Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7b702939-0aaa-3247-a577-b2257dd57f8a.roa
File:                     7b702939-0aaa-3247-a577-b2257dd57f8a.roa (raw, json)
Hash identifier:          bic52EnTcukcIUlHHlPze1WDODuPP4YYX8sljpOzzhI=
Subject key identifier:   47:33:26:0B:8E:09:06:96:DE:69:35:27:2C:9F:01:12:AB:ED:F5:A5
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D09127D9696E1C50185A2BE00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7b702939-0aaa-3247-a577-b2257dd57f8a.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397222
IP address blocks:        204.74.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:7d:96:96:e1:c5:01:85:a2:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=72e1ade7-2bb7-4e64-820c-b88b75a29ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:26:96:54:e4:39:45:32:93:92:c4:59:4b:f7:
                    24:c3:f5:78:7a:c6:42:ac:af:7d:3e:94:ca:bd:e8:
                    1f:73:94:33:86:34:62:49:8e:16:f3:43:b8:e5:d0:
                    36:96:74:92:50:77:a2:a8:7d:74:c4:52:a7:72:22:
                    61:e3:6c:f9:80:97:3a:e6:c3:87:b2:6f:23:d6:dd:
                    42:f7:3b:3a:a3:8e:29:4e:a6:f0:97:ae:b1:be:a8:
                    b6:eb:1c:1e:14:2b:1e:f3:d0:e6:db:3c:7c:90:f1:
                    87:da:9e:25:3f:7e:b2:89:5b:8f:3e:ab:e9:26:2b:
                    63:ff:54:3a:4e:20:10:e0:53:da:c3:e5:ae:9c:f7:
                    0c:99:f8:5a:1a:ce:ff:9f:e1:09:cd:47:ea:57:98:
                    a5:6b:ae:f4:52:31:10:7c:a0:34:56:9d:15:eb:58:
                    7d:5a:9b:1e:ff:8c:cb:ca:dc:9c:7d:c2:3e:46:60:
                    d5:b1:45:5e:10:c4:e7:9c:56:d0:50:d0:41:30:ed:
                    54:d9:3c:dd:c1:2e:38:fe:db:24:fa:6f:5d:98:44:
                    bc:53:4c:06:44:f7:37:b5:60:8c:68:67:c2:9b:1a:
                    81:2b:55:fc:7a:62:4b:59:db:25:25:54:05:45:80:
                    50:58:1f:7b:27:3a:1a:86:53:d5:93:41:78:35:fb:
                    ba:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:33:26:0B:8E:09:06:96:DE:69:35:27:2C:9F:01:12:AB:ED:F5:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7b702939-0aaa-3247-a577-b2257dd57f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:bf:86:61:25:37:6d:5b:78:da:ac:bd:1e:d0:75:5e:69:4d:
         21:6c:a9:20:ee:56:40:d9:13:97:be:94:e1:fe:af:40:89:8d:
         c1:0c:6a:1b:8b:91:fb:f1:bc:da:0d:8b:66:cd:da:db:1f:af:
         2e:6c:ba:ee:4f:7e:ff:08:71:6d:7e:85:ed:cc:97:50:ef:84:
         62:3d:25:ec:3e:0c:c2:21:8b:d6:9e:5d:d0:0d:4a:bc:56:82:
         3f:e5:c7:03:10:18:e1:07:11:81:4e:2c:2a:f9:21:d3:28:4b:
         ba:39:72:20:b4:37:18:0b:b5:1b:d1:45:05:92:61:1b:62:38:
         8b:8f:de:21:49:10:2c:fa:55:f0:14:5b:c2:9e:7a:ea:38:dd:
         6e:ab:4d:96:4f:85:5f:b2:05:80:ba:fb:0f:63:13:1f:6f:f0:
         a8:d2:26:c8:29:40:1a:81:60:c0:e1:70:59:89:b4:7d:32:66:
         4e:56:99:c9:a8:63:e8:26:dc:dd:cb:eb:70:9c:33:95:2e:84:
         6c:b2:05:f4:90:5b:a5:28:3a:7e:e8:75:21:24:6c:b6:de:d3:
         0c:2c:e8:3a:06:85:92:56:3a:54:63:09:ff:5a:e0:76:f2:02:
         5f:42:de:88:c5:04:a3:8c:be:cd:84:bb:33:ea:6f:47:4a:3b:
         a7:42:18:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:18:32 2026 by rpki-client