Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/7440a128-6a1d-39f5-bb92-7f4c14e4a082.roa
File:                     7440a128-6a1d-39f5-bb92-7f4c14e4a082.roa (raw, json)
Hash identifier:          49vcqiyOwZiycAWUZy1UGIjGYrtMg6BhN1uBHwqm88k=
Subject key identifier:   C8:E5:DA:7D:6B:AD:2F:42:F0:AB:5D:DB:E2:28:8E:4C:2A:BB:D0:1E
Certificate issuer:       /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial:       010D0C9F4328584E5084B6536139DA1302270300
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/7440a128-6a1d-39f5-bb92-7f4c14e4a082.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     812
IP address blocks:        74.198.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:b6:53:61:39:da:13:02:27:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=2481f8ca-3e7b-4bf5-9395-2f1bf087155c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b5:3e:a2:e4:63:67:73:8d:38:ae:1c:ac:18:
                    d9:6f:65:7d:d6:01:62:3b:57:88:30:f9:56:c2:49:
                    7a:75:8b:38:8e:87:dc:7d:87:1e:f0:a8:94:97:fb:
                    ae:34:8c:b8:bd:65:2c:c5:c4:b0:95:55:a3:8f:ec:
                    aa:94:f6:f6:49:0b:d0:87:10:81:17:b5:24:45:88:
                    ec:b5:05:68:b5:e8:d3:5b:4d:7c:a0:41:d3:9b:6c:
                    72:47:6f:f8:79:9f:42:ae:33:ad:1b:bf:c3:e0:bb:
                    ab:cd:a8:94:e9:98:10:2c:44:72:31:b7:db:a1:48:
                    aa:5f:a9:88:68:2c:d0:aa:75:65:a3:92:c0:52:eb:
                    bb:80:9c:de:1c:37:c3:6f:eb:a7:0a:44:6d:35:78:
                    9a:c4:ef:95:1d:1d:df:27:c4:53:75:c7:bf:66:ac:
                    ec:e7:6b:93:86:b3:94:9d:c6:29:12:61:9c:ca:f2:
                    c4:3e:68:18:d1:d8:19:5a:68:12:bb:b0:1f:89:a4:
                    85:65:e5:cc:36:63:8f:f6:66:82:80:b8:7c:b4:a5:
                    46:08:a2:ab:17:d4:85:d7:98:48:65:12:02:74:2e:
                    87:17:6f:44:05:cc:b7:8c:6e:0b:e7:75:28:3f:70:
                    57:c0:b2:5b:ea:d4:64:26:99:9b:1a:68:9e:fc:c2:
                    4d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E5:DA:7D:6B:AD:2F:42:F0:AB:5D:DB:E2:28:8E:4C:2A:BB:D0:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/7440a128-6a1d-39f5-bb92-7f4c14e4a082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl

            X509v3 Authority Key Identifier:
                keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.198.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:27:61:c9:1b:83:73:ad:20:e0:16:db:ed:c9:57:8e:50:39:
         02:89:d3:c2:a1:56:5a:7b:b9:35:3b:e8:87:00:2c:0e:36:bf:
         1a:8d:3e:0b:69:11:97:01:e2:a9:cf:6a:e6:08:15:f5:4d:72:
         5e:93:8d:37:c8:42:dc:9e:c3:e7:47:64:6e:1f:c4:3b:56:63:
         bd:2d:62:4a:23:e7:b3:cc:39:9b:40:c3:e2:e1:90:09:c2:58:
         3e:0a:8f:36:9a:af:e8:9e:62:e3:f6:76:79:f4:0c:a9:b7:7d:
         7a:b1:3d:40:e1:d0:aa:c4:49:8b:00:41:4d:cb:0b:c3:73:fc:
         c0:f9:bc:ff:8f:50:d5:08:b5:e7:14:76:7b:d9:1e:3d:22:07:
         2e:24:92:a4:02:80:9b:78:d9:1e:24:aa:61:e8:c7:85:d6:5c:
         bc:32:75:00:fe:14:20:38:2f:c2:ef:c9:51:eb:99:68:e9:ce:
         a3:37:e5:2b:74:32:25:df:9e:c0:2c:20:03:01:4f:10:8b:31:
         57:a3:c3:12:dd:1f:c4:d0:e3:0b:fb:af:d5:13:33:61:74:86:
         ee:fc:a0:c8:1b:e2:aa:0c:b7:ee:bf:7a:56:1a:4d:ac:01:7b:
         d4:0b:c8:39:70:c8:a2:26:c9:b1:23:c5:f9:16:97:e7:f5:66:
         7d:14:0c:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhLZTYTnaEwInAwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw
YTMyMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk
MjQ4MWY4Y2EtM2U3Yi00YmY1LTkzOTUtMmYxYmYwODcxNTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLU+ouRjZ3ONOK4crBjZb2V91gFiO1eIMPlW
wkl6dYs4jofcfYce8KiUl/uuNIy4vWUsxcSwlVWjj+yqlPb2SQvQhxCBF7UkRYjs
tQVotejTW018oEHTm2xyR2/4eZ9CrjOtG7/D4LurzaiU6ZgQLERyMbfboUiqX6mI
aCzQqnVlo5LAUuu7gJzeHDfDb+unCkRtNXiaxO+VHR3fJ8RTdce/Zqzs52uThrOU
ncYpEmGcyvLEPmgY0dgZWmgSu7AfiaSFZeXMNmOP9maCgLh8tKVGCKKrF9SF15hI
ZRICdC6HF29EBcy3jG4L53UoP3BXwLJb6tRkJpmbGmie/MJNPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMjl2n1rrS9C8Ktd2+Iojkwqu9AeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl
MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvNzQ0MGExMjgtNmExZC0z
OWY1LWJiOTItN2Y0YzE0ZTRhMDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3
ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0
MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw
Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASsa5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIEnYckbg3OtIOAW2+3JV45QOQKJ08KhVlp7uTU76IcALA42vxqNPgtp
EZcB4qnPauYIFfVNcl6TjTfIQtyew+dHZG4fxDtWY70tYkoj57PMOZtAw+LhkAnC
WD4Kjzaar+ieYuP2dnn0DKm3fXqxPUDh0KrESYsAQU3LC8Nz/MD5vP+PUNUItecU
dnvZHj0iBy4kkqQCgJt42R4kqmHox4XWXLwydQD+FCA4L8LvyVHrmWjpzqM35St0
MiXfnsAsIAMBTxCLMVejwxLdH8TQ4wv7r9UTM2F0hu78oMgb4qoMt+6/elYaTawB
e9QLyDlwyKImybEjxfkWl+f1Zn0UDIE=
-----END CERTIFICATE-----
Generated at Sun Jul 19 15:02:50 2026 by rpki-client