Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982/68adb526-7ee2-3bdd-af13-e05e41fedf40.roa
File:                     68adb526-7ee2-3bdd-af13-e05e41fedf40.roa (raw, json)
Hash identifier:          1ZhZIn4gb5MPMFMuEmK1T+1HBY6RmflUNx8NGZ/0e64=
Subject key identifier:   8B:22:4F:E5:32:85:C4:29:3B:00:DB:3D:B4:3B:2C:25:98:5D:4B:B4
Certificate issuer:       /CN=ba63cc08-daec-4944-82e6-c294a3caa982
Certificate serial:       010D0C9F4328584EBFA64D4CDC8D5B6B4BC1FD6C
Authority key identifier: 7B:21:57:13:1B:DA:80:AD:2A:A4:E9:5E:34:0E:65:31:F8:2B:14:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982/68adb526-7ee2-3bdd-af13-e05e41fedf40.roa
Signing time:             Thu 06 Aug 2026 16:22:59 +0000
ROA not before:           Thu 06 Aug 2026 16:22:59 +0000
ROA not after:            Wed 14 Oct 2026 19:18:03 +0000
asID:                     15011
IP address blocks:        74.113.122.0/24 maxlen: 24
                          74.113.123.0/24 maxlen: 24
                          74.113.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982/ba63cc08-daec-4944-82e6-c294a3caa982.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982/ba63cc08-daec-4944-82e6-c294a3caa982.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:a6:4d:4c:dc:8d:5b:6b:4b:c1:fd:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba63cc08-daec-4944-82e6-c294a3caa982
        Validity
            Not Before: Aug  6 16:22:59 2026 GMT
            Not After : Oct 14 19:18:03 2026 GMT
        Subject: CN=92e69ae9-4cc8-40dc-8629-d9da1133a9df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:64:fd:91:b0:6a:32:21:12:6d:64:dc:7c:ff:
                    f1:09:cd:e9:1b:8a:ea:88:60:c6:f8:f8:e0:07:2e:
                    e7:e3:68:ea:00:73:c0:69:b8:4a:41:9e:f9:2c:08:
                    f9:53:6c:5d:4f:22:f9:ba:51:f5:6d:11:4f:4d:75:
                    60:c6:e7:15:20:e3:87:5f:b0:4b:12:a5:d2:f6:2d:
                    47:f9:06:d0:5f:e3:60:5f:65:f0:49:2d:9f:f9:16:
                    12:96:14:b1:bc:b2:33:bd:90:03:f8:ea:b7:1e:7c:
                    7a:9a:3c:fb:e0:a6:8b:6c:5f:9a:51:27:a6:04:07:
                    aa:6b:31:e4:12:95:44:7a:46:8c:56:56:2d:93:07:
                    f3:5b:5a:e3:bc:79:83:23:34:0a:ea:83:bc:4b:1e:
                    6c:43:1e:49:8c:41:d5:83:8a:c3:88:96:c5:7c:43:
                    36:0a:66:03:22:68:bd:a1:7b:ee:6d:f8:b1:7f:80:
                    f3:3b:c6:70:bf:8e:2f:a9:24:30:cd:a7:e0:89:f6:
                    bf:56:ae:5a:e3:f0:2c:34:c0:36:f0:b3:dd:a7:f6:
                    73:65:ff:26:d4:29:33:cf:a5:5e:83:6c:a9:1e:c1:
                    8a:56:5d:a5:71:1d:be:20:89:3a:7f:23:39:cd:4b:
                    05:8c:59:72:09:10:45:74:ec:1b:ee:bb:0e:65:ab:
                    20:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:22:4F:E5:32:85:C4:29:3B:00:DB:3D:B4:3B:2C:25:98:5D:4B:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982/68adb526-7ee2-3bdd-af13-e05e41fedf40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982/ba63cc08-daec-4944-82e6-c294a3caa982.crl

            X509v3 Authority Key Identifier:
                keyid:7B:21:57:13:1B:DA:80:AD:2A:A4:E9:5E:34:0E:65:31:F8:2B:14:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.122.0/23
                  74.113.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:5c:f3:0d:12:46:42:6e:d0:47:23:78:f0:45:19:3a:15:8d:
         85:56:cb:05:41:a6:cc:e2:42:b3:7b:78:7e:3b:41:c0:6b:67:
         33:a3:c1:98:5a:33:d2:85:03:6f:29:16:45:0a:c1:cb:8a:2d:
         5b:3f:74:4b:23:60:d9:3e:97:8a:88:c5:2e:42:ce:dd:0d:d6:
         85:98:33:83:97:24:98:c4:df:40:e8:62:6b:4b:e6:2a:9a:e9:
         9a:c2:12:96:b7:eb:85:64:3c:d5:85:23:c9:a6:c6:6e:ed:4f:
         f6:4e:9a:5d:8c:34:3d:4b:2c:b3:3b:c4:ed:97:9f:85:5e:2b:
         9d:cb:4f:c0:3d:cb:97:89:53:b3:98:f9:7d:37:e1:c9:12:95:
         4c:f9:0b:ce:61:00:02:1c:5d:08:c6:64:d2:9c:46:03:d3:14:
         2a:d2:b3:fc:08:be:65:2f:b9:61:0a:bc:21:bb:d1:46:ba:e7:
         3c:d2:f0:42:2c:a8:23:c1:76:94:7c:1f:e8:5f:e1:36:b8:94:
         6a:a9:5d:b2:ee:34:57:78:57:4d:77:a8:e5:b8:97:d3:ca:bf:
         9b:08:9c:aa:d0:57:b9:c6:b3:e9:29:cf:54:35:39:94:6d:65:
         8c:22:77:d5:8b:f9:11:9e:aa:db:4c:dd:db:d3:8a:72:50:74:
         dc:ab:1d:21
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6/pk1M3I1ba0vB/WwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmE2M2NjMDgtZGFlYy00OTQ0LTgyZTYtYzI5NGEzY2Fh
OTgyMB4XDTI2MDgwNjE2MjI1OVoXDTI2MTAxNDE5MTgwM1owLzEtMCsGA1UEAxMk
OTJlNjlhZTktNGNjOC00MGRjLTg2MjktZDlkYTExMzNhOWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGT9kbBqMiESbWTcfP/xCc3pG4rqiGDG+Pjg
By7n42jqAHPAabhKQZ75LAj5U2xdTyL5ulH1bRFPTXVgxucVIOOHX7BLEqXS9i1H
+QbQX+NgX2XwSS2f+RYSlhSxvLIzvZAD+Oq3Hnx6mjz74KaLbF+aUSemBAeqazHk
EpVEekaMVlYtkwfzW1rjvHmDIzQK6oO8Sx5sQx5JjEHVg4rDiJbFfEM2CmYDImi9
oXvubfixf4DzO8Zwv44vqSQwzafgifa/Vq5a4/AsNMA28LPdp/ZzZf8m1Ckzz6Ve
g2ypHsGKVl2lcR2+IIk6fyM5zUsFjFlyCRBFdOwb7rsOZasgTwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFIsiT+UyhcQpOwDbPbQ7LCWYXUu0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iYTYz
Y2MwOC1kYWVjLTQ5NDQtODJlNi1jMjk0YTNjYWE5ODIvNjhhZGI1MjYtN2VlMi0z
YmRkLWFmMTMtZTA1ZTQxZmVkZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYmE2M2NjMDgtZGFlYy00OTQ0LTgy
ZTYtYzI5NGEzY2FhOTgyL2JhNjNjYzA4LWRhZWMtNDk0NC04MmU2LWMyOTRhM2Nh
YTk4Mi5jcmwwHwYDVR0jBBgwFoAUeyFXExvagK0qpOleNA5lMfgrFFgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9iYTYzY2MwOC1kYWVjLTQ5NDQtODJlNi1jMjk0
YTNjYWE5ODIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBSnF6AwQA
SnF9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGtc8w0SRkJu0EcjePBFGToVjYVWywVBpsziQrN7eH47QcBr
ZzOjwZhaM9KFA28pFkUKwcuKLVs/dEsjYNk+l4qIxS5Czt0N1oWYM4OXJJjE30Do
YmtL5iqa6ZrCEpa364VkPNWFI8mmxm7tT/ZOml2MND1LLLM7xO2Xn4VeK53LT8A9
y5eJU7OY+X034ckSlUz5C85hAAIcXQjGZNKcRgPTFCrSs/wIvmUvuWEKvCG70Ua6
5zzS8EIsqCPBdpR8H+hf4Ta4lGqpXbLuNFd4V013qOW4l9PKv5sInKrQV7nGs+kp
z1Q1OZRtZYwid9WL+RGeqttM3dvTinJQdNyrHSE=
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:27:36 2026 by rpki-client