Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/e074e631-645a-3164-8a04-f05c5254b567.roa
File:                     e074e631-645a-3164-8a04-f05c5254b567.roa (raw, json)
Hash identifier:          3cf2Gjm3zASA0PXd7QAuEhwg8+FDTJe1BAhHRJkYDaQ=
Subject key identifier:   81:FE:D9:94:A4:22:92:7D:3A:21:06:22:CF:03:3F:A1:2D:CA:7B:BB
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F4328584CB551CF4607A2B9BD1FBBB680
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/e074e631-645a-3164-8a04-f05c5254b567.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     43500
IP address blocks:        157.166.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:cf:46:07:a2:b9:bd:1f:bb:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=1706ec2f-9026-428a-bb38-845370ebe4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b5:91:93:ef:d0:f6:19:10:7c:dc:10:e9:f4:
                    2f:a3:66:3a:fa:f3:fb:f7:cd:8e:74:dc:49:f2:c4:
                    c9:fb:3d:db:11:86:06:14:c3:51:54:21:e2:2f:79:
                    7e:0a:23:8e:13:4f:e7:c3:5f:69:79:57:c8:2d:bf:
                    dd:9e:3d:21:02:98:fb:a2:cb:65:0e:8e:22:71:07:
                    0d:97:3e:56:f3:2e:3e:e4:cd:2a:3a:35:98:f0:18:
                    54:3a:16:a8:2c:93:9b:80:60:e0:45:7d:cc:dc:48:
                    df:a9:88:38:91:8a:71:25:41:16:82:21:78:b7:50:
                    3b:fc:6e:c9:45:64:72:fc:43:34:d7:b6:37:ce:7c:
                    35:e9:ed:f7:31:43:3f:fe:06:d6:1d:63:f5:fe:29:
                    2c:a8:5e:16:1b:91:2b:e2:6d:d7:6f:46:06:40:53:
                    dd:d0:12:f3:07:71:3f:2e:25:66:ed:fe:cd:c5:ee:
                    58:89:58:e6:2a:da:55:6e:32:23:3a:81:80:4a:25:
                    8d:31:3e:05:25:b5:3d:d8:1c:fd:13:c6:b8:90:57:
                    c9:13:dc:53:2c:4e:fb:6c:5e:d2:8a:ff:35:17:5e:
                    64:86:39:97:d9:16:3f:32:72:37:93:c4:0d:85:76:
                    d0:fa:a1:f6:9f:33:91:02:2d:8e:03:67:11:95:c0:
                    c4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FE:D9:94:A4:22:92:7D:3A:21:06:22:CF:03:3F:A1:2D:CA:7B:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/e074e631-645a-3164-8a04-f05c5254b567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:40:e1:bb:59:ba:ed:43:9a:ff:44:77:9a:11:51:38:8e:a4:
         01:e6:fa:01:93:c9:33:3a:16:4d:b6:a3:9e:7d:f1:13:bb:ca:
         08:b3:e6:69:ff:06:bb:30:0f:1c:a7:a1:c0:f8:da:db:a9:2b:
         cc:15:e3:7f:aa:6f:8f:4a:49:df:5e:96:cf:84:94:82:60:1b:
         08:14:a0:fc:48:1a:11:9b:0d:ca:f4:7a:cb:e1:d5:52:13:37:
         30:1d:f7:14:49:99:a1:1e:77:44:26:ca:fa:c2:39:a1:0f:05:
         c3:a2:6b:be:fc:d2:d0:54:68:04:cc:00:13:f4:09:01:1c:ff:
         0f:48:90:ec:77:89:5c:ff:d3:71:f9:1e:8a:d2:b5:6a:54:f7:
         c8:ce:9b:34:29:2e:4c:4f:f2:aa:d0:d7:ae:96:c3:b4:48:a7:
         bf:b9:ae:d8:52:41:17:5e:64:74:ed:fc:d7:d1:09:15:6b:a9:
         73:e9:65:da:2c:de:23:ef:b0:33:a2:36:a7:44:48:1c:6f:dd:
         2f:05:f1:95:99:c1:82:2b:6c:b2:8d:fb:f6:38:61:da:54:c0:
         df:a2:ea:2d:2c:d7:85:81:b9:97:61:e1:ad:49:e8:ad:af:fc:
         59:dd:c7:2b:58:47:71:19:ef:cb:ef:36:9a:66:d4:77:46:ab:
         4b:5d:57:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:28:38 2026 by rpki-client