Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/72b1d61c-e96f-3069-91be-73349aaaef24.roa
File:                     72b1d61c-e96f-3069-91be-73349aaaef24.roa (raw, json)
Hash identifier:          jAKDKBOjaeFBDw3IOBnoHBeStR3YrK8pxq/gnfaC6Po=
Subject key identifier:   1C:3B:CB:A6:E4:CB:6A:3E:C4:F1:10:05:61:4F:7E:B2:84:BE:74:F3
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584F4988D4B1B8533A4BF4AFEF00
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/72b1d61c-e96f-3069-91be-73349aaaef24.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401645
IP address blocks:        74.81.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:d4:b1:b8:53:3a:4b:f4:af:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a01b7db4-4908-4a7f-aac9-2bcf4b88f59e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:df:ea:36:38:af:cc:7b:9d:d0:ec:c6:2c:fd:
                    05:1d:b6:24:a3:6e:1e:ba:41:ed:2a:15:24:fe:42:
                    50:70:35:97:20:e6:7e:ad:00:3e:83:cd:71:46:a8:
                    35:3d:9c:86:8f:8e:98:d1:9a:2b:26:c3:92:6c:de:
                    bb:2b:2b:d9:40:7a:a7:cb:d1:03:f1:d3:54:f9:52:
                    1d:e4:a0:88:48:e4:d8:fe:d2:28:53:8b:76:8e:75:
                    db:c9:dd:19:18:71:13:13:17:51:02:be:89:09:d3:
                    b5:65:2d:d7:81:83:93:86:88:5f:c2:03:a5:54:c3:
                    60:9d:17:0f:3c:14:39:31:5e:b9:53:49:78:90:d8:
                    6d:9e:02:f4:c7:e6:51:f2:69:c4:21:ae:67:cf:1b:
                    16:a0:b6:30:b5:c7:3f:6e:6d:b3:f0:30:e2:35:30:
                    7e:8b:62:4c:85:f7:db:3e:a6:11:91:32:6e:ea:34:
                    8a:f3:b9:8b:11:57:44:97:9a:94:25:03:8e:1d:f6:
                    70:68:da:68:ae:34:47:b4:45:25:c6:81:f7:8f:e4:
                    df:24:10:b5:d7:07:2c:50:48:b2:62:5b:7e:c6:2b:
                    bb:04:de:29:4d:52:83:3e:50:a5:00:69:a5:1c:33:
                    d8:7c:c7:2b:d2:c5:e7:c6:83:b7:96:d8:62:41:f7:
                    40:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3B:CB:A6:E4:CB:6A:3E:C4:F1:10:05:61:4F:7E:B2:84:BE:74:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/72b1d61c-e96f-3069-91be-73349aaaef24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.81.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:56:ff:f6:60:c3:aa:0f:ac:8e:52:be:e0:38:97:32:da:19:
         02:96:41:e5:04:1a:f0:68:82:2a:fc:50:17:c0:f5:b9:51:ce:
         7a:7e:26:a5:96:e6:1f:01:d7:f2:6a:f4:02:0d:28:ba:2d:af:
         d3:a0:eb:59:f1:94:f2:6b:a8:a1:b1:80:98:f8:6d:a7:a4:17:
         57:d6:9f:ce:41:5e:a3:69:43:27:9c:15:75:5a:de:d1:f0:fe:
         3a:ba:68:57:85:3f:cf:53:25:84:7e:3f:7e:fe:f1:9f:1e:d3:
         57:a1:46:31:f7:aa:f7:97:43:3a:be:5c:2e:13:fa:cb:c9:2a:
         02:7e:d3:77:f3:89:c0:0d:e9:6e:8a:2c:04:f4:a5:82:52:02:
         ea:9b:8d:4c:cc:51:07:4a:6e:2e:ad:28:20:57:fa:58:d7:92:
         bb:b5:b4:93:fd:30:87:a5:0d:71:7a:b6:23:3d:2e:a2:0d:5a:
         12:2c:2e:d9:91:06:62:23:cc:b1:14:28:df:07:a2:b0:e2:9a:
         06:b0:02:a0:ef:46:fc:8c:85:6a:1d:5b:1e:46:5c:02:7b:c1:
         bc:74:57:24:36:36:14:fc:85:af:ba:0a:94:cb:75:23:1b:83:
         2d:c2:88:d2:5f:8c:85:f4:f9:71:13:38:12:f5:a4:db:cf:9a:
         e4:35:4f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:14:38 2026 by rpki-client