Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9228fe02-659f-30a3-b6c5-8e28c469298d.roa
File:                     9228fe02-659f-30a3-b6c5-8e28c469298d.roa (raw, json)
Hash identifier:          5Nqlo6+n5mlyCrNSoWjuQ4nCwKcU6v9vHzJ/cV6PWz0=
Subject key identifier:   15:9B:1B:A5:F4:AF:63:D8:2A:C0:0C:A0:83:3B:CD:0B:76:9F:61:D4
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DA11AC4962DAFED47B893C1C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9228fe02-659f-30a3-b6c5-8e28c469298d.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     399163
IP address blocks:        204.74.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:c4:96:2d:af:ed:47:b8:93:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=dd918275-6a3d-4a46-8a92-07851ce7ca26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ad:17:e8:65:be:b1:b1:96:5b:fb:92:82:69:
                    05:35:e3:6f:c3:a2:95:36:ec:a6:c5:6f:0e:f3:3f:
                    1c:8c:60:15:82:8a:24:d7:30:20:90:fb:e2:ff:37:
                    a2:49:56:8b:26:23:af:d6:79:49:59:de:ec:6a:1f:
                    5c:ab:08:93:6e:cb:14:68:8c:d6:ba:e3:46:d8:1d:
                    45:f9:65:28:12:46:6a:fa:80:db:3f:c2:14:17:38:
                    42:f6:5e:99:d1:0d:5e:ae:3a:59:69:75:e1:71:52:
                    fe:b7:be:f9:bd:a7:ad:40:e5:37:cd:99:92:ce:c9:
                    3f:97:d2:b1:58:d1:1f:78:67:74:4e:db:46:fb:c4:
                    91:a7:60:c8:c7:78:43:98:fd:5c:dc:d7:09:eb:6c:
                    ea:f0:43:96:a8:f5:55:33:88:ce:6f:b6:00:fb:bb:
                    c7:58:73:60:65:ca:f3:90:71:c9:3e:75:6e:ce:d2:
                    9e:1c:04:2e:2b:32:a3:f2:d0:c1:78:ac:af:9f:81:
                    18:e6:d4:84:ff:6e:a3:fc:fb:c6:96:61:c4:66:94:
                    ae:e3:c4:20:b0:95:9e:27:ae:91:a0:4d:7a:05:a0:
                    d9:f7:e1:e6:51:65:f3:8c:81:5b:e4:e6:85:0e:a3:
                    01:2b:53:52:f6:1f:48:91:88:84:b0:c0:d0:82:c0:
                    c4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9B:1B:A5:F4:AF:63:D8:2A:C0:0C:A0:83:3B:CD:0B:76:9F:61:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9228fe02-659f-30a3-b6c5-8e28c469298d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:f9:7a:8b:c7:dd:f7:34:c7:8b:d3:4c:89:22:01:3d:cb:8a:
         c4:86:78:10:b1:58:48:c2:b9:6f:f5:6a:20:47:fc:00:ac:2a:
         90:a2:9e:4d:18:d7:05:c7:3c:f9:50:85:3b:1a:30:64:a6:33:
         f4:f3:e7:64:30:75:ec:ce:9e:bc:0b:c9:ba:b4:63:1d:d5:13:
         0d:8c:66:56:48:34:d8:e9:a4:d4:d5:e9:97:08:c2:66:7b:6e:
         83:5a:05:6d:48:ef:31:5e:54:b0:f0:7e:a8:55:de:78:a8:b5:
         93:7e:5a:17:ba:5b:3e:d9:46:c0:7e:72:fa:1c:82:7b:fa:3f:
         c4:42:92:32:e2:3c:39:ea:3b:4a:94:8d:60:3e:6b:64:0e:e4:
         7e:0b:69:74:39:f9:5d:a4:39:c8:53:79:ca:2f:a4:a3:17:d1:
         71:17:62:3c:0e:11:60:6a:49:f0:4b:38:c3:73:7c:50:08:39:
         e8:e1:ef:30:5d:ee:4d:cc:41:30:b3:04:e5:55:72:fc:c4:62:
         7e:63:3e:e7:ce:8e:77:37:b8:e8:80:fe:de:6f:52:da:2b:da:
         39:61:23:0e:d5:eb:d3:a8:fb:3c:92:dd:a0:40:0f:9b:28:ba:
         6a:6e:35:08:ac:0e:98:66:74:f0:e6:4d:04:9a:36:fe:a1:e8:
         26:bc:cb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:04:16 2026 by rpki-client