Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/74f40584-fc0c-3c62-abde-3cb9d0aa7614.roa
File:                     74f40584-fc0c-3c62-abde-3cb9d0aa7614.roa (raw, json)
Hash identifier:          d1M7e6iR2OPoi2IIU0jueHNP6GF1nXG5ed2HqdMoXm8=
Subject key identifier:   CC:06:F3:7C:4B:E3:E2:1F:E0:92:9F:7B:FC:AC:FD:7E:16:3D:41:C3
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F4328584D5243521A66B19228FDBA7090
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/74f40584-fc0c-3c62-abde-3cb9d0aa7614.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     14618
IP address blocks:        144.81.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:52:1a:66:b1:92:28:fd:ba:70:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=25d9724e-c10c-4c17-af2a-316072fda5ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:91:e5:41:ef:0d:99:cc:46:53:63:00:09:a1:
                    7e:18:aa:8d:bd:94:21:7a:af:f7:3d:54:7a:04:7d:
                    a6:a0:1c:70:84:d9:b2:35:ea:07:87:16:87:f6:62:
                    5f:50:2c:e9:09:ec:1e:08:3a:6e:2f:0a:59:f3:34:
                    bc:17:e2:8a:b8:07:cd:1f:17:a3:16:a5:d2:c0:83:
                    d7:2d:5b:3c:53:21:f7:0f:12:dd:cf:96:39:df:58:
                    10:8f:35:e9:4c:12:e8:e4:fd:68:68:7e:3a:21:bf:
                    af:6f:64:c7:48:1f:5d:de:a2:78:dd:28:0a:58:d0:
                    65:9c:78:d4:e1:b1:79:64:c2:96:10:84:e0:7e:cb:
                    00:55:eb:59:e3:dc:36:a2:2e:39:1e:05:3f:b5:a2:
                    42:09:5d:c9:b6:a4:6f:6c:bc:d0:f3:96:c4:7f:4b:
                    f0:a8:7a:9d:43:4e:ff:e3:61:aa:70:8c:47:71:6f:
                    ca:4b:cc:94:ba:40:88:f4:f5:9a:6c:c5:87:b8:dc:
                    f8:77:62:ca:d4:eb:25:03:97:71:8c:92:94:31:6b:
                    f3:5e:a8:58:e7:5a:3c:b4:c1:10:92:c0:72:41:1e:
                    df:5d:92:cb:f4:97:81:63:94:be:b4:05:c7:1b:59:
                    95:30:5b:77:fc:fe:c3:8e:d9:2a:8b:62:75:bb:e8:
                    c1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:06:F3:7C:4B:E3:E2:1F:E0:92:9F:7B:FC:AC:FD:7E:16:3D:41:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/74f40584-fc0c-3c62-abde-3cb9d0aa7614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:ec:95:2f:24:ea:57:2c:df:91:5f:7f:5e:9d:dc:6d:57:52:
         bd:62:b2:d8:33:a5:b9:57:38:aa:ce:7a:bb:11:4a:af:30:79:
         8f:f3:58:32:35:f9:0e:cd:55:df:5a:2d:b3:4c:c8:ba:e9:29:
         17:9f:96:f5:51:31:4d:b0:8d:65:57:84:7c:7c:7a:90:c1:26:
         d3:8e:1e:85:40:32:e1:72:ef:63:a8:29:56:a0:03:83:40:51:
         5d:16:40:de:04:0e:97:e5:19:97:17:1c:92:9a:9a:4d:5c:8b:
         38:31:a1:1b:43:57:c4:7e:1c:9c:ff:11:ff:09:36:41:7a:c7:
         bb:48:c7:d1:f3:c6:72:f0:84:d5:73:a8:07:07:44:4e:54:f5:
         d3:9f:b0:8f:ab:27:70:a0:f8:0f:8b:09:9b:73:2e:19:91:57:
         07:96:8f:cb:85:92:fd:0a:a0:aa:ee:14:22:96:1a:df:26:1d:
         50:2e:a3:55:55:d8:ab:55:b4:45:a0:b8:6d:e8:94:50:ba:6b:
         89:62:5e:f4:08:bc:ac:64:ce:89:6b:a1:ff:7e:f6:69:41:01:
         99:c8:35:82:e4:f3:b6:61:00:03:f8:f0:dd:bd:12:3e:06:8c:
         e3:e4:39:bb:04:0f:83:36:df:2d:48:11:64:ed:58:b2:ea:cf:
         8c:64:6c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:35:42 2026 by rpki-client