Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94db07dd-c802-3e55-b475-21ccfbd1236e.roa
File:                     94db07dd-c802-3e55-b475-21ccfbd1236e.roa (raw, json)
Hash identifier:          3hL9GtZRSzWmd8TDuORAx46nF01FptpWbMUwaHLdPmc=
Subject key identifier:   A6:DF:DD:F5:20:2E:AB:FB:92:40:63:09:92:A7:9A:F0:7F:75:49:45
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EB7F8B10B85D398280B2E4F03
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94db07dd-c802-3e55-b475-21ccfbd1236e.roa
Signing time:             Mon 03 Aug 2026 22:22:31 +0000
ROA not before:           Mon 03 Aug 2026 22:22:31 +0000
ROA not after:            Sun 01 Nov 2026 23:22:31 +0000
asID:                     3593
IP address blocks:        74.44.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b7:f8:b1:0b:85:d3:98:28:0b:2e:4f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  3 22:22:31 2026 GMT
            Not After : Nov  1 23:22:31 2026 GMT
        Subject: CN=5baf8be7-b0ca-4815-ac60-72442b21b304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c6:6a:1d:81:15:20:bd:07:8b:46:b1:45:20:
                    b6:ba:30:e1:21:e3:2d:0a:31:72:72:bf:ec:5d:c0:
                    f4:92:7a:e8:cc:17:d4:40:9e:e8:bf:3a:58:07:9d:
                    c1:8e:6a:7a:84:70:fe:5b:7b:21:48:be:81:ad:40:
                    db:3b:4d:7d:dc:ec:47:2a:84:21:98:1b:57:0a:7a:
                    9c:0c:3b:30:7f:a4:17:74:a0:b5:1d:e4:84:67:85:
                    59:4d:47:1c:22:77:9b:05:a5:5d:4e:52:0d:ca:5d:
                    99:00:a8:c7:8c:3c:91:82:1e:4b:71:ab:26:91:fb:
                    13:ba:ef:57:41:39:cb:84:35:a7:d1:71:11:ba:04:
                    d0:93:ac:85:45:cb:dc:c4:e0:cc:3f:a8:a0:1c:ee:
                    09:60:4a:bb:88:ef:8b:b8:3f:52:2c:37:8c:19:55:
                    eb:ad:f6:fc:9c:b0:aa:ac:06:67:16:f8:9b:77:27:
                    3a:10:31:7f:60:cb:68:86:d4:d0:d0:e2:3a:31:39:
                    f1:b0:79:5b:37:4d:97:ed:ee:ec:5f:f6:f0:cb:ca:
                    c9:15:fc:93:ed:49:87:ff:a7:13:0a:94:83:5a:35:
                    5e:d8:1f:86:d0:80:b6:b9:41:b0:33:e4:ce:59:ce:
                    44:a9:5c:69:a1:db:9e:36:74:f5:51:51:07:f6:df:
                    bb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DF:DD:F5:20:2E:AB:FB:92:40:63:09:92:A7:9A:F0:7F:75:49:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94db07dd-c802-3e55-b475-21ccfbd1236e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.44.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:21:cb:9d:b7:20:b0:3a:c4:dd:41:dd:1b:5e:21:24:a3:94:
         8d:e9:72:a0:5a:8e:96:6a:20:3d:7c:95:d9:25:4e:c8:0e:c4:
         50:ba:d9:47:21:94:47:a2:4e:d0:e3:3a:e2:07:af:7c:e0:ba:
         0f:83:29:03:50:ab:f5:e6:9e:06:77:b2:3e:e0:d7:a9:e0:e7:
         3e:49:f3:13:18:e7:b7:4d:8c:4a:04:be:de:39:b6:8b:f4:ea:
         85:76:0a:e2:3c:38:2f:4d:89:e9:85:30:33:68:4a:4c:d7:c7:
         4f:5c:60:94:2b:2f:41:ed:c4:f2:ed:c3:ce:c8:24:bf:c9:d3:
         72:68:f9:84:07:53:cc:82:44:3c:94:9a:3a:bc:88:e6:d3:26:
         a4:c7:23:34:2e:e1:67:e2:14:f0:c8:e0:98:16:d6:5e:de:7e:
         e8:e0:43:00:d0:c7:48:16:72:b9:aa:eb:6f:67:54:95:9d:78:
         93:25:22:df:f1:b8:f6:d1:24:bd:5d:9a:9e:4d:ad:d7:6c:d5:
         06:0f:64:01:0d:7f:9d:70:a0:6a:79:91:9b:0f:e9:74:13:47:
         ed:60:35:86:98:0f:73:f4:f7:e2:5e:f6:1d:58:26:72:4d:86:
         aa:be:ae:c6:95:0c:d4:d0:14:7d:59:c9:c3:22:80:a4:06:b2:
         90:a5:a6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:46:56 2026 by rpki-client