Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/376a7ae4-8233-37bf-bfdc-d9a38d02658a.roa
File:                     376a7ae4-8233-37bf-bfdc-d9a38d02658a.roa (raw, json)
Hash identifier:          MOHMuz1bM4wnmAIntukkzn8QRr3+QfnO5/u5iEI/weQ=
Subject key identifier:   48:C9:2D:3E:05:38:5F:BE:43:BE:56:09:DE:15:1B:AA:3B:07:51:4D
Certificate issuer:       /CN=b3f5323f-8bea-48c6-aa03-949255dd1997
Certificate serial:       010D0C9F4328584DE1508552C37E8DC827E8E480
Authority key identifier: 53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/376a7ae4-8233-37bf-bfdc-d9a38d02658a.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     46474
IP address blocks:        74.205.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:85:52:c3:7e:8d:c8:27:e8:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3f5323f-8bea-48c6-aa03-949255dd1997
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=5ad49103-defc-4b81-9104-f3424749ccd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:42:16:9d:95:5d:57:83:2b:5d:b7:d4:b0:58:
                    a0:38:a1:f9:26:2e:8e:35:6f:dd:82:03:44:d0:f2:
                    2c:08:14:d4:95:e5:a9:ab:c3:8f:56:42:93:28:fe:
                    77:32:d5:f6:8b:d3:77:7c:aa:54:20:6e:5f:f5:5e:
                    a9:6f:eb:f2:3d:6d:3f:2b:b9:51:5c:80:9c:70:e1:
                    bf:da:5e:34:b7:8c:34:dd:bf:fb:d6:fc:c5:d5:fc:
                    8c:89:fe:aa:2a:c1:4e:11:df:c9:e4:38:2a:9b:1d:
                    05:d0:8e:e0:06:92:72:65:3a:b9:6b:a2:14:e0:20:
                    ba:ff:f5:aa:e4:1d:a9:4f:3d:1f:46:d0:ca:ff:3b:
                    10:23:d2:ec:3c:07:90:dc:b6:74:c4:01:59:d0:db:
                    ed:75:e4:4d:f3:a0:24:d1:3b:c4:03:65:42:90:9e:
                    3c:5b:a1:77:3d:66:be:48:23:5f:e5:67:ee:fb:8c:
                    84:2b:3a:34:23:cf:ab:ed:40:ea:71:cb:a0:c9:65:
                    65:81:24:c9:98:be:c7:eb:4a:1f:d5:2e:b0:8d:c0:
                    02:e9:76:2a:2a:ce:fc:da:b9:e3:b6:31:94:e2:50:
                    3b:ac:05:5c:db:0e:4f:8c:4d:63:c7:23:39:39:3f:
                    1e:16:4a:0f:23:a1:28:93:3e:2e:e4:17:d9:7d:95:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C9:2D:3E:05:38:5F:BE:43:BE:56:09:DE:15:1B:AA:3B:07:51:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/376a7ae4-8233-37bf-bfdc-d9a38d02658a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl

            X509v3 Authority Key Identifier:
                keyid:53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.205.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:33:f6:59:de:94:c2:a0:54:51:8d:22:1c:cb:60:0f:b0:78:
         f6:e8:bd:71:63:20:9d:68:c6:bf:bc:1d:07:3b:d4:cd:b7:7a:
         de:f2:28:a4:44:58:07:22:c6:36:3b:a1:5a:fb:4f:1b:46:90:
         85:3e:57:a1:7f:c4:c7:7b:7a:ab:95:14:c0:c2:92:94:b7:f7:
         96:91:27:dc:70:a3:ca:4b:c9:d2:48:ed:1f:e6:3a:65:13:ed:
         a8:22:91:8c:e0:4e:7a:67:2b:41:0a:5b:cd:75:6b:02:27:77:
         b3:47:1a:c6:1f:11:63:ee:7a:e3:65:50:a3:d9:cf:b7:fc:33:
         a6:25:b9:ce:f7:df:ad:1c:c7:45:f8:d1:a3:d8:f0:e2:fc:53:
         7f:f7:d1:ee:af:66:a2:59:ca:d1:b2:fd:d0:e5:bc:e8:04:64:
         6c:4a:46:7c:f4:d5:0a:fc:24:16:c0:fc:ae:8d:74:e5:c5:f9:
         35:b3:c7:7a:c5:7b:e6:9c:d2:2e:52:65:e4:6f:fc:ba:6c:d0:
         bc:03:a3:dc:1c:42:19:01:d8:c7:df:7f:89:50:d5:cc:c9:cb:
         ae:04:98:48:d6:a3:3a:23:e4:bf:e8:42:5a:dc:c2:d4:10:f3:
         aa:41:58:97:7a:8b:82:97:f4:8b:52:e0:83:33:45:bd:08:72:
         b2:e6:7a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 17:53:09 2026 by rpki-client