Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/1b18fbe7-9c8d-3910-a789-9e788a7157e3.roa
File:                     1b18fbe7-9c8d-3910-a789-9e788a7157e3.roa (raw, json)
Hash identifier:          D95gfjvXjyEeRN5wrzm70UsdzumXtgWMNZ6ujkRNzzk=
Subject key identifier:   F1:FD:23:A7:E5:DE:E8:78:77:27:E5:8D:05:C7:1B:7B:C0:34:07:62
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584CE09755B49A4757547B466880
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/1b18fbe7-9c8d-3910-a789-9e788a7157e3.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        74.220.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:55:b4:9a:47:57:54:7b:46:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=197ca25a-973c-47bd-bf4f-8a9a3cec4d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d2:ad:85:53:ff:e3:fa:f2:30:d2:cb:fc:d3:
                    d3:ba:63:87:a8:75:cc:30:27:81:6d:1d:c1:8f:a2:
                    ae:77:a1:60:21:5a:5d:40:fe:d9:13:d6:1f:d8:0d:
                    11:9d:04:fb:9d:ee:a3:9b:b2:7c:d1:49:d7:3b:c6:
                    d2:50:9a:ff:6c:b1:7e:a9:e0:fe:5c:22:41:64:28:
                    7b:34:8d:99:fd:bf:ac:de:e1:80:a3:22:2d:f7:a0:
                    f9:46:0e:c7:f4:2f:f0:3b:4a:fd:c0:ab:9e:56:c9:
                    57:8d:93:a5:ea:d0:46:2a:91:95:b7:cf:af:54:ec:
                    18:c3:45:b4:60:6a:b8:93:4d:50:f2:bc:44:da:4c:
                    21:db:fe:9f:6c:6d:cd:1b:3d:04:78:26:07:a5:ff:
                    14:e5:c0:22:f7:72:d2:d8:10:a6:ed:54:61:8c:aa:
                    6a:6f:b9:86:3c:23:a1:67:32:aa:4e:7a:67:38:a2:
                    37:9a:4d:c7:4b:1a:8d:2e:34:0d:ac:de:a7:53:af:
                    6f:02:bf:62:9a:ca:08:63:2e:d5:39:9e:dd:a5:80:
                    21:6e:68:78:7e:b4:5c:f0:d7:93:ff:f3:b3:9d:a0:
                    47:47:a3:d5:e9:e3:63:2e:59:18:89:c8:ee:00:ad:
                    ac:50:1d:fc:e7:2d:d5:fe:c6:96:e0:56:b6:da:f0:
                    6f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FD:23:A7:E5:DE:E8:78:77:27:E5:8D:05:C7:1B:7B:C0:34:07:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/1b18fbe7-9c8d-3910-a789-9e788a7157e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.220.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:10:72:ac:09:1d:d3:c8:95:ae:3a:1e:a7:a1:d2:23:65:c1:
         f0:2a:27:bb:05:13:b2:bb:90:32:4d:a7:25:18:e8:76:6b:2e:
         a5:76:db:83:aa:0a:8e:30:14:35:17:69:8b:30:83:7e:4f:25:
         45:74:53:a5:86:96:26:8c:a3:71:ea:a4:a3:5d:48:20:4c:2d:
         25:84:0e:f9:36:3b:d9:2d:e1:11:fb:5b:62:a0:15:6a:d1:bf:
         b7:20:96:b9:57:88:52:33:be:7f:d8:4b:18:44:4c:6a:86:43:
         65:5f:56:5d:d5:70:08:60:78:07:25:fe:63:98:4a:e2:5a:06:
         47:d2:15:bc:b6:cc:41:cd:25:64:53:7a:8b:48:25:7f:54:60:
         48:50:00:34:39:f4:5c:a9:11:aa:43:ed:01:0d:bd:c6:e9:bd:
         06:46:2f:a7:c8:c2:7e:57:4b:7e:5b:83:7b:23:69:33:7c:86:
         5b:85:85:7e:7d:25:a1:b0:cf:35:a5:7d:6b:b3:b5:c8:cf:82:
         de:42:6d:4e:58:3d:52:78:0b:10:22:00:ae:62:fe:f6:6f:6d:
         82:39:6a:82:9d:cc:80:56:81:52:0e:72:8a:59:be:09:2a:2b:
         73:e9:c3:45:2a:e9:bf:e6:c7:3e:17:c8:af:99:86:cc:78:09:
         04:f8:fd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:56 2026 by rpki-client