Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/362ee3ed-39d3-3a24-8491-74fd9d22f4fb.roa
File:                     362ee3ed-39d3-3a24-8491-74fd9d22f4fb.roa (raw, json)
Hash identifier:          /CbdPAyYUErmH/GRrUZTo/OtfbSQIesgJ+CI1faC/y0=
Subject key identifier:   A8:A6:71:25:A4:8B:D0:1B:0D:F9:28:84:A8:95:4B:D0:9D:C9:81:72
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584F82ADC02FB3048300A25ACD50
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/362ee3ed-39d3-3a24-8491-74fd9d22f4fb.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     394089
IP address blocks:        74.221.134.0/24 maxlen: 24
                          74.221.136.0/24 maxlen: 24
                          74.221.138.0/24 maxlen: 24
                          74.221.140.0/24 maxlen: 24
                          74.221.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:c0:2f:b3:04:83:00:a2:5a:cd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=c952de3d-03e9-497c-be67-03576f889748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4d:87:35:51:bf:7c:0f:ca:74:c5:bf:4e:d7:
                    20:44:ef:3d:a6:5c:4b:bb:6a:d8:59:b6:46:74:80:
                    52:89:14:6f:e5:63:5f:0a:c4:d8:fc:32:b3:9d:8c:
                    44:ae:de:b9:94:ef:18:d9:f2:52:fc:67:b4:e5:e0:
                    6d:cf:08:a6:fc:f2:7b:47:79:1b:7e:38:fd:f1:b7:
                    d7:f6:5c:4b:81:f3:de:fe:55:09:3b:1d:c9:5c:1a:
                    ca:b5:47:67:fb:4e:3b:8b:a5:55:7f:07:61:6a:b7:
                    ea:90:58:be:72:5a:4e:2b:f2:7a:a1:b2:0d:43:1d:
                    5c:c1:89:1b:74:5e:3e:58:3b:73:f4:6e:48:41:39:
                    0f:16:d1:e5:bc:ea:7e:ba:a3:d7:9e:44:79:6b:1d:
                    00:5c:c2:03:90:ee:ec:42:b8:7b:8a:fa:40:06:08:
                    4e:65:2e:1a:b4:a2:76:f6:82:fb:7e:24:43:b3:08:
                    89:c8:2f:c4:dd:52:38:46:bf:6a:3c:2f:2b:d9:02:
                    4f:86:7e:26:d6:bd:25:cc:72:b6:ba:d2:0d:94:a4:
                    db:e5:8d:4c:3c:dc:9f:42:5f:71:49:15:84:6e:8b:
                    36:c2:24:9b:83:77:8b:e1:3f:7d:2f:e5:3f:23:12:
                    d1:44:e6:13:fd:9c:08:be:ac:a1:80:d1:a0:98:b9:
                    40:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A6:71:25:A4:8B:D0:1B:0D:F9:28:84:A8:95:4B:D0:9D:C9:81:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/362ee3ed-39d3-3a24-8491-74fd9d22f4fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.134.0/24
                  74.221.136.0/24
                  74.221.138.0/24
                  74.221.140.0/24
                  74.221.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:72:0e:67:2b:82:ca:74:57:27:58:77:0a:f2:05:b9:17:b6:
         1f:f0:be:57:7c:b7:57:4a:41:85:e5:61:cc:5d:2b:f8:9f:31:
         2e:c6:7e:1e:86:30:2e:41:3e:4e:39:6d:02:bb:26:c1:86:f5:
         72:d8:99:9a:45:fd:1a:37:c4:c5:59:ef:af:1d:66:0b:ba:eb:
         93:25:f5:14:e3:a9:22:6c:45:85:58:2b:90:0c:1a:f3:1b:d8:
         8e:c8:39:25:45:2d:cd:f0:cf:6a:d2:27:2f:6e:97:4c:58:3c:
         2e:4f:e5:da:44:ee:1b:d4:d4:a6:fe:d4:85:05:f7:ec:ee:83:
         9b:99:76:4c:27:a9:47:c1:95:a9:0d:a5:c2:e8:08:89:7f:03:
         5d:94:8c:5d:cc:16:23:8d:1b:6c:fc:de:21:45:40:cb:f1:e9:
         54:0f:3b:f5:32:aa:46:c0:7f:fe:b8:27:0a:b0:34:4f:a8:7b:
         33:de:d5:fb:d5:a8:8e:e5:83:b5:f4:9e:d1:de:71:8a:a3:eb:
         a3:ca:e4:c0:dc:a0:6c:2a:7e:2a:69:f6:a0:7b:ab:98:e6:0e:
         c0:a3:df:be:9d:77:5f:c5:20:67:a2:58:7e:5e:89:3f:11:c3:
         05:0f:86:18:40:18:a1:15:67:b1:be:21:37:dc:be:e7:bb:45:
         f1:85:cf:d8
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE+CrcAvswSDAKJazVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk
Yzk1MmRlM2QtMDNlOS00OTdjLWJlNjctMDM1NzZmODg5NzQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk2HNVG/fA/KdMW/TtcgRO89plxLu2rYWbZG
dIBSiRRv5WNfCsTY/DKznYxErt65lO8Y2fJS/Ge05eBtzwim/PJ7R3kbfjj98bfX
9lxLgfPe/lUJOx3JXBrKtUdn+047i6VVfwdharfqkFi+clpOK/J6obINQx1cwYkb
dF4+WDtz9G5IQTkPFtHlvOp+uqPXnkR5ax0AXMIDkO7sQrh7ivpABghOZS4atKJ2
9oL7fiRDswiJyC/E3VI4Rr9qPC8r2QJPhn4m1r0lzHK2utINlKTb5Y1MPNyfQl9x
SRWEbos2wiSbg3eL4T99L+U/IxLRROYT/ZwIvqyhgNGgmLlAbQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFKimcSWki9AbDfkohKiVS9CdyYFyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMzYyZWUzZWQtMzlkMy0z
YTI0LTg0OTEtNzRmZDlkMjJmNGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQASt2GAwQA
St2IAwQASt2KAwQASt2MAwQASt2OMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC9yDmcrgsp0VydYdwryBbkX
th/wvld8t1dKQYXlYcxdK/ifMS7Gfh6GMC5BPk45bQK7JsGG9XLYmZpF/Ro3xMVZ
768dZgu665Ml9RTjqSJsRYVYK5AMGvMb2I7IOSVFLc3wz2rSJy9ul0xYPC5P5dpE
7hvU1Kb+1IUF9+zug5uZdkwnqUfBlakNpcLoCIl/A12UjF3MFiONG2z83iFFQMvx
6VQPO/UyqkbAf/64JwqwNE+oezPe1fvVqI7lg7X0ntHecYqj66PK5MDcoGwqfipp
9qB7q5jmDsCj376dd1/FIGeiWH5eiT8RwwUPhhhAGKEVZ7G+ITfcvue7RfGFz9g=
-----END CERTIFICATE-----
Generated at Mon Oct 26 05:35:46 2026 by rpki-client