33:50:aa:51:52:72:80:
                    e9:42:51:ae:39:ea:e9:b5:8b:2f:20:43:2d:96:96:
                    f6:30:45:90:c6:ba:5d:88:65:3e:45:da:65:02:77:
                    a5:66:3f:79:04:3b:78:bb:bc:96:9b:98:ef:cc:33:
                    2a:e1:77:54:86:30:cb:64:7e:c7:6d:f7:bd:b4:72:
                    c6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3B:36:D7:C0:29:78:3A:B0:7E:8B:9B:45:34:87:CD:E5:63:04:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/78ab4a2b-659f-39a2-994d-1b8d86e741bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:3c:66:da:8e:43:7f:29:c1:79:87:5b:47:83:a7:7c:a1:4e:
         9a:55:7a:65:a6:45:cf:e8:36:dd:e5:55:96:1e:f6:88:34:95:
         e9:49:ce:5c:86:eb:4c:40:c4:c8:ac:d4:65:22:87:c6:53:9d:
         b3:63:d4:63:b1:fc:8c:3f:21:e8:10:48:27:41:87:59:f5:02:
         81:3f:2e:f9:eb:96:49:0b:49:ab:db:fa:de:b6:20:ae:20:45:
         d7:65:ab:26:81:6a:da:a9:9d:13:61:15:d6:b4:80:eb:10:b9:
         be:df:d5:7f:b7:ab:1c:d3:1a:e6:26:42:40:42:29:37:12:db:
         41:47:16:12:28:08:77:56:85:b3:67:04:bf:39:90:4c:70:e9:
         f4:40:93:9f:9c:5e:ab:c7:a3:bf:33:92:4b:ba:f2:79:db:12:
         43:da:ac:41:f9:dd:b5:a5:4c:45:59:1c:2d:be:43:9f:cc:e2:
         a4:63:a4:5b:b9:a3:69:14:a7:f2:df:23:95:4a:79:98:23:9c:
         21:df:f5:0a:8c:73:f3:ca:ec:3f:fb:21:54:f2:45:54:0b:e2:
         82:81:0f:68:0d:fd:ba:59:b7:b7:c3:63:36:8f:8a:44:62:f9:
         a2:56:cd:19:1c:11:23:59:18:16:db:5b:4e:21:4d:45:b0:d5:
         52:84:87:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:49:48 2026 by rpki-client