Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/797dab8c-04a6-391b-ae3b-355157435b76.roa
File:                     797dab8c-04a6-391b-ae3b-355157435b76.roa (raw, json)
Hash identifier:          Rpawj50iEcCuKjXMa8fhD5Cmx2nMmoD63ZwoZkNR0Tw=
Subject key identifier:   F9:FB:9C:B1:60:7A:E4:35:A7:C4:E7:1A:E3:2B:E4:4F:91:6B:75:71
Certificate issuer:       /CN=27856758-5ea9-463e-969e-eb2a87a469d5
Certificate serial:       010D0C9F4328584ECBD1D21116013B67BD32C320
Authority key identifier: B8:A2:69:32:69:0D:FC:91:91:F9:CD:33:17:29:43:47:25:02:A2:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/797dab8c-04a6-391b-ae3b-355157435b76.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     64233
IP address blocks:        74.121.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/27856758-5ea9-463e-969e-eb2a87a469d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/27856758-5ea9-463e-969e-eb2a87a469d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:d2:11:16:01:3b:67:bd:32:c3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27856758-5ea9-463e-969e-eb2a87a469d5
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=bffa7246-35af-4eb3-b337-e45eb7fb7014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ad:8e:de:0a:f6:ca:8d:2e:ec:09:b6:15:1b:
                    6f:f7:b7:8c:aa:9e:8a:c1:08:6a:67:54:67:3a:f9:
                    75:07:1a:ac:78:c0:1d:f6:c3:7c:67:3e:59:47:67:
                    ca:25:9b:b8:ff:65:6b:b6:54:6c:8b:5e:c9:53:73:
                    8f:77:6c:dc:6b:fd:ca:20:1c:0e:1a:23:b6:21:0c:
                    ca:d8:14:e8:1a:c1:6e:1a:64:f1:aa:cd:c1:82:24:
                    3b:ff:dc:d7:1e:4c:b8:47:b3:21:4d:cc:5f:48:76:
                    d3:5d:5b:0c:f0:5b:2d:23:97:5a:b8:54:3a:16:00:
                    b0:0b:0c:5f:23:64:78:6b:e7:23:2f:ed:be:03:c1:
                    62:d8:b5:b8:67:4c:ab:81:6b:4d:0a:da:0f:72:34:
                    78:7d:0c:2d:27:d2:25:51:b7:95:d0:43:3c:33:22:
                    43:91:89:e5:94:b5:09:18:76:21:14:08:c3:6b:5d:
                    5e:83:b6:4a:6a:6b:16:cf:1f:c7:26:21:9a:93:65:
                    02:39:a7:ac:18:e5:d0:62:ff:93:c7:86:06:2b:6d:
                    af:21:e1:80:ec:57:6e:17:96:4f:b4:1d:4b:ba:19:
                    53:01:3e:47:2e:f8:8a:6e:cb:25:27:e3:8f:76:ef:
                    55:7b:ad:ca:81:d4:9c:0f:21:cd:2d:3b:d7:f5:3a:
                    69:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FB:9C:B1:60:7A:E4:35:A7:C4:E7:1A:E3:2B:E4:4F:91:6B:75:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/797dab8c-04a6-391b-ae3b-355157435b76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/27856758-5ea9-463e-969e-eb2a87a469d5.crl

            X509v3 Authority Key Identifier:
                keyid:B8:A2:69:32:69:0D:FC:91:91:F9:CD:33:17:29:43:47:25:02:A2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:02:93:83:5e:87:7b:ac:59:71:11:16:5d:5c:e9:36:b0:4b:
         34:39:ce:3e:af:45:36:98:5b:de:2c:64:af:4e:35:a0:3d:67:
         8e:03:b8:fb:8f:ef:c5:77:25:cc:59:ee:3a:8f:ea:7f:a9:dd:
         6b:0e:72:4f:eb:44:c3:6f:a1:b6:38:4f:8a:4d:0e:99:0e:e6:
         f6:b7:39:c2:53:65:c7:00:15:7e:5c:09:b6:ae:24:45:69:34:
         cc:fc:b7:8d:cd:6e:3a:50:9c:3e:a9:d1:8c:21:9b:44:4e:55:
         fd:c1:90:61:27:23:e9:6f:52:db:b8:68:74:f0:d4:72:7c:19:
         1a:5d:df:99:b1:39:58:18:05:7c:4c:73:d6:37:db:5f:91:6a:
         5b:38:1b:36:e2:6d:af:21:37:31:87:41:78:de:12:82:88:a5:
         54:76:f4:90:41:5c:f8:dc:76:0e:fe:35:31:d1:34:7e:71:ce:
         5a:0e:a7:c2:15:f6:01:3b:2d:ab:b5:0f:49:c2:b2:57:1c:4c:
         fc:8c:d7:f1:14:fe:d2:50:57:fc:16:92:4a:32:75:c2:b1:81:
         b2:3b:09:32:d8:ff:da:a7:51:3d:26:33:44:36:8b:aa:60:27:
         7a:61:1a:58:6f:ce:a3:bc:3f:b7:9f:11:c2:14:4d:24:5c:e6:
         af:d8:38:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:59:38 2026 by rpki-client