Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/16d526a6-8c61-3f11-a555-e4df6480ae14.roa
File:                     16d526a6-8c61-3f11-a555-e4df6480ae14.roa (raw, json)
Hash identifier:          J7MmHAQeg2DnacpdbAx9hrTLMrE1xa6ZZZp1UxPfaCY=
Subject key identifier:   26:7C:66:26:96:2E:AD:A1:CA:7D:FA:54:AB:84:3D:48:FA:5C:80:F7
Certificate issuer:       /CN=78108340-c24e-45fa-a787-5578ce17c653
Certificate serial:       010D0C9F4328584A6825F826CE04FD2B5F6F9940
Authority key identifier: 96:B4:2B:83:19:3D:79:88:72:B2:4D:D9:B7:6D:1B:E1:B1:56:43:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/16d526a6-8c61-3f11-a555-e4df6480ae14.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     11796
IP address blocks:        208.74.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:f8:26:ce:04:fd:2b:5f:6f:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78108340-c24e-45fa-a787-5578ce17c653
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=512d6063-e538-423c-845e-22250ae47ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:28:20:66:14:72:42:2a:d8:d6:1e:9d:7a:dd:
                    90:a1:dd:97:d6:7d:62:15:94:5e:f0:6b:d0:13:c6:
                    57:c3:a9:92:a3:6f:d3:c4:76:5d:ac:ad:e3:3b:29:
                    9a:13:97:49:f6:4f:5b:09:2a:83:2d:0b:4d:91:63:
                    5a:e4:6e:be:89:b3:04:bf:f2:9b:7d:57:5d:13:ad:
                    d2:41:6c:bc:82:16:e5:f2:64:9c:ba:7c:a9:6d:02:
                    60:86:83:f7:bf:0b:8e:f0:88:de:ea:36:71:61:15:
                    f8:16:c0:e7:10:80:50:26:81:cd:58:10:50:58:42:
                    16:3f:58:34:b2:78:07:68:cf:9b:7c:da:31:9f:da:
                    c0:bf:27:92:2b:1f:47:9c:9a:92:7b:e3:8a:47:d8:
                    b1:34:e0:2e:f8:d5:99:bb:df:fb:56:73:05:4c:7a:
                    07:37:3a:e1:f7:d1:2b:00:cb:c6:c6:0f:bf:75:83:
                    8a:62:75:7f:97:0d:f4:55:c8:bb:0c:b0:87:06:4f:
                    1a:63:8a:62:dc:07:0e:48:32:5f:b9:ca:a4:cb:fd:
                    17:2e:21:9f:95:3c:fc:3b:e6:87:58:35:cd:60:35:
                    89:66:63:8b:b0:fe:d7:6c:24:01:db:53:b2:ae:f4:
                    fb:32:f6:9b:c4:d6:7d:c2:0a:5d:1f:8c:27:23:2b:
                    3b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7C:66:26:96:2E:AD:A1:CA:7D:FA:54:AB:84:3D:48:FA:5C:80:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/16d526a6-8c61-3f11-a555-e4df6480ae14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.crl

            X509v3 Authority Key Identifier:
                keyid:96:B4:2B:83:19:3D:79:88:72:B2:4D:D9:B7:6D:1B:E1:B1:56:43:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c4:75:5a:17:eb:28:ff:fa:34:8b:76:27:29:9b:88:83:9a:
         26:5b:54:38:5d:d1:da:b0:1a:3f:30:d7:91:ed:73:97:b8:d6:
         9f:56:b0:6c:ce:62:fc:de:20:02:99:f7:d6:6f:d9:e5:ab:99:
         36:b3:87:0f:89:f7:97:ac:7d:09:3e:54:ff:6d:19:4f:bf:b8:
         82:34:c5:7e:54:11:87:8f:3b:bb:73:3f:fd:2b:e4:36:4b:c1:
         e4:5b:c5:88:94:58:e7:51:e1:67:ce:a1:19:44:a1:1a:7d:e5:
         b9:3b:74:74:ca:ec:61:57:e3:fc:41:05:6e:23:53:8f:da:7b:
         bf:d2:ad:92:25:92:35:6f:bb:3e:c4:c2:b8:df:86:cc:fd:7f:
         96:c2:4f:f8:f7:ee:68:72:f0:1d:40:d6:fa:86:b4:82:26:e8:
         4e:80:87:80:29:2d:2d:50:86:12:1b:a3:e8:87:90:6a:2a:9e:
         70:6c:22:c7:f5:ed:17:cf:ad:bb:c5:72:49:7d:ea:1e:b7:80:
         2a:f2:0f:5d:d0:d3:1b:72:ab:c3:22:9f:33:34:fc:ea:02:83:
         98:50:5f:c1:8d:0e:58:31:c9:58:44:02:e9:2b:70:55:bc:d5:
         77:84:02:dd:1d:ce:2c:24:51:41:e7:6a:11:9e:11:9c:ba:e0:
         90:4c:8c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:55:07 2025 by rpki-client