Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/d2170789-d217-3a89-be64-48b7d2fca4cf.roa
File:                     d2170789-d217-3a89-be64-48b7d2fca4cf.roa (raw, json)
Hash identifier:          pIv0qQTTMQ6NATMbE0VoKhQBaZZxpXqb/qlvBsrcN6I=
Subject key identifier:   35:FC:E7:4E:04:D7:F2:AA:46:38:D5:49:64:A9:9D:03:49:F9:02:13
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584E815F98BF8987000808088480
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/d2170789-d217-3a89-be64-48b7d2fca4cf.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     2152
IP address blocks:        207.233.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:98:bf:89:87:00:08:08:08:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=0b74df76-78c9-4c90-9090-d70176c94018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b0:08:f2:76:64:fc:5c:da:3d:9c:cb:10:b9:
                    b0:00:e5:49:7c:99:86:40:10:27:b3:f0:be:f0:e0:
                    c3:ea:04:36:6b:e4:3c:01:94:4d:f8:0b:42:8b:e1:
                    1d:63:fc:dc:bb:a3:be:77:df:44:9f:b8:3d:fe:46:
                    68:9b:1f:29:eb:11:a9:d3:4d:b8:29:e0:27:24:8f:
                    ce:fe:b4:29:11:c6:b9:98:23:60:90:b4:67:dd:bf:
                    c9:c1:06:86:c4:2c:93:f9:6c:85:cd:b7:bc:7e:3f:
                    7b:0f:0c:e6:1f:0c:2d:c4:53:dc:94:f0:47:bd:63:
                    69:7a:8e:90:da:03:fe:fa:4a:26:a1:3d:31:2c:c3:
                    9e:c3:c3:74:18:11:26:75:32:64:96:ec:4d:84:31:
                    ee:0d:0b:e6:0b:46:7e:e6:9a:1d:ac:6e:e9:69:86:
                    8c:82:50:88:70:89:98:eb:c7:f5:52:14:bf:bd:95:
                    38:3d:ac:6e:53:60:3c:6e:6a:af:10:dd:5e:e7:33:
                    ec:b9:39:34:6e:1c:90:72:e9:17:9a:2f:61:d4:59:
                    f6:b1:25:d2:4c:a3:c7:45:c6:80:55:f2:28:5e:b9:
                    85:2a:8e:08:cd:45:fc:b1:6c:b5:02:dd:9b:c4:c3:
                    a6:a1:dc:9a:25:d3:c4:80:be:df:dd:6f:cc:b8:5f:
                    b0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FC:E7:4E:04:D7:F2:AA:46:38:D5:49:64:A9:9D:03:49:F9:02:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/d2170789-d217-3a89-be64-48b7d2fca4cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.233.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:1f:13:8c:f7:cb:5e:1c:ef:0e:58:29:6e:a3:62:32:db:a2:
         75:32:20:55:8b:92:b9:1c:f9:e7:1f:09:3b:6f:67:02:99:d8:
         b0:5d:3c:d5:02:b1:31:f9:25:8a:1c:85:df:13:f0:d8:5a:b1:
         0a:fd:5f:19:9e:a2:7e:92:10:02:11:07:b9:4e:a1:41:75:4c:
         01:45:d8:f7:bb:13:cf:3e:06:6f:f5:3f:01:53:89:95:58:35:
         71:0f:a0:f0:d1:15:74:de:5e:2c:17:a1:bc:a7:4b:67:7e:ee:
         d5:ce:31:74:d5:e4:9c:87:37:e9:59:07:53:ec:55:c2:b1:f4:
         2b:64:99:44:b5:cc:d9:d3:f6:2e:cd:d7:2d:74:e4:d5:13:bf:
         7e:9f:38:fe:a3:fd:25:3e:f0:bd:c8:04:79:0d:28:44:92:cd:
         46:89:eb:d2:30:cc:7d:28:80:c3:ad:38:f7:0b:6c:72:58:ca:
         12:9f:8f:b1:3a:5b:77:bf:df:9d:3d:bf:f0:46:f6:24:6f:ed:
         c4:f2:68:67:2f:54:9f:7e:f3:24:82:bd:ff:e6:04:db:b9:34:
         4f:70:de:bc:86:bf:b8:5b:77:88:d3:fb:b2:96:e8:10:a9:22:
         09:50:23:3a:3f:7a:14:60:f5:04:43:5c:1e:f0:88:12:d4:c2:
         74:f6:43:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:24:43 2026 by rpki-client