Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/141dc392-c7bf-33fb-a0a1-f3dad8b89bc1.roa
File:                     141dc392-c7bf-33fb-a0a1-f3dad8b89bc1.roa (raw, json)
Hash identifier:          doAzV4KzRTqkSZ+N1yjmodlwrVzZN3mn5sUDo8L8DxE=
Subject key identifier:   52:50:CB:5C:67:4D:70:0A:5F:5D:FF:9C:FE:FE:38:89:2D:C9:A4:22
Certificate issuer:       /CN=677759b4-a247-47ea-badb-bb809bc80a31
Certificate serial:       010D0C9F4328584E4DBA2AB7FDEFD205D6CAD340
Authority key identifier: 49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/141dc392-c7bf-33fb-a0a1-f3dad8b89bc1.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     14955
IP address blocks:        74.221.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:2a:b7:fd:ef:d2:05:d6:ca:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677759b4-a247-47ea-badb-bb809bc80a31
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=1fca870d-cca9-4f2d-83fa-af987be7e093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:48:3f:b3:90:48:ee:8d:ce:1b:b5:d5:fa:54:
                    62:07:fc:31:5b:bf:07:74:7a:ac:3d:74:3d:b2:5f:
                    a5:e6:6d:d4:ce:47:e4:cc:c0:71:f7:80:91:eb:4e:
                    0e:2f:ae:e1:06:c5:02:58:4a:b4:ba:31:e3:90:92:
                    3b:70:97:5d:03:b2:db:96:4d:77:be:ef:ce:d9:dc:
                    88:32:ea:8f:02:b2:86:ad:59:e0:4e:db:1b:16:9f:
                    5c:fa:25:e6:c6:f7:1f:d9:f2:ff:26:9b:64:d2:a5:
                    a1:35:21:29:83:6d:ea:c6:70:80:5f:4d:61:31:1a:
                    4d:b7:52:ca:d8:da:b2:41:22:c4:cb:b5:51:02:14:
                    77:d9:32:8a:53:d1:e1:4c:9d:ab:bb:8e:a1:47:7b:
                    c1:05:85:2f:de:dc:f0:62:1b:a4:4c:3c:c5:a3:e0:
                    4e:ec:72:0b:aa:22:18:70:dd:35:2b:ba:1d:38:7d:
                    38:8c:fd:5e:0c:87:5d:44:61:4b:14:dc:e5:31:25:
                    52:45:24:9c:55:cc:16:d9:e0:50:01:ab:cd:7c:2f:
                    29:15:29:9b:93:e9:23:f0:bb:02:3c:76:6c:d2:76:
                    1d:29:c5:d3:6e:42:0c:d1:17:66:56:1a:38:e2:42:
                    95:a1:32:57:2a:d1:e2:4a:7d:af:c5:f6:17:ae:4a:
                    01:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:50:CB:5C:67:4D:70:0A:5F:5D:FF:9C:FE:FE:38:89:2D:C9:A4:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/141dc392-c7bf-33fb-a0a1-f3dad8b89bc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl

            X509v3 Authority Key Identifier:
                keyid:49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:14:29:e3:5e:fe:8b:74:cf:5f:8a:14:69:b5:22:1b:e0:81:
         4b:cb:7d:48:73:7a:09:2d:38:73:cc:fc:b5:d5:a7:b3:63:8c:
         61:aa:2e:7d:60:84:54:8c:c2:e1:53:7a:54:0e:3b:d4:38:8e:
         63:82:d7:b7:a3:b0:09:3b:3b:54:80:6a:45:c0:38:27:17:fe:
         4f:b2:76:c3:02:7f:d5:32:85:28:1b:f1:e9:e7:d5:be:9d:c3:
         f1:03:9f:f2:ff:4b:77:7b:eb:a7:91:dc:b7:9b:79:1a:c2:f6:
         a5:31:6c:58:05:85:8b:02:ce:cf:c1:4c:bd:72:0f:35:68:e1:
         31:80:29:a9:a4:f4:bf:62:2e:e8:27:ad:5b:ac:44:64:d9:5b:
         9a:16:61:c1:ad:36:23:ef:5e:72:d5:e8:dd:bb:83:63:7e:2c:
         d3:83:1b:2f:a1:61:c5:2d:8a:14:d1:a1:b1:00:9e:04:8f:59:
         14:91:aa:26:9c:f7:97:f3:79:d3:15:19:ae:85:f2:11:85:c0:
         70:37:b5:88:39:cf:f6:bd:b3:ef:06:15:bc:ee:0a:57:71:08:
         de:d6:ad:ba:53:bd:88:9e:e9:83:2b:27:72:1c:ef:c4:c0:0d:
         dc:50:28:bd:ce:0a:d8:da:1c:62:5f:31:0b:88:01:5f:4e:af:
         c6:4b:b8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:04:03 2026 by rpki-client