Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/cbe661bd-8e44-3c9c-85ab-da5f012891a4.roa
File:                     cbe661bd-8e44-3c9c-85ab-da5f012891a4.roa (raw, json)
Hash identifier:          mnG+P40VYlhllxe4Aibb7aEwr6x4+okhPNKSF/P1c5g=
Subject key identifier:   ED:92:B6:E0:D6:6F:79:A7:54:FE:0E:6E:0A:4D:49:75:02:54:8A:FE
Certificate issuer:       /CN=9e84557a-e1a0-4f10-b840-c930dc9d2ece
Certificate serial:       010D0C9F4328584D95F00BE218F5905D27B4BA00
Authority key identifier: 50:8C:8B:24:64:77:87:14:E7:98:80:E4:AC:1B:46:D4:56:6F:E3:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/cbe661bd-8e44-3c9c-85ab-da5f012891a4.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     62759
IP address blocks:        74.119.124.0/22 maxlen: 22
                          162.245.176.0/21 maxlen: 21
                          163.123.240.0/22 maxlen: 22
                          199.255.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/9e84557a-e1a0-4f10-b840-c930dc9d2ece.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/9e84557a-e1a0-4f10-b840-c930dc9d2ece.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:0b:e2:18:f5:90:5d:27:b4:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e84557a-e1a0-4f10-b840-c930dc9d2ece
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=855f3b66-8486-487f-af47-3c158688eb6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:e7:be:40:7a:0c:8a:39:14:37:7a:99:1b:
                    71:6c:fe:80:84:b3:47:34:37:fb:2e:78:e2:c0:4c:
                    ef:90:94:48:f8:82:52:ff:91:aa:74:86:6a:50:fe:
                    0c:72:73:49:02:82:86:4c:1c:cb:77:1b:0b:aa:e8:
                    f8:84:b7:ca:24:9a:08:a0:6a:32:6a:e2:6c:1d:79:
                    65:a3:4b:a9:60:ed:fa:ce:ed:2d:e4:7e:f6:50:46:
                    7b:4e:e1:f1:70:cc:60:47:f9:23:88:6a:b1:89:39:
                    a7:28:90:9a:4e:84:00:7b:18:a3:54:20:c3:6b:77:
                    4a:a3:df:ba:32:3f:85:18:c9:d1:e8:5a:15:bd:d2:
                    a1:f4:78:f3:88:a8:5f:e6:8a:fd:8a:8e:34:e3:dc:
                    ba:53:06:07:57:cc:37:df:c6:a6:c6:28:8f:47:b6:
                    75:81:73:e4:14:d2:f1:35:94:f4:cc:22:9e:57:b8:
                    e6:0e:fd:f7:75:ca:60:d2:6b:ca:2a:68:79:79:08:
                    ea:89:8f:45:a5:d9:c5:77:83:2b:82:1c:2a:7a:90:
                    d9:e3:bc:88:51:0a:70:c8:9a:63:cf:90:94:c9:e7:
                    9b:c3:3d:7f:27:50:70:c8:77:9d:df:5f:f0:7b:26:
                    41:2b:2d:7d:21:b1:4d:59:9b:3f:d7:e3:59:49:d8:
                    08:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:92:B6:E0:D6:6F:79:A7:54:FE:0E:6E:0A:4D:49:75:02:54:8A:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/cbe661bd-8e44-3c9c-85ab-da5f012891a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/9e84557a-e1a0-4f10-b840-c930dc9d2ece.crl

            X509v3 Authority Key Identifier:
                keyid:50:8C:8B:24:64:77:87:14:E7:98:80:E4:AC:1B:46:D4:56:6F:E3:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.124.0/22
                  162.245.176.0/21
                  163.123.240.0/22
                  199.255.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:d2:f3:20:e2:23:43:55:95:64:fe:69:ff:ed:36:20:74:af:
         af:5d:81:fb:ec:6f:24:9d:81:aa:1b:23:56:62:ad:82:64:ce:
         af:d2:59:9c:e4:f7:29:01:7a:0a:bc:bd:c5:6e:2a:96:b3:fb:
         98:02:94:61:da:e7:1d:68:8f:e3:4d:af:53:9b:71:41:db:6f:
         04:92:26:54:06:9d:26:13:67:ea:b4:65:86:ff:4c:96:f0:d0:
         6c:48:aa:01:a0:d8:d5:8f:e4:97:73:6d:27:e9:62:ca:1d:2c:
         4f:df:99:06:47:db:5b:fc:5a:34:37:45:33:59:84:7a:5d:df:
         3b:2b:35:4d:0f:db:1d:45:c2:8f:13:b0:f5:66:a2:36:ab:2e:
         73:a5:fb:a3:ec:ed:66:46:71:30:42:48:de:06:2b:53:06:49:
         a9:18:9a:d7:1c:fd:2d:2f:0a:15:2c:d8:10:38:d8:51:74:cb:
         5c:60:94:7b:a6:6d:dd:aa:51:1a:b2:75:f8:fd:3c:46:c9:de:
         df:ca:a6:ce:1f:76:8b:45:5c:34:b2:90:77:c6:29:2c:9b:da:
         77:e5:8f:a8:32:7e:34:bb:ad:b2:93:31:04:af:10:58:b1:40:
         5f:63:9c:6c:0c:ca:cf:06:03:92:2a:3f:55:f6:3f:43:7d:c9:
         77:e3:fa:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:24:46 2026 by rpki-client