Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/37c61494-afdb-3cd9-ba1b-5807e3bc7588.roa
File:                     37c61494-afdb-3cd9-ba1b-5807e3bc7588.roa (raw, json)
Hash identifier:          rzrjsvvhW/JYWCs5DxApct4xwb8WVLGLRgQF2Tu1Hi0=
Subject key identifier:   B0:44:11:85:A1:E3:79:8B:3E:9A:C3:ED:DB:F4:8D:57:75:54:46:73
Certificate issuer:       /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial:       010D0C9F4328584E5084B630280EFA30B993C100
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/37c61494-afdb-3cd9-ba1b-5807e3bc7588.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     812
IP address blocks:        74.198.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:b6:30:28:0e:fa:30:b9:93:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=262ac40b-4e50-4158-83bd-f7345845effb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ea:37:f9:5b:28:49:3f:80:34:6f:63:d1:25:
                    88:98:cc:e4:e2:19:c1:9f:ec:35:3f:08:96:c9:b4:
                    05:a5:ec:3b:b4:f0:66:b9:49:63:28:1c:12:24:4e:
                    b6:07:79:70:35:20:eb:41:a0:5a:05:72:d2:35:35:
                    c5:35:9f:ea:b4:3a:7d:38:9e:f5:23:e2:da:ba:b1:
                    98:cd:40:2e:9a:fd:d9:b2:a6:a7:3e:92:10:62:ca:
                    c5:25:d2:01:9d:e6:c3:91:42:26:d4:e8:77:b6:ac:
                    0b:fd:5f:4f:7c:ff:ff:c5:5e:32:a8:35:cb:11:43:
                    6f:76:29:29:6c:ff:94:d1:5d:6b:be:ba:79:0b:01:
                    0f:bc:56:5d:cc:5c:29:c7:9b:ff:5b:c6:8b:b6:ef:
                    aa:54:31:68:81:47:97:f3:5c:c6:b3:cf:d6:48:e1:
                    da:a3:0a:01:de:9e:0e:9a:b2:a1:c0:08:a3:ca:41:
                    9f:50:55:16:cf:3f:7e:4c:5a:e1:9b:72:f8:1f:7b:
                    c2:88:eb:0a:ba:ea:60:37:e0:b2:27:5f:be:ba:19:
                    45:30:18:1e:f2:ea:29:05:77:37:57:5f:61:14:af:
                    5a:ca:b7:c6:e4:7c:01:bf:f1:76:a3:9d:42:67:20:
                    8d:c2:25:32:0e:b4:a7:ce:cd:56:87:fd:f3:a8:6d:
                    ee:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:44:11:85:A1:E3:79:8B:3E:9A:C3:ED:DB:F4:8D:57:75:54:46:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/37c61494-afdb-3cd9-ba1b-5807e3bc7588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl

            X509v3 Authority Key Identifier:
                keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.198.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:5e:b9:c4:84:a9:ac:ff:e1:a8:1e:12:ac:2b:a3:77:e8:b1:
         0e:54:9b:2a:49:c4:35:c5:77:e9:49:10:9d:ea:03:43:63:91:
         8d:24:0a:dc:88:76:57:6a:a3:87:ea:ca:bb:a3:a9:c7:69:23:
         50:7a:1d:44:ce:bd:0e:0a:0e:e9:6e:4e:31:e9:33:b7:7c:94:
         7c:87:a2:f7:47:c2:38:70:50:6c:41:c8:5c:af:78:52:2c:55:
         6f:e8:68:a1:89:7b:51:47:3e:63:19:29:a2:b3:de:a9:aa:50:
         c2:f0:1d:2f:5e:f2:65:63:60:f3:01:87:33:36:97:e9:96:cb:
         52:ca:17:0d:23:84:a7:83:06:5b:0a:3c:c7:20:1b:05:a4:fe:
         8a:d9:25:fc:12:08:28:68:9f:4f:c5:b5:fc:23:5a:0e:ac:ba:
         e8:3d:03:fd:a1:63:e8:63:45:67:e4:33:60:cb:8e:39:81:92:
         ba:bd:9b:60:a5:da:79:d9:09:94:ab:4c:91:5e:05:98:7f:37:
         aa:24:50:14:3c:a4:08:9c:4b:77:0d:71:b5:37:bb:32:d3:ac:
         e2:a6:ae:37:ab:5b:02:13:db:d5:a0:6d:4b:91:33:c5:39:47:
         d1:f2:82:dc:42:41:5a:8e:ec:8d:a0:5c:af:eb:75:e3:e8:56:
         2f:5b:47:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhLYwKA76MLmTwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw
YTMyMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk
MjYyYWM0MGItNGU1MC00MTU4LTgzYmQtZjczNDU4NDVlZmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+o3+VsoST+ANG9j0SWImMzk4hnBn+w1PwiW
ybQFpew7tPBmuUljKBwSJE62B3lwNSDrQaBaBXLSNTXFNZ/qtDp9OJ71I+LaurGY
zUAumv3ZsqanPpIQYsrFJdIBnebDkUIm1Oh3tqwL/V9PfP//xV4yqDXLEUNvdikp
bP+U0V1rvrp5CwEPvFZdzFwpx5v/W8aLtu+qVDFogUeX81zGs8/WSOHaowoB3p4O
mrKhwAijykGfUFUWzz9+TFrhm3L4H3vCiOsKuupgN+CyJ1++uhlFMBge8uopBXc3
V19hFK9ayrfG5HwBv/F2o51CZyCNwiUyDrSnzs1Wh/3zqG3uOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLBEEYWh43mLPprD7dv0jVd1VEZzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl
MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvMzdjNjE0OTQtYWZkYi0z
Y2Q5LWJhMWItNTgwN2UzYmM3NTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3
ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0
MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw
Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSsZwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJeucSEqaz/4ageEqwro3fosQ5UmypJxDXFd+lJEJ3qA0NjkY0kCtyI
dldqo4fqyrujqcdpI1B6HUTOvQ4KDuluTjHpM7d8lHyHovdHwjhwUGxByFyveFIs
VW/oaKGJe1FHPmMZKaKz3qmqUMLwHS9e8mVjYPMBhzM2l+mWy1LKFw0jhKeDBlsK
PMcgGwWk/orZJfwSCChon0/FtfwjWg6suug9A/2hY+hjRWfkM2DLjjmBkrq9m2Cl
2nnZCZSrTJFeBZh/N6okUBQ8pAicS3cNcbU3uzLTrOKmrjerWwIT29WgbUuRM8U5
R9HygtxCQVqO7I2gXK/rdePoVi9bR4w=
-----END CERTIFICATE-----
Generated at Sun Jul 19 15:03:08 2026 by rpki-client