Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa
File:                     255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa (raw, json)
Hash identifier:          JgJFtltOnm97u4ssJ3ICk+kN1Dl80dRKAup9jHkp3f4=
Subject key identifier:   E9:88:EB:41:C9:59:57:C8:97:94:6B:AE:D8:FE:DD:71:1C:FE:F7:2E
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F4328584DEF45FF0E586A6E160E79B500
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     396185
IP address blocks:        74.127.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:ff:0e:58:6a:6e:16:0e:79:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=c647d7d5-22d7-4fc8-9581-03ee60c315bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f0:2e:14:06:d9:8e:71:a5:89:32:76:2b:ad:
                    00:e0:04:5d:98:f0:06:f2:d3:a8:af:07:c4:a9:58:
                    d0:c9:da:33:8b:35:96:8a:8b:4a:7f:12:60:9e:50:
                    7d:56:34:ac:62:89:32:49:c5:f2:7e:c2:31:45:57:
                    78:b7:0a:e6:f0:da:c7:d5:82:46:2a:b9:28:9a:ac:
                    45:4d:47:1b:6e:e5:6d:84:d2:de:8f:e8:2c:e5:3d:
                    f5:3a:be:8d:6a:dd:7e:af:6a:d1:d0:bd:52:c1:15:
                    9a:1e:1b:b2:da:78:50:4b:b3:bb:44:c6:e7:eb:46:
                    6e:38:7f:d6:fa:82:ba:3c:a2:f1:39:6e:dc:48:7e:
                    1b:64:cb:25:2d:49:eb:8f:47:9c:05:7b:48:da:79:
                    65:5e:24:ea:1a:29:3d:b3:e3:99:a5:75:68:37:91:
                    d5:78:41:28:38:64:c0:2f:1b:05:fc:52:63:74:87:
                    99:b3:c4:83:24:b9:1f:a9:99:00:87:75:4a:a4:55:
                    95:71:c2:43:f8:83:f2:58:5d:0d:b4:0f:47:7b:9e:
                    03:7a:e8:08:e1:e9:fc:6f:38:bc:79:d4:2a:a9:ac:
                    1a:38:10:2e:7a:c0:d6:4c:3a:22:3c:89:40:31:5b:
                    e3:26:e0:e7:8a:2c:02:8d:e7:44:99:14:19:99:d5:
                    15:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:88:EB:41:C9:59:57:C8:97:94:6B:AE:D8:FE:DD:71:1C:FE:F7:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.127.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:58:87:eb:ac:bb:e9:f5:b4:df:d2:f3:3c:a4:16:64:d1:fb:
         66:e6:f6:52:e7:c8:ab:6a:36:38:24:19:16:9b:c9:85:9f:53:
         ef:f7:e3:10:1e:2a:19:6c:c7:e1:40:6a:c1:64:80:8c:27:6c:
         68:3d:f2:78:8f:4a:f8:c2:d4:6f:ac:11:34:a1:b1:32:6e:73:
         2d:f9:b8:26:0d:66:22:a2:c7:5b:4e:61:85:ed:3c:3d:8c:4f:
         19:04:de:d3:6f:c9:07:1e:00:bd:d0:eb:79:15:6f:b6:aa:1f:
         d0:91:25:55:a4:f8:0e:9e:5b:62:9b:c0:41:97:00:d7:dc:01:
         06:66:ae:0a:34:32:fc:f1:00:13:31:19:ef:fc:23:10:f4:4b:
         c2:2a:f8:ec:24:b6:a1:f3:6c:8e:e1:a2:5d:66:e1:0e:f9:24:
         1c:28:2b:dd:3e:40:63:d5:78:a4:00:e2:80:dc:90:ff:81:5b:
         c8:0c:85:8d:3c:8d:3b:e3:50:80:8f:60:a1:e1:b5:c7:40:f1:
         74:35:9a:77:62:25:4f:74:0a:96:f2:ba:86:eb:45:1e:87:96:
         cd:a6:f2:0a:16:3f:4c:09:65:f8:a2:aa:be:e6:e2:66:5c:75:
         a8:c2:47:7a:e7:9f:dd:ab:7e:0a:7e:69:9a:a4:40:1e:29:89:
         61:a5:31:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vRf8OWGpuFg55tQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm
YTExMB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk
YzY0N2Q3ZDUtMjJkNy00ZmM4LTk1ODEtMDNlZTYwYzMxNWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfAuFAbZjnGliTJ2K60A4ARdmPAG8tOorwfE
qVjQydozizWWiotKfxJgnlB9VjSsYokyScXyfsIxRVd4twrm8NrH1YJGKrkomqxF
TUcbbuVthNLej+gs5T31Or6Nat1+r2rR0L1SwRWaHhuy2nhQS7O7RMbn60ZuOH/W
+oK6PKLxOW7cSH4bZMslLUnrj0ecBXtI2nllXiTqGik9s+OZpXVoN5HVeEEoOGTA
LxsF/FJjdIeZs8SDJLkfqZkAh3VKpFWVccJD+IPyWF0NtA9He54DeugI4en8bzi8
edQqqawaOBAuesDWTDoiPIlAMVvjJuDniiwCjedEmRQZmdUVdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOmI60HJWVfIl5Rrrtj+3XEc/vcuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw
ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvMjU1ZmIzZTItNjZiMS0z
YzJhLTgwZDgtZjg4MDYzNDhjNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1
YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk
ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5
NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn9ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9Yh+usu+n1tN/S8zykFmTR+2bm9lLnyKtqNjgkGRabyYWfU+/34xAe
Khlsx+FAasFkgIwnbGg98niPSvjC1G+sETShsTJucy35uCYNZiKix1tOYYXtPD2M
TxkE3tNvyQceAL3Q63kVb7aqH9CRJVWk+A6eW2KbwEGXANfcAQZmrgo0MvzxABMx
Ge/8IxD0S8Iq+OwktqHzbI7hol1m4Q75JBwoK90+QGPVeKQA4oDckP+BW8gMhY08
jTvjUICPYKHhtcdA8XQ1mndiJU90CpbyuobrRR6Hls2m8goWP0wJZfiiqr7m4mZc
dajCR3rnn92rfgp+aZqkQB4piWGlMT4=
-----END CERTIFICATE-----
Generated at Mon Jun 1 22:59:06 2026 by rpki-client