Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/fd3054ab-a6d4-3451-b7b1-2f5e1e0d6d70.roa
File:                     fd3054ab-a6d4-3451-b7b1-2f5e1e0d6d70.roa (raw, json)
Hash identifier:          Ghj4ArI0J23Gv4TtbdYbxcxfYDQY5hN6ZTXZ30GtCnk=
Subject key identifier:   2D:4A:43:18:59:AF:BD:13:48:0D:38:3A:BC:DA:B2:8C:05:D4:2E:03
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F4328584F1467AD2A70661BC6CADF1100
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/fd3054ab-a6d4-3451-b7b1-2f5e1e0d6d70.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     3300
IP address blocks:        198.207.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:ad:2a:70:66:1b:c6:ca:df:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=1df48cc3-a2b4-4881-9474-6464526b73ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:76:83:b5:f5:07:6b:b4:f5:a5:46:82:82:e3:
                    f4:80:6d:78:7f:1c:4c:32:cb:e6:3a:79:af:bb:71:
                    ec:3c:56:81:8a:d7:df:f6:71:07:f0:77:5c:c4:cc:
                    e2:db:ac:ee:07:a2:50:d0:0b:46:ad:1d:49:cc:c1:
                    c7:c5:a6:fe:61:46:c0:fc:0e:31:c6:c0:79:8f:e9:
                    51:fa:2d:02:0c:24:f0:d6:a5:8c:2a:c0:0e:dc:95:
                    d4:07:49:04:0f:95:b7:10:28:04:a0:30:80:8b:3e:
                    94:ac:3d:76:e5:ef:42:dd:e1:cc:99:7c:23:80:e4:
                    74:b0:43:47:4f:97:7e:02:6c:fb:8c:83:d8:c3:ed:
                    4a:cd:da:fb:02:f9:f6:ed:be:e7:3f:aa:9b:4f:18:
                    3c:57:50:fb:79:6e:6a:e6:1b:eb:c3:f3:e1:f5:cb:
                    17:35:54:a6:5f:ce:53:57:42:e5:05:64:a4:25:a3:
                    86:53:d7:81:57:91:c0:3a:57:91:73:58:e5:ee:fc:
                    7d:60:19:48:87:13:aa:28:f3:b7:87:8e:8f:8d:64:
                    8f:2d:29:34:91:09:90:71:65:59:d4:3a:48:05:e3:
                    54:9a:55:83:13:a0:66:a1:77:92:e8:c2:46:be:a4:
                    5a:21:08:e8:17:66:e4:79:2b:75:fd:04:cc:d8:ef:
                    ab:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4A:43:18:59:AF:BD:13:48:0D:38:3A:BC:DA:B2:8C:05:D4:2E:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/fd3054ab-a6d4-3451-b7b1-2f5e1e0d6d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.207.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:71:2c:1f:39:91:99:09:af:eb:6b:b2:02:42:2f:db:6f:bb:
         9e:61:96:04:ce:f9:a3:92:65:e1:d7:c3:57:d8:8a:b9:4d:92:
         39:51:ba:d7:32:2f:8f:dc:08:3f:81:61:1b:67:8a:57:7b:c9:
         e5:39:f0:94:ef:85:00:44:db:d1:01:1b:c7:ff:75:c6:a9:50:
         74:43:0d:31:cf:f1:55:fc:6e:0f:e8:f6:21:68:00:e0:51:26:
         9c:15:2a:f7:08:8e:ed:a4:e8:a5:9a:1c:b7:9a:a5:a3:e5:c1:
         1b:98:b4:73:8e:a2:2b:8a:40:6f:cb:8f:69:5d:ad:09:35:d2:
         7e:1d:c3:f8:75:ff:7c:f2:b3:b3:e9:a4:71:22:1c:a3:88:6b:
         d6:fd:9b:ec:9a:07:6a:75:58:6b:30:3e:74:2f:ea:1d:6f:33:
         01:9b:d5:74:ba:c2:aa:29:ae:a1:1e:02:f8:20:12:b6:0a:24:
         57:b7:a2:03:9d:c4:ce:08:f8:f5:3a:a2:28:94:ab:e9:13:2e:
         80:ab:84:4a:f3:80:c6:7a:a8:44:89:b7:31:a7:b3:5a:15:81:
         b0:3f:95:19:c7:92:74:45:e8:1a:ff:80:6f:02:f4:5c:d7:70:
         c9:35:8e:40:ea:73:59:42:f7:1c:73:8c:94:14:f9:06:60:e6:
         cf:40:9e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:22:01 2026 by rpki-client