Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b378ea31-f6ec-3ed5-8311-5b6244a54f06.roa
File:                     b378ea31-f6ec-3ed5-8311-5b6244a54f06.roa (raw, json)
Hash identifier:          o9IcoVwQmsiTJ8q9MOKpSzd1MW2aC5E5GaWoCn/iTnA=
Subject key identifier:   66:A3:D6:28:B4:29:D0:CD:6D:98:E2:B8:36:55:8B:9B:47:21:57:B2
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584C93D1AC00C1850F29937E4780
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b378ea31-f6ec-3ed5-8311-5b6244a54f06.roa
Signing time:             Mon 19 Jan 2026 14:00:38 +0000
ROA not before:           Mon 19 Jan 2026 14:00:38 +0000
ROA not after:            Sun 19 Apr 2026 13:00:38 +0000
asID:                     39981
IP address blocks:        69.74.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:93:d1:ac:00:c1:85:0f:29:93:7e:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Jan 19 14:00:38 2026 GMT
            Not After : Apr 19 13:00:38 2026 GMT
        Subject: CN=b08a5922-1720-4292-a7a8-8de03647b675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:78:85:73:94:56:ca:ee:65:20:4a:21:b3:97:
                    68:a2:f8:34:66:79:70:4f:ee:9f:8f:4f:71:2a:c6:
                    e8:16:98:ae:3e:f1:38:a6:03:51:fa:52:0f:86:30:
                    72:05:e1:be:21:fa:54:fd:87:8c:21:e7:a2:5f:73:
                    ba:00:0b:df:d7:56:3e:5d:a2:a6:fc:60:f7:75:74:
                    d0:03:77:11:ef:15:1f:a7:6e:e2:c9:11:c6:48:76:
                    e8:f7:e9:4f:e8:76:5c:61:66:b9:c6:dc:f9:ea:e6:
                    f4:99:72:21:9d:c0:87:6d:8a:40:ed:93:49:d5:bc:
                    43:49:f5:a4:80:83:75:77:ce:46:85:80:96:f1:5a:
                    82:30:2c:c3:97:13:6d:06:fa:aa:fa:70:5e:ce:7e:
                    fe:f7:30:a8:e5:3e:11:c8:60:9f:1f:96:e3:90:39:
                    3f:fd:af:38:e6:45:a2:fd:ff:05:4f:70:db:5c:ec:
                    0e:27:6b:99:74:40:4a:93:ac:2e:47:82:9a:0c:ee:
                    6f:25:7e:24:71:77:97:e8:36:2a:d8:04:19:84:ca:
                    54:0b:82:ce:37:b7:90:f7:de:8d:53:05:4e:cf:68:
                    a8:f2:3d:88:71:e5:ba:c4:b8:11:c2:fc:75:6b:e1:
                    2d:7b:90:de:8d:65:b0:71:0e:ed:36:1b:22:0f:71:
                    64:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A3:D6:28:B4:29:D0:CD:6D:98:E2:B8:36:55:8B:9B:47:21:57:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b378ea31-f6ec-3ed5-8311-5b6244a54f06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:f4:0a:a8:42:fa:04:53:72:37:11:47:25:77:2f:3a:8d:5d:
         2d:37:9c:d8:c1:0e:c2:4c:76:95:4a:f7:10:34:42:54:1e:99:
         ba:f7:41:1c:0f:ea:1f:9a:7a:96:aa:db:f7:b4:a7:d9:b5:54:
         a4:3a:4f:8b:d1:75:77:b4:e0:e0:81:8d:df:ca:84:c9:90:f4:
         90:d4:df:59:15:38:95:b4:bd:b9:e4:01:d9:f9:2f:5e:56:bb:
         4c:92:0e:83:a7:5e:c7:f6:05:23:0b:b8:29:fa:6c:a5:6c:82:
         d7:52:1b:fd:46:92:d6:c6:85:5d:89:14:c6:97:b1:d0:e3:7c:
         01:3e:29:df:c2:53:ce:4d:5b:22:03:22:2d:72:25:cd:32:cc:
         d4:7d:cb:b8:ce:f9:5c:ca:eb:ca:50:90:cf:5a:db:09:0a:13:
         e6:e5:1b:d0:e6:fe:0a:7a:87:96:7e:68:af:d2:0b:53:f4:98:
         73:54:3f:6b:f8:ef:13:0d:86:fd:83:b4:63:8f:70:56:42:f7:
         c2:89:b5:ed:1c:17:d0:9e:cb:e0:83:b4:56:c6:70:63:b8:4c:
         93:37:e5:54:c7:f5:ec:5a:08:7b:db:3f:67:ed:8f:f6:05:54:
         cd:aa:cc:33:d8:c5:8b:4d:00:9f:5d:b6:da:13:e2:89:6b:d7:
         7d:cb:36:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyT0awAwYUPKZN+R4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI2MDExOTE0MDAzOFoXDTI2MDQxOTEzMDAzOFowLzEtMCsGA1UEAxMk
YjA4YTU5MjItMTcyMC00MjkyLWE3YTgtOGRlMDM2NDdiNjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3iFc5RWyu5lIEohs5doovg0ZnlwT+6fj09x
KsboFpiuPvE4pgNR+lIPhjByBeG+IfpU/YeMIeeiX3O6AAvf11Y+XaKm/GD3dXTQ
A3cR7xUfp27iyRHGSHbo9+lP6HZcYWa5xtz56ub0mXIhncCHbYpA7ZNJ1bxDSfWk
gIN1d85GhYCW8VqCMCzDlxNtBvqq+nBezn7+9zCo5T4RyGCfH5bjkDk//a845kWi
/f8FT3DbXOwOJ2uZdEBKk6wuR4KaDO5vJX4kcXeX6DYq2AQZhMpUC4LON7eQ996N
UwVOz2io8j2IceW6xLgRwvx1a+Ete5DejWWwcQ7tNhsiD3FkKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGaj1ii0KdDNbZjiuDZVi5tHIVeyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvYjM3OGVhMzEtZjZlYy0z
ZWQ1LTgzMTEtNWI2MjQ0YTU0ZjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUoZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK30CqhC+gRTcjcRRyV3LzqNXS03nNjBDsJMdpVK9xA0QlQembr3QRwP
6h+aepaq2/e0p9m1VKQ6T4vRdXe04OCBjd/KhMmQ9JDU31kVOJW0vbnkAdn5L15W
u0ySDoOnXsf2BSMLuCn6bKVsgtdSG/1GktbGhV2JFMaXsdDjfAE+Kd/CU85NWyID
Ii1yJc0yzNR9y7jO+VzK68pQkM9a2wkKE+blG9Dm/gp6h5Z+aK/SC1P0mHNUP2v4
7xMNhv2DtGOPcFZC98KJte0cF9Cey+CDtFbGcGO4TJM35VTH9exaCHvbP2ftj/YF
VM2qzDPYxYtNAJ9dttoT4olr133LNmY=
-----END CERTIFICATE-----
Generated at Thu Feb 26 15:03:49 2026 by rpki-client