Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/282c0de7-8b02-3759-a80d-8aa6951ea56c.roa
File:                     282c0de7-8b02-3759-a80d-8aa6951ea56c.roa (raw, json)
Hash identifier:          EaiOLOntThYfiqoggcVMS/YCTRiZpewnDHHJkms0J5A=
Subject key identifier:   A8:E0:B4:FA:6A:4E:3B:F5:C5:9A:3F:8E:54:81:11:81:99:D0:BE:F0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5A32B00398B17F1B1823D220
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/282c0de7-8b02-3759-a80d-8aa6951ea56c.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        74.43.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:b0:03:98:b1:7f:1b:18:23:d2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=f28643d2-663d-45d9-859f-803bc659ef51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:59:60:2c:97:1e:c6:ce:a4:5e:01:9b:c1:c0:
                    a3:83:f8:4d:f4:fc:cf:1f:54:04:66:81:48:4d:8f:
                    37:ee:d6:73:ad:87:33:cc:38:f4:0b:a5:9c:c1:be:
                    17:09:88:28:ac:d1:26:dc:64:8c:59:91:38:bd:b8:
                    40:26:9d:3d:e1:a3:49:f9:21:27:74:30:0f:5e:c8:
                    ec:1a:47:9b:6e:c7:b5:88:91:e7:af:8c:80:96:b1:
                    8b:0d:c9:db:e2:c9:46:ba:b5:6b:86:72:82:58:80:
                    69:89:80:dd:26:7e:f0:ff:26:11:00:44:22:c6:99:
                    19:0b:b3:36:2c:61:8e:4a:6d:f8:28:0e:0a:13:9a:
                    50:22:23:88:70:75:83:4f:1d:cb:39:ca:f1:5c:8a:
                    8e:c5:79:cc:aa:0e:92:cd:ab:1d:80:19:49:27:ad:
                    54:1e:11:c8:8d:56:76:65:bc:76:cc:31:e9:ed:79:
                    5c:42:35:18:53:bf:b1:6c:81:6f:bb:e4:fe:7f:7c:
                    1f:8a:70:c6:c3:83:b8:5e:bc:44:79:10:71:a3:ba:
                    5e:1a:c4:b3:51:98:81:54:3b:a2:44:33:2a:cc:d5:
                    6d:59:6b:54:f5:56:07:f7:65:66:dd:d9:82:23:e1:
                    ff:55:f5:2d:13:8c:dc:7b:48:61:be:da:ba:2e:32:
                    e4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E0:B4:FA:6A:4E:3B:F5:C5:9A:3F:8E:54:81:11:81:99:D0:BE:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/282c0de7-8b02-3759-a80d-8aa6951ea56c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.43.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:96:b8:d3:74:88:ef:25:0c:0f:e5:b4:7b:1d:69:6b:96:a4:
         19:5a:e4:88:27:7b:e7:5e:95:12:92:bb:de:e0:a5:e5:0d:3b:
         62:de:3f:24:42:38:00:f6:ca:94:30:46:df:04:fd:fb:79:8a:
         81:55:60:89:66:77:27:ef:81:ba:08:b2:89:91:b1:3d:88:ea:
         a0:80:2d:6f:01:99:ec:9d:0b:9b:56:5b:23:d3:83:b3:93:bc:
         e7:1a:e6:e8:aa:b4:dc:8e:da:1e:9a:c3:63:2c:56:e0:95:fa:
         65:9d:8c:f7:69:59:10:f9:07:7d:20:0c:16:12:ba:62:32:3d:
         76:6a:3c:55:af:b6:4a:19:c6:2c:9c:b9:97:e1:36:87:3c:bd:
         c5:c2:cd:bd:55:a6:de:4e:b1:57:97:15:61:15:7d:7d:27:8f:
         ef:c6:0a:47:02:94:8c:57:e8:d3:9c:bc:ff:27:6e:9f:85:26:
         19:12:bb:06:e1:6e:51:98:e7:bd:d7:6d:d1:5d:ee:04:b6:cb:
         ff:01:8c:5c:28:24:3c:b8:a1:da:ac:2b:56:42:8d:e8:71:7b:
         92:81:69:b3:bb:b1:3c:87:a1:b0:1e:57:94:e2:aa:47:e4:0e:
         71:1c:cb:ef:34:95:6a:5a:1a:c6:f1:60:60:4d:a1:22:4e:8a:
         aa:08:f4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:32:02 2026 by rpki-client