Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33440a13-f0e1-3194-bc20-cbe2e8cd3cf5.roa
File:                     33440a13-f0e1-3194-bc20-cbe2e8cd3cf5.roa (raw, json)
Hash identifier:          Bu2SiaaRwaR9KiNYSTOAbuGuPfCfUNcNXS5T2cx3K9Y=
Subject key identifier:   0E:BE:05:72:EE:5D:84:75:17:79:37:7E:6D:13:90:A4:08:80:76:D6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DE9B0942A817624D8D00C9380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33440a13-f0e1-3194-bc20-cbe2e8cd3cf5.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     12008
IP address blocks:        204.74.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:94:2a:81:76:24:d8:d0:0c:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=930bacec-af26-4a27-a929-0119448d1c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a3:a5:6d:b3:40:ad:90:67:47:77:28:d4:7b:
                    f4:e4:a9:ec:9e:22:0a:1d:cc:6b:b4:78:07:1b:63:
                    88:a1:98:0d:f2:d6:07:23:ce:33:40:3e:5b:f4:4d:
                    97:b4:bd:db:0a:40:3c:36:ea:28:0c:ba:db:5f:48:
                    50:70:bb:de:55:ea:4a:43:28:30:94:de:67:a1:08:
                    30:5b:3d:7c:6c:31:fe:4b:67:0c:bf:97:bb:b9:0f:
                    ab:40:4c:e4:41:6b:b7:bb:b4:3e:20:9f:41:ad:b0:
                    c5:c9:1a:db:b7:e1:f7:b0:78:4e:b9:e1:b1:7c:7c:
                    19:ff:8c:b3:e8:b6:95:2b:85:60:62:f6:f6:e4:c4:
                    77:83:1c:8e:e3:dc:ca:c9:fc:f6:6c:ad:35:9e:4b:
                    c0:37:45:23:43:d8:3d:81:d7:ef:d5:1f:85:fd:1f:
                    87:a6:11:62:ba:69:0d:0f:c1:55:32:f9:eb:90:d6:
                    89:94:a7:ba:a4:41:d3:40:14:d8:d4:cd:13:4f:16:
                    29:e3:b4:b2:d7:dc:27:8e:0d:77:f1:da:3a:8f:e6:
                    d2:c9:4b:07:97:10:05:f1:d3:da:16:01:24:8c:43:
                    1e:c1:12:26:13:22:3f:7b:f1:c5:bc:f5:ea:e9:7e:
                    2b:d7:3c:50:5b:a3:ed:68:86:94:bc:09:cc:fb:a5:
                    99:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BE:05:72:EE:5D:84:75:17:79:37:7E:6D:13:90:A4:08:80:76:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33440a13-f0e1-3194-bc20-cbe2e8cd3cf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e1:53:d3:cb:ba:ef:0d:ec:2a:05:7f:66:8d:dc:96:05:66:
         4e:bb:5f:e9:6e:ec:58:59:25:40:f6:34:8c:ba:de:a6:85:f9:
         88:44:2e:ff:0f:30:ba:c7:ee:5e:e0:21:95:11:d9:1f:40:03:
         e6:49:6f:48:fb:97:a0:3b:6a:95:72:47:40:df:b6:76:97:a1:
         4b:75:9f:3e:3f:a7:ec:66:e9:26:0a:61:5a:5d:2e:4d:ad:80:
         ba:37:ce:c8:53:e9:e6:cf:a1:27:ff:c2:fc:55:84:d5:37:9d:
         a2:0f:6a:7b:f2:b8:aa:63:a2:66:b3:98:2a:15:bd:10:44:de:
         fc:45:97:33:8f:db:90:fd:83:72:de:3d:3d:ff:8e:2e:82:4d:
         86:94:ab:01:1f:c3:eb:77:30:00:9b:69:ed:d5:d0:1f:a2:72:
         71:7c:93:9c:b3:6f:96:be:60:77:25:21:f6:22:a7:a9:58:0d:
         ac:62:c0:0d:c4:0c:0b:4c:00:29:6d:e8:8b:df:74:0a:5f:5b:
         07:2e:5b:8e:2c:8c:90:83:34:1b:62:4d:b7:30:b7:4c:0c:ab:
         9f:5e:3b:ac:9c:74:34:1b:c5:71:e8:8c:51:3c:46:9f:be:59:
         41:10:53:5a:79:ff:23:85:a1:fd:6f:43:0a:9e:ca:87:43:10:
         be:53:dd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:48:07 2026 by rpki-client