Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/029c48da-3306-30e5-b410-416996624d8c.roa
File:                     029c48da-3306-30e5-b410-416996624d8c.roa (raw, json)
Hash identifier:          r81eeG7O8CW96SZ0bvNNVBGFSL8PnKfwhvM+8U7BHME=
Subject key identifier:   F5:8A:F8:D3:61:06:CA:51:FC:C6:DE:A6:55:D7:09:67:D6:0E:11:98
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D27AAA447588AEA3D27BAABC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/029c48da-3306-30e5-b410-416996624d8c.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        74.125.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:a4:47:58:8a:ea:3d:27:ba:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=5bf97da3-c9fa-43b2-815c-8868f43f97f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:40:5e:ad:3f:d3:83:b5:41:09:c5:81:bf:
                    84:31:f1:05:27:8a:86:7f:e6:d9:41:51:e0:ee:04:
                    8d:bf:7d:21:c3:6d:30:da:57:3c:27:22:00:de:24:
                    63:1a:3e:18:74:86:c9:c1:8e:5b:82:05:f8:0c:58:
                    f7:bd:fc:cc:99:f7:9f:08:ba:f0:df:84:5a:0f:d5:
                    dd:e2:5a:09:83:52:01:94:e9:4e:4c:4f:e1:b3:6c:
                    cb:0e:c8:87:9e:a1:fb:86:80:c7:3b:d6:d7:b3:be:
                    18:50:7c:7f:7e:8c:c3:3e:be:7d:28:ec:5c:48:87:
                    90:1d:11:36:c6:75:ab:17:4b:6e:c6:8f:62:e8:e4:
                    31:ff:30:8d:c9:47:de:e9:a4:1d:a2:6d:fd:42:5f:
                    45:ba:e7:1c:e0:17:d0:7c:94:40:af:ba:e8:af:44:
                    7c:84:b8:6f:0f:c2:7b:fa:3b:68:65:91:0f:61:5e:
                    8b:60:65:8f:f7:7c:f8:d5:3f:99:4e:cf:87:49:75:
                    76:0b:ab:6d:11:37:47:8f:a9:72:da:b8:ac:c9:61:
                    be:1b:14:a9:f2:20:07:80:22:ee:16:10:29:9b:58:
                    3f:a3:3b:62:c9:e7:be:b1:61:46:8f:88:b9:bb:f4:
                    21:33:5d:82:f2:d9:34:29:dd:de:c8:5a:e9:4f:da:
                    18:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8A:F8:D3:61:06:CA:51:FC:C6:DE:A6:55:D7:09:67:D6:0E:11:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/029c48da-3306-30e5-b410-416996624d8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:54:74:59:95:63:95:47:05:f7:6f:70:0a:05:ac:ec:13:c1:
         08:4c:04:32:d0:10:1c:8f:e4:8f:36:4c:ce:62:e7:ce:f6:f9:
         4c:b6:04:c6:5b:8a:73:24:6c:84:c0:6c:8e:62:f2:22:d8:d9:
         ad:59:5e:25:a3:4a:e3:1c:64:3f:0f:f1:7c:3d:b8:9b:5d:1f:
         7f:b1:c4:fd:90:87:3c:d1:1d:db:dc:cb:57:10:55:a0:0a:46:
         ed:44:19:3d:1a:62:7a:0d:59:fa:9d:f9:3f:27:86:da:82:aa:
         2f:91:f5:9b:68:4d:52:f4:e7:f7:14:78:c2:84:ec:c2:2b:80:
         d4:df:36:e9:b7:1d:6f:2a:16:40:76:bf:fe:55:73:f6:e7:4c:
         22:c9:fa:da:fe:ca:5b:e3:e4:9e:71:54:c3:2d:b4:9d:3e:af:
         8f:60:70:7c:37:05:91:34:02:e4:ad:24:2c:58:52:8a:99:f3:
         d5:07:d1:10:ff:f6:73:88:d8:22:7a:c9:c9:a9:19:f4:2d:63:
         64:b7:37:1a:0a:15:b4:14:04:25:33:cc:3e:39:ac:42:3f:4c:
         96:ee:8b:ab:52:97:b2:ed:10:b6:bf:5d:0e:fa:31:94:58:20:
         bf:5f:7c:be:cb:b7:d5:33:b7:98:cd:36:2a:d6:e0:29:8c:0f:
         b9:ec:d3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:32:33 2026 by rpki-client