Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/21dfb560-2a18-39a6-9972-b64aeddba42a.roa
File:                     21dfb560-2a18-39a6-9972-b64aeddba42a.roa (raw, json)
Hash identifier:          8zpTj/tN6bZwCn2jTEnv0PYJdkLJHyGviGopft77+i0=
Subject key identifier:   7B:BE:C8:85:A4:59:3C:FB:6A:DE:FA:A9:61:BB:26:5D:F5:AE:88:A4
Certificate issuer:       /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial:       010D0C9F4328584E534F49B441ADE085CFEDE780
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/21dfb560-2a18-39a6-9972-b64aeddba42a.roa
Signing time:             Sun 28 Jun 2026 21:00:11 +0000
ROA not before:           Sun 28 Jun 2026 21:00:11 +0000
ROA not after:            Sat 26 Sep 2026 21:00:11 +0000
asID:                     812
IP address blocks:        74.198.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:53:4f:49:b4:41:ad:e0:85:cf:ed:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
        Validity
            Not Before: Jun 28 21:00:11 2026 GMT
            Not After : Sep 26 21:00:11 2026 GMT
        Subject: CN=3298e6d6-7d54-4220-891d-cbbc06a48d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:28:a1:24:fa:f5:3a:4a:99:6b:02:52:c3:
                    a9:6e:ab:66:9b:b8:fa:41:ff:2d:ba:f6:83:37:10:
                    8c:d8:87:58:d7:8c:ff:1b:50:e5:0b:c9:f1:96:ef:
                    b8:64:00:a8:e7:1d:bd:72:bb:de:4f:ad:ff:1b:ae:
                    12:de:b7:8e:3c:05:63:a9:63:f9:ad:76:21:7a:a7:
                    8e:72:35:3f:cf:50:e3:8c:95:37:01:bc:70:17:69:
                    88:80:03:f2:5c:c8:15:56:11:31:48:cb:8a:9e:99:
                    f6:4f:7d:cc:15:2f:b0:98:26:0d:6d:3a:18:42:11:
                    d8:f6:a1:91:02:d7:d6:f4:66:54:3c:a9:31:32:dc:
                    75:6b:30:24:a0:0f:40:16:43:90:a1:53:4c:bf:6b:
                    92:42:fc:45:2e:1e:48:68:c1:03:cb:b8:78:66:60:
                    48:c3:13:9d:45:69:81:48:8a:23:44:c4:05:a0:23:
                    80:3e:7d:4f:51:8e:f2:ec:ee:af:25:9f:73:29:1e:
                    3b:cb:83:7c:d3:48:88:1a:da:34:13:7b:47:81:b2:
                    1f:d8:66:34:29:3a:87:f1:1b:a7:93:53:f4:9c:0d:
                    a4:7e:0f:2d:49:72:db:a4:0b:2e:9a:1c:2d:f3:2c:
                    ee:19:b9:73:ef:ae:8d:0f:64:1b:bd:7a:48:11:b0:
                    9e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BE:C8:85:A4:59:3C:FB:6A:DE:FA:A9:61:BB:26:5D:F5:AE:88:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/21dfb560-2a18-39a6-9972-b64aeddba42a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl

            X509v3 Authority Key Identifier:
                keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.198.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:a7:23:bd:1c:2f:1b:f9:ef:cc:9e:28:06:a3:fc:09:66:9a:
         4f:8f:7c:2f:72:61:87:c4:f1:be:99:61:0b:c8:c3:6f:5d:4b:
         ed:27:2f:a1:af:c1:ec:ce:75:fc:c9:e8:99:d2:64:e9:05:6b:
         6a:f8:4b:ad:51:b0:e4:51:d5:e2:51:09:c5:a4:b4:a4:dd:8d:
         79:e2:21:c3:a0:56:8f:fa:a5:47:6b:19:d8:04:26:18:7a:c1:
         c9:25:e3:28:52:83:e2:d2:ef:46:c1:60:f8:6e:1a:ff:ea:33:
         1b:d4:3d:1b:04:ce:df:35:fb:a6:8b:c6:c7:67:86:02:60:76:
         53:11:f2:55:3d:7f:b7:6c:ad:cf:5e:ff:4e:f4:72:a0:9f:74:
         ac:f7:92:79:a0:d6:17:e2:f0:9d:a9:93:d6:19:13:a9:b5:f9:
         7e:ca:4c:79:4d:6a:7d:75:aa:27:25:25:4f:4e:ef:2f:6a:1c:
         c0:a2:58:3b:51:24:01:8f:fd:4e:d7:c1:cf:fe:42:e7:b0:a7:
         b2:19:27:8c:00:32:89:28:45:85:e4:a1:29:95:f6:b1:fb:12:
         5f:c0:aa:33:ba:b0:3d:b6:c4:6c:bf:c2:5c:d6:f9:03:64:a3:
         65:e4:5b:1a:52:11:72:9e:ca:d9:31:a6:51:20:77:72:86:e0:
         43:12:95:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 15:02:49 2026 by rpki-client