Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/fabc6f7f-0cf9-3058-9812-48477049cd4d.roa
File:                     fabc6f7f-0cf9-3058-9812-48477049cd4d.roa (raw, json)
Hash identifier:          0CNkm8ha/AoBJfFlzkMoFLuNiDQMi2jiUefjD5hgv8E=
Subject key identifier:   58:8F:81:36:F0:BC:9E:3B:92:31:B0:45:89:05:78:5F:72:B8:1E:D2
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584EABB6EF077AC3E1986A8F2AC0
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/fabc6f7f-0cf9-3058-9812-48477049cd4d.roa
Signing time:             Thu 30 Jul 2026 13:00:12 +0000
ROA not before:           Thu 30 Jul 2026 13:00:12 +0000
ROA not after:            Wed 28 Oct 2026 13:00:12 +0000
asID:                     16740
IP address blocks:        74.188.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:b6:ef:07:7a:c3:e1:98:6a:8f:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Jul 30 13:00:12 2026 GMT
            Not After : Oct 28 13:00:12 2026 GMT
        Subject: CN=d1a2bbc7-d491-4931-8988-7f0d1f14bae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b4:5f:4b:4f:03:c4:b1:dd:cc:a0:fb:e3:16:
                    23:3c:d0:23:b6:7c:33:de:20:ad:26:10:94:86:ea:
                    ce:80:85:17:ce:d2:90:2f:e4:b1:6f:8b:24:5b:3c:
                    43:60:74:a6:b2:b1:6c:a4:19:9a:9c:ea:a4:6d:f5:
                    44:0b:bf:09:23:26:70:fd:8f:06:1c:25:67:40:53:
                    e9:56:1a:70:85:34:0f:44:64:f6:41:bc:93:e2:43:
                    80:f9:36:a9:5c:a4:3a:9c:b5:49:6f:be:a7:6a:ac:
                    51:98:82:51:a5:6d:b8:ec:17:4c:12:3a:9c:98:9c:
                    a3:24:1f:98:b7:24:fc:5b:d4:52:9b:7e:60:8e:fb:
                    ef:ca:d0:3a:76:1a:b7:75:3a:d8:79:a0:1d:0b:33:
                    88:f2:f5:65:f8:5e:5d:02:78:54:a3:42:d7:0d:4c:
                    3a:65:38:ff:a2:5b:05:96:c0:6e:53:a8:71:cd:9d:
                    ef:ba:6b:a2:8c:f4:4b:6c:74:c0:27:61:69:8c:43:
                    f9:f2:46:c9:22:e0:55:dc:c9:d7:d6:43:c3:a0:56:
                    ec:03:18:67:7c:56:ab:c9:dc:58:96:bc:3a:af:f5:
                    e1:39:f3:0e:66:50:d1:f1:5a:27:41:23:f3:1c:49:
                    20:74:b0:1e:85:8b:9f:29:af:53:c1:a8:da:72:4e:
                    05:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8F:81:36:F0:BC:9E:3B:92:31:B0:45:89:05:78:5F:72:B8:1E:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/fabc6f7f-0cf9-3058-9812-48477049cd4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.188.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:81:ff:b7:fb:8b:fa:4c:86:79:de:4d:d0:e5:bf:9e:8e:95:
         92:a2:f7:4c:a4:11:44:46:d2:98:43:01:89:f5:80:8a:8a:4a:
         ef:e3:3b:d9:ea:f8:a9:bd:0a:e2:4a:1d:27:2a:84:90:83:7f:
         f2:82:a9:6a:36:b7:b7:ac:47:6a:74:d2:c0:fe:5e:b0:77:62:
         a4:ca:3c:59:99:28:b9:58:00:d1:97:6f:1a:f1:b0:d8:2c:5f:
         af:2a:1f:a5:ed:56:97:6d:8c:48:80:7c:e1:ab:25:cd:79:ca:
         b1:18:39:2b:11:93:16:69:cb:4a:9f:8b:64:a5:92:eb:db:2e:
         69:61:c6:af:5c:e6:7a:97:9d:39:f8:f0:a2:05:c4:19:b5:c3:
         05:35:e4:19:98:70:d0:85:73:d6:0e:d2:e8:f8:08:de:2b:43:
         cc:51:09:d0:82:e1:04:fa:65:66:1d:ff:a9:30:bc:5c:5a:a2:
         f3:5a:76:c1:fd:93:63:a9:5d:9c:4e:e6:c3:4e:76:de:3f:ff:
         30:3a:e2:83:35:32:0f:63:83:ed:96:b9:9f:99:7c:57:17:fe:
         62:0e:b1:d1:0a:bb:ee:3b:74:3b:3a:83:ed:fb:cd:dc:7e:a3:
         c6:36:4d:eb:e8:0e:c2:00:71:84:e9:c5:7f:3c:4a:c6:85:5b:
         ac:54:e6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:44:05 2026 by rpki-client