Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/8f1b570c-f52e-3240-82a2-20534ab237aa.roa
File:                     8f1b570c-f52e-3240-82a2-20534ab237aa.roa (raw, json)
Hash identifier:          iedh1UCjFDqYU4U1EL7iDiSwB0jI5mZLmZjmGaZ9iXY=
Subject key identifier:   20:AD:E0:F8:8A:8F:F8:92:99:80:72:37:FB:EF:B2:87:AF:59:78:78
Certificate issuer:       /CN=23658315-b56f-46db-89d2-184000d7f7e1
Certificate serial:       010D0C9F4328584F655D7001A574FA0DCB077800
Authority key identifier: E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/8f1b570c-f52e-3240-82a2-20534ab237aa.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     14007
IP address blocks:        74.50.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:70:01:a5:74:fa:0d:cb:07:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23658315-b56f-46db-89d2-184000d7f7e1
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=da22e30a-42f9-473a-b953-36ee7d9ca264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:83:b4:d8:68:df:25:b6:ac:cc:23:de:5f:f5:
                    c1:7d:80:39:7c:58:aa:95:28:c0:b9:f7:5c:6b:83:
                    df:e3:1c:fe:0b:42:0d:af:a0:ba:88:50:0a:72:8a:
                    9e:b8:5e:b9:23:ae:19:d3:80:31:c2:e6:78:83:5d:
                    31:59:79:4f:23:fa:1d:3f:bc:b1:81:0c:cf:56:7e:
                    9c:9f:b4:9f:a6:c5:30:f0:da:13:1e:ff:da:33:4e:
                    1f:85:32:17:16:70:22:ea:40:5d:5b:b7:49:54:91:
                    ce:70:ff:5f:c0:e3:58:10:46:3a:76:55:0c:6d:4c:
                    e8:9c:00:1d:52:96:f2:78:71:5f:87:db:96:b9:38:
                    be:15:4b:5a:32:b1:24:e7:b7:5e:90:9a:e0:3e:ce:
                    c7:54:89:59:26:ae:0c:c5:0f:ba:bc:ec:cd:f4:c4:
                    2f:f4:25:f1:b2:c5:e9:69:25:00:b6:33:b7:5f:ca:
                    d4:14:88:20:87:5f:2d:2b:f1:19:90:88:56:4d:2d:
                    af:9e:f6:cb:b8:71:fe:cb:ce:d6:f6:95:18:51:91:
                    8c:4f:78:0d:78:98:ae:c7:14:50:f2:66:82:43:76:
                    f1:fc:a9:ac:78:d0:9b:a9:67:8e:fd:21:e4:80:6a:
                    ba:80:04:ea:18:8b:b6:72:fb:b2:78:c8:8c:97:03:
                    9d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AD:E0:F8:8A:8F:F8:92:99:80:72:37:FB:EF:B2:87:AF:59:78:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/8f1b570c-f52e-3240-82a2-20534ab237aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl

            X509v3 Authority Key Identifier:
                keyid:E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:59:41:66:8f:f7:8b:4b:b7:8d:56:af:c8:55:54:94:22:24:
         b6:35:c7:7f:e0:ae:ad:c8:68:5c:f5:fb:7c:7f:35:52:3c:d8:
         fd:e1:44:0e:9e:29:77:fe:fa:e9:65:77:26:7a:2e:c8:ff:25:
         07:f6:a9:02:47:49:0b:71:4c:c8:d6:82:6b:97:6b:76:66:29:
         37:a5:9b:12:b9:25:c7:f4:62:79:09:88:3d:9e:a7:ed:9e:29:
         1d:bf:39:b7:b4:f6:e4:8a:7d:81:ee:41:86:b0:e9:60:fd:80:
         c6:2a:bb:3e:bd:83:61:27:52:e0:a6:29:01:2d:f0:22:55:1f:
         f4:9b:49:37:3a:c1:da:6c:bd:71:7d:32:0c:e1:b5:68:a2:3b:
         fd:33:bb:56:1e:7d:06:5f:85:57:a9:71:a5:e1:59:46:28:be:
         55:b9:be:da:ff:60:f1:5a:2e:27:e4:b6:97:9a:ed:1c:bf:76:
         89:89:8c:72:6f:d1:67:a3:2d:33:56:35:30:c6:33:f7:58:d7:
         ef:63:71:60:2b:48:2e:f5:53:04:5f:96:5c:de:af:ea:a7:2d:
         d3:0a:a1:4a:e4:46:ea:1b:3f:2e:d8:60:4c:ba:36:d3:2a:4b:
         b7:b3:5b:ab:21:51:0e:83:36:d9:16:07:e9:15:61:d2:43:10:
         7a:16:a3:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXXABpXT6DcsHeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjM2NTgzMTUtYjU2Zi00NmRiLTg5ZDItMTg0MDAwZDdm
N2UxMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
ZGEyMmUzMGEtNDJmOS00NzNhLWI5NTMtMzZlZTdkOWNhMjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYO02GjfJbaszCPeX/XBfYA5fFiqlSjAufdc
a4Pf4xz+C0INr6C6iFAKcoqeuF65I64Z04AxwuZ4g10xWXlPI/odP7yxgQzPVn6c
n7SfpsUw8NoTHv/aM04fhTIXFnAi6kBdW7dJVJHOcP9fwONYEEY6dlUMbUzonAAd
UpbyeHFfh9uWuTi+FUtaMrEk57dekJrgPs7HVIlZJq4MxQ+6vOzN9MQv9CXxssXp
aSUAtjO3X8rUFIggh18tK/EZkIhWTS2vnvbLuHH+y87W9pUYUZGMT3gNeJiuxxRQ
8maCQ3bx/KmseNCbqWeO/SHkgGq6gATqGIu2cvuyeMiMlwOdPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCCt4PiKj/iSmYByN/vvsoevWXh4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzY1
ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQwMDBkN2Y3ZTEvOGYxYjU3MGMtZjUyZS0z
MjQwLTgyYTItMjA1MzRhYjIzN2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjM2NTgzMTUtYjU2Zi00NmRiLTg5
ZDItMTg0MDAwZDdmN2UxLzIzNjU4MzE1LWI1NmYtNDZkYi04OWQyLTE4NDAwMGQ3
ZjdlMS5jcmwwHwYDVR0jBBgwFoAU5YfMbY7t14LlHY1OWXdrNmM0d3owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzY1ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQw
MDBkN2Y3ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESjLgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIxZQWaP94tLt41Wr8hVVJQiJLY1x3/grq3IaFz1+3x/NVI82P3hRA6e
KXf++ulldyZ6Lsj/JQf2qQJHSQtxTMjWgmuXa3ZmKTelmxK5Jcf0YnkJiD2ep+2e
KR2/Obe09uSKfYHuQYaw6WD9gMYquz69g2EnUuCmKQEt8CJVH/SbSTc6wdpsvXF9
MgzhtWiiO/0zu1YefQZfhVepcaXhWUYovlW5vtr/YPFaLifktpea7Ry/domJjHJv
0WejLTNWNTDGM/dY1+9jcWArSC71UwRfllzer+qnLdMKoUrkRuobPy7YYEy6NtMq
S7ezW6shUQ6DNtkWB+kVYdJDEHoWo8Q=
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:44:36 2026 by rpki-client