Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/5843970c-16f5-3ccc-b327-2f936e7290ee.roa
File:                     5843970c-16f5-3ccc-b327-2f936e7290ee.roa (raw, json)
Hash identifier:          HQSpJ6orZMSW6ECIWkWklFOk+Jk8SRmHri7A4tkhyKs=
Subject key identifier:   E3:E0:52:E8:2D:F9:0E:6D:17:58:4A:84:2C:01:79:D8:3A:BB:09:42
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584EAD1C47E5F79F425ED63C5BE0
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/5843970c-16f5-3ccc-b327-2f936e7290ee.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     16740
IP address blocks:        74.188.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:47:e5:f7:9f:42:5e:d6:3c:5b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=f9e53112-c18c-49f1-b6b9-d765f64aa94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:09:50:ae:60:42:0a:08:52:66:61:b0:78:8f:
                    14:29:92:9c:f5:2f:dd:fd:8d:72:fa:a0:8d:7a:2d:
                    07:a5:b5:03:0c:93:a9:b4:59:74:4a:a9:ae:e3:16:
                    a9:d3:13:eb:ff:f2:7a:72:49:f4:31:2a:bc:5c:e0:
                    d1:2a:7e:18:af:da:72:81:fa:2a:43:61:75:6c:6d:
                    41:e9:4f:61:c8:3c:f8:c2:11:03:9a:bc:aa:77:0a:
                    02:e6:74:8e:5f:90:1d:ac:bc:91:cd:cb:43:7d:9a:
                    83:dc:49:da:17:38:77:f2:23:ca:8c:72:08:ad:aa:
                    b9:0e:26:e1:d2:89:64:e0:0d:03:12:db:b8:be:00:
                    0c:83:9d:b5:e7:70:c3:e8:4f:a2:c8:8a:01:04:73:
                    1d:81:f3:ca:96:c2:26:57:c1:a6:3a:3b:88:18:6a:
                    0e:f4:e7:79:3a:fe:de:2c:6b:c7:05:80:67:e7:73:
                    51:49:16:7b:ac:b2:11:16:25:aa:6d:16:aa:4f:dc:
                    58:b0:36:02:db:c8:d4:04:bc:10:be:cc:e7:ea:c4:
                    e9:af:6e:54:a4:31:d7:67:f3:03:d7:cb:b0:33:ff:
                    4c:7e:32:35:f6:70:89:6e:81:2e:4a:9f:53:c2:93:
                    51:a8:49:42:87:28:37:b1:07:2e:63:57:94:3a:89:
                    42:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E0:52:E8:2D:F9:0E:6D:17:58:4A:84:2C:01:79:D8:3A:BB:09:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/5843970c-16f5-3ccc-b327-2f936e7290ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.188.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:29:95:d4:7f:d6:17:51:86:13:c2:1d:d9:01:7b:1d:ae:fd:
         b9:98:af:58:2a:55:e6:6d:9f:cc:97:8f:d3:9a:ac:74:d5:b3:
         25:72:a7:1b:13:be:2e:e6:b5:a4:c1:61:0b:07:ac:74:97:88:
         7d:d8:3d:3b:00:2d:6b:1f:0a:b5:87:7d:d1:4f:0a:2c:79:3d:
         9b:ce:88:e0:e7:15:19:cc:27:44:b9:af:f2:5d:0f:4a:7a:1f:
         e4:9b:38:f0:87:f5:ba:f2:49:06:81:d3:50:ed:1f:ba:cb:3f:
         af:dd:6e:10:23:0a:ed:57:69:0c:ab:97:87:28:b5:88:53:e7:
         ac:2e:6f:35:9e:10:f1:50:82:fe:a1:a9:7c:73:74:1f:6a:75:
         8a:29:86:c9:2a:44:c5:fe:21:23:05:2f:3f:50:db:cb:92:ea:
         f1:f2:08:97:ab:f2:7b:ba:c9:17:f4:8c:68:15:f9:de:fa:d2:
         e0:36:f7:ab:31:7a:69:ae:4a:25:86:c4:35:50:ba:88:71:70:
         15:b3:b6:92:7c:e4:5c:8b:b1:ec:b5:2d:94:52:2b:79:65:64:
         63:69:75:57:a2:08:6d:44:5a:da:4a:11:15:3e:a7:ae:a5:2e:
         dc:ff:33:6e:76:86:97:85:77:82:5f:b6:a5:fc:09:b3:de:a0:
         c9:c4:ff:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:44:02 2026 by rpki-client