Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/9eabb92a-16ab-3751-8346-2df048f36827.roa
File:                     9eabb92a-16ab-3751-8346-2df048f36827.roa (raw, json)
Hash identifier:          eQXjBzzr9qzMYyul72Jmd+sHgZFKCGy80Vke3Ok0efs=
Subject key identifier:   80:FB:86:4F:9C:39:2F:58:F7:D9:F2:E7:42:A5:FB:B6:B1:4A:13:F9
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584CBDB1E7FC89C8CE8B02FC9000
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/9eabb92a-16ab-3751-8346-2df048f36827.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     395123
IP address blocks:        74.50.216.0/23 maxlen: 23
                          74.50.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:e7:fc:89:c8:ce:8b:02:fc:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=93708c15-c5b4-490b-a88c-c2d93462a5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:20:d4:de:38:30:3e:4f:f6:51:9b:8a:4b:
                    52:0f:72:70:ad:b1:f3:dd:5f:d3:34:39:e9:71:44:
                    d9:7f:93:d1:8c:c5:96:f6:fb:77:89:74:71:d4:8c:
                    46:a5:6c:26:1d:5e:a1:29:c4:a8:4e:9e:b0:51:3b:
                    95:27:59:4a:80:4f:1a:f0:15:f4:f0:b2:67:5b:e8:
                    d8:9f:df:d7:3e:f9:2b:cd:e3:6a:a9:ae:a1:bf:92:
                    a0:2d:d9:4c:00:3e:a9:18:f2:0e:57:d6:d8:e9:b3:
                    df:aa:c9:27:9a:a5:83:b2:71:79:49:72:42:08:b9:
                    82:85:69:54:0a:e1:3e:01:00:3d:a1:c5:9a:ce:4c:
                    f3:af:db:af:55:37:7b:ff:1c:b2:2b:4a:fc:da:fd:
                    be:39:6f:2e:5b:1e:d0:54:b9:e1:1a:10:ff:a8:d0:
                    a7:8b:9d:b4:fd:01:82:34:c2:a0:54:a3:9a:76:5c:
                    f6:7c:50:f3:97:22:3d:59:79:e5:1e:f3:44:3d:9a:
                    ec:36:2d:84:7f:8a:aa:b4:55:59:72:1f:26:45:c0:
                    7b:c4:2b:15:25:15:d4:20:e6:e7:80:57:1c:fd:97:
                    17:c5:ca:1a:45:65:04:d6:28:07:9b:3b:51:45:bc:
                    de:eb:cd:14:d7:37:49:33:f4:04:e1:f5:ba:a6:97:
                    6f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FB:86:4F:9C:39:2F:58:F7:D9:F2:E7:42:A5:FB:B6:B1:4A:13:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/9eabb92a-16ab-3751-8346-2df048f36827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.216.0/23
                  74.50.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:e9:a2:73:b8:a1:4e:34:02:1d:34:3e:c0:c9:0f:8e:35:fe:
         9a:49:20:1b:8a:b5:05:16:22:0f:48:e9:0b:2c:9a:87:43:93:
         ad:79:70:da:0b:3e:e8:43:b3:0f:b5:dd:44:24:df:c6:4a:81:
         43:ab:37:cb:fe:f3:92:b5:d1:96:e2:e0:90:81:36:47:09:fa:
         bb:a5:b3:e6:eb:ba:fd:75:fa:ca:c1:3d:17:a8:cf:a1:91:93:
         c9:80:3f:82:d3:85:99:df:21:fe:a9:df:d4:1b:f0:2e:4e:77:
         93:be:30:16:01:3a:8b:34:76:11:12:2a:09:f0:00:54:15:08:
         82:94:23:13:39:73:e2:2b:c9:ff:24:56:de:64:bd:3d:ec:06:
         3f:d9:24:f1:80:13:fd:2e:a9:4c:63:77:06:ab:6d:e5:b6:4f:
         2b:4d:e9:14:a4:19:22:d1:05:59:aa:0e:b5:17:05:aa:e3:f9:
         08:3e:98:18:0d:91:cc:e5:b0:f4:09:3a:47:06:20:cd:ad:c1:
         f8:62:24:5f:a9:2f:47:c2:ac:cb:ff:81:d6:d9:1a:ea:c0:2b:
         f7:17:1c:de:51:64:d3:aa:3c:ae:35:03:47:33:1d:bb:ea:55:
         0a:f0:7d:a4:42:bc:5f:41:2d:0d:be:75:f8:02:03:d5:d3:62:
         6c:bf:e9:70
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEy9sef8icjOiwL8kAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmE4YTZmNzktMDhmZi00NTEyLTlmM2UtNThjNDJhODRl
ZDI1MB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk
OTM3MDhjMTUtYzViNC00OTBiLWE4OGMtYzJkOTM0NjJhNWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCYg1N44MD5P9lGbiktSD3JwrbHz3V/TNDnp
cUTZf5PRjMWW9vt3iXRx1IxGpWwmHV6hKcSoTp6wUTuVJ1lKgE8a8BX08LJnW+jY
n9/XPvkrzeNqqa6hv5KgLdlMAD6pGPIOV9bY6bPfqsknmqWDsnF5SXJCCLmChWlU
CuE+AQA9ocWazkzzr9uvVTd7/xyyK0r82v2+OW8uWx7QVLnhGhD/qNCni520/QGC
NMKgVKOadlz2fFDzlyI9WXnlHvNEPZrsNi2Ef4qqtFVZch8mRcB7xCsVJRXUIObn
gFcc/ZcXxcoaRWUE1igHmztRRbze680U1zdJM/QE4fW6ppdv6QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFID7hk+cOS9Y99ny50Kl+7axShP5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YThh
NmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0MmE4NGVkMjUvOWVhYmI5MmEtMTZhYi0z
NzUxLTgzNDYtMmRmMDQ4ZjM2ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmE4YTZmNzktMDhmZi00NTEyLTlm
M2UtNThjNDJhODRlZDI1LzZhOGE2Zjc5LTA4ZmYtNDUxMi05ZjNlLTU4YzQyYTg0
ZWQyNS5jcmwwHwYDVR0jBBgwFoAUwsB6azjvqoFVWA83c9qfk0ges38wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82YThhNmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0
MmE4NGVkMjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBSjLYAwQB
SjLeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAILponO4oU40Ah00PsDJD441/ppJIBuKtQUWIg9I6QssmodD
k615cNoLPuhDsw+13UQk38ZKgUOrN8v+85K10Zbi4JCBNkcJ+ruls+bruv11+srB
PReoz6GRk8mAP4LThZnfIf6p39Qb8C5Od5O+MBYBOos0dhESKgnwAFQVCIKUIxM5
c+Iryf8kVt5kvT3sBj/ZJPGAE/0uqUxjdwarbeW2TytN6RSkGSLRBVmqDrUXBarj
+Qg+mBgNkczlsPQJOkcGIM2twfhiJF+pL0fCrMv/gdbZGurAK/cXHN5RZNOqPK41
A0czHbvqVQrwfaRCvF9BLQ2+dfgCA9XTYmy/6XA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:40:41 2026 by rpki-client