Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e2e7cb9-a9ad-36b4-a31c-bbc25597e302.roa
File:                     9e2e7cb9-a9ad-36b4-a31c-bbc25597e302.roa (raw, json)
Hash identifier:          4cKoKUBt3IxqY01cgnzhISeub9e9ng7UGQrsO3s5eb0=
Subject key identifier:   25:DF:12:EC:CD:FD:67:43:A4:23:60:AE:1F:FF:3F:CB:A7:D4:2A:6D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F497DD8EBF8BB9406DC854280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e2e7cb9-a9ad-36b4-a31c-bbc25597e302.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397225
IP address blocks:        204.74.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:d8:eb:f8:bb:94:06:dc:85:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e6762d12-6aef-46da-9052-15500c4e423b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3c:ea:76:9d:5e:85:69:6e:53:76:ac:25:d2:
                    79:06:be:2a:13:10:70:94:bd:92:00:5d:8c:19:7b:
                    22:b3:f0:64:2f:68:6d:ee:3c:35:df:21:5c:17:6f:
                    d3:b2:cf:47:e0:b0:00:d1:9f:d8:0f:ac:d4:b9:5e:
                    f2:23:18:00:34:4a:08:ca:ad:30:b2:8c:0e:7f:40:
                    06:fa:68:06:94:5e:50:01:0e:2d:3a:1c:aa:73:c1:
                    bf:ec:06:6c:7d:de:cf:3e:e5:8d:5d:c5:ac:10:ab:
                    7a:f6:6a:5a:a3:32:6d:b1:41:78:43:ed:a9:55:f5:
                    13:ab:3d:67:c7:bc:7e:cf:2c:27:52:0d:df:66:a3:
                    7b:62:3b:a5:da:aa:1b:60:f8:b8:df:e7:26:a3:e8:
                    db:25:f5:a8:9c:21:b3:bd:64:b2:90:d5:29:37:a0:
                    cf:a3:c8:ce:a6:be:b6:cd:9e:56:24:35:50:49:ec:
                    30:7a:73:47:a1:0f:94:e5:ba:5f:58:48:c4:13:87:
                    01:b0:b7:88:f0:9d:8e:2c:32:2a:8f:21:60:f1:7a:
                    25:f7:ca:c2:49:db:27:64:94:ba:c8:e5:70:47:ed:
                    c8:2f:d5:ed:06:da:60:86:56:96:70:52:b6:af:05:
                    a9:ba:9d:67:03:a5:41:bc:29:1d:35:2c:57:d2:96:
                    15:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DF:12:EC:CD:FD:67:43:A4:23:60:AE:1F:FF:3F:CB:A7:D4:2A:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e2e7cb9-a9ad-36b4-a31c-bbc25597e302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:94:9b:82:83:2f:6a:34:5e:ce:b8:1c:92:8c:70:c4:4b:33:
         68:f2:c2:2e:db:2e:49:0e:39:b5:6e:97:3f:9f:50:f4:88:f3:
         49:f7:0a:e9:04:4c:ca:4a:5c:5b:90:5d:6c:e7:82:0d:b6:22:
         89:57:31:8c:32:19:ee:8e:8a:20:e4:f8:ba:8e:9e:52:4b:16:
         4f:73:41:bb:4c:be:87:b8:7c:12:5d:d8:94:17:1f:c4:a9:df:
         cc:9d:8e:dd:49:24:f7:d6:cb:4c:63:d2:f1:b5:59:92:4e:f2:
         40:c2:53:3f:6f:a6:48:c2:08:dd:91:d7:54:f5:90:46:90:d0:
         aa:55:ce:f3:be:b3:81:85:61:6b:7e:e3:40:3a:8a:67:d3:6d:
         3a:75:18:7d:54:76:f1:2a:c5:e9:fb:43:bc:b4:9f:f1:68:16:
         67:ac:be:21:27:05:cf:46:56:6d:c5:74:e5:8b:28:40:50:89:
         ff:64:67:49:0c:cc:19:79:28:ac:48:a0:c6:bd:27:09:b6:a5:
         49:f9:ae:30:f6:fc:f5:b1:c9:fa:cb:1e:be:d8:a0:6e:9b:a9:
         ee:38:bc:f5:b8:df:2e:e8:e1:43:05:43:27:26:9e:ef:67:d3:
         93:b0:43:3c:b9:d2:52:ff:93:2b:d4:9a:4b:65:9d:a6:8c:fd:
         c4:c1:a3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:58:41 2026 by rpki-client