Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1382f3b5-1820-325b-a0ec-1191943f618f.roa
File:                     1382f3b5-1820-325b-a0ec-1191943f618f.roa (raw, json)
Hash identifier:          SGamhaE3/g8vZdwi6EQ7+iHgbUnZfT2gqx+V209uDZ4=
Subject key identifier:   CD:DE:B3:17:CC:2F:6D:2C:6B:94:3C:5D:A4:84:8D:33:52:E0:AF:AF
Certificate issuer:       /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial:       010D0C9F4328584CF9B7868E33A5178C62B37760
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1382f3b5-1820-325b-a0ec-1191943f618f.roa
Signing time:             Wed 25 Feb 2026 02:00:32 +0000
ROA not before:           Wed 25 Feb 2026 02:00:32 +0000
ROA not after:            Tue 26 May 2026 01:00:32 +0000
asID:                     53264
IP address blocks:        74.119.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f9:b7:86:8e:33:a5:17:8c:62:b3:77:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
        Validity
            Not Before: Feb 25 02:00:32 2026 GMT
            Not After : May 26 01:00:32 2026 GMT
        Subject: CN=a13e31f0-ad4d-409d-b021-72970b60c51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:88:53:9f:d3:0c:5e:1f:ff:c3:c1:fa:3a:66:
                    12:66:76:5a:83:44:d5:9b:40:76:e6:a7:2d:35:6d:
                    f2:72:b0:32:9d:eb:30:20:ce:59:11:9b:89:f2:15:
                    d6:0b:c5:4a:a7:07:2a:4b:c3:61:bb:67:e3:f4:76:
                    08:26:a2:af:90:e2:c0:b7:dc:51:e0:02:e4:89:a7:
                    5e:4e:d3:2f:45:8a:15:0c:48:af:fa:bb:3f:42:17:
                    b8:51:6a:3d:b5:a8:88:45:cf:11:3e:2a:3c:d7:d8:
                    43:5a:1a:d8:04:f2:3d:69:7b:be:5f:2f:4a:cf:a0:
                    c4:4b:4d:da:f2:e1:0f:1c:e9:08:68:88:fc:a6:37:
                    82:07:00:d3:31:cb:3d:c0:b1:a9:fd:a3:45:a3:d3:
                    52:a8:95:bc:65:fa:70:26:51:8f:0c:43:c2:cf:52:
                    32:6f:ad:8d:7b:06:9a:15:c9:34:1a:24:d5:fc:8b:
                    31:da:ff:31:87:93:7f:f4:41:48:3f:df:19:cc:be:
                    b6:fc:29:26:e9:92:8f:12:b6:09:c1:c8:c0:6d:63:
                    03:df:f8:ef:e7:f1:e7:20:31:a7:80:42:c6:8e:8f:
                    80:b5:a9:4f:cc:33:40:53:d7:7e:e1:e0:a0:c9:78:
                    56:3b:9d:1d:65:d0:0b:e0:fd:59:7d:8d:51:a9:fd:
                    d7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DE:B3:17:CC:2F:6D:2C:6B:94:3C:5D:A4:84:8D:33:52:E0:AF:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1382f3b5-1820-325b-a0ec-1191943f618f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:32:54:8c:f4:c9:26:1e:b1:98:29:43:af:2e:9d:92:96:5c:
         19:da:9f:31:1d:3b:b7:90:49:4f:1c:d8:c0:0a:03:f1:73:68:
         42:57:e2:75:9b:62:c1:b1:9e:5d:3e:bc:b2:7e:65:37:5b:f1:
         24:93:dc:5e:ad:d5:d2:d5:b7:25:82:a7:5f:71:a3:9e:59:32:
         7e:e0:f7:6f:5b:ae:5c:fa:11:f4:e1:ca:44:00:4d:64:2e:13:
         f8:9f:f7:7b:7d:81:a8:f3:1d:76:ec:67:52:83:45:d7:cc:e8:
         3a:f2:85:68:69:2a:18:4f:a0:80:62:67:3a:a3:8c:2b:20:cd:
         95:b8:ac:94:12:e4:49:e6:d9:fa:66:52:76:8e:84:be:21:81:
         77:4c:b1:00:b0:7a:da:9d:15:6e:73:8b:af:1c:91:aa:1e:cf:
         df:29:13:2a:24:e7:5f:5d:fb:b3:30:1a:e9:44:df:a8:dc:5e:
         64:d0:83:8e:db:b6:8c:ea:f6:e2:11:06:07:c4:ed:53:53:b4:
         0e:cb:92:89:64:58:2e:20:bc:0b:12:a8:e6:b3:0f:4c:75:d4:
         fe:80:2d:86:4a:01:62:d1:54:be:87:6f:7e:a2:43:65:89:a4:
         5f:87:38:1e:e6:86:97:ad:32:64:0b:87:11:df:9c:ea:82:5d:
         59:ba:d1:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz5t4aOM6UXjGKzd2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4
ZWY1MB4XDTI2MDIyNTAyMDAzMloXDTI2MDUyNjAxMDAzMlowLzEtMCsGA1UEAxMk
YTEzZTMxZjAtYWQ0ZC00MDlkLWIwMjEtNzI5NzBiNjBjNTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIhTn9MMXh//w8H6OmYSZnZag0TVm0B25qct
NW3ycrAyneswIM5ZEZuJ8hXWC8VKpwcqS8Nhu2fj9HYIJqKvkOLAt9xR4ALkiade
TtMvRYoVDEiv+rs/Qhe4UWo9taiIRc8RPio819hDWhrYBPI9aXu+Xy9Kz6DES03a
8uEPHOkIaIj8pjeCBwDTMcs9wLGp/aNFo9NSqJW8ZfpwJlGPDEPCz1Iyb62Newaa
Fck0GiTV/Isx2v8xh5N/9EFIP98ZzL62/Ckm6ZKPErYJwcjAbWMD3/jv5/HnIDGn
gELGjo+AtalPzDNAU9d+4eCgyXhWO50dZdAL4P1ZfY1Rqf3XqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM3esxfML20sa5Q8XaSEjTNS4K+vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0
Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvMTM4MmYzYjUtMTgyMC0z
MjViLWEwZWMtMTE5MTk0M2Y2MThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3
MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz
OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj
MzQzMzhlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnfYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHsyVIz0ySYesZgpQ68unZKWXBnanzEdO7eQSU8c2MAKA/FzaEJX4nWb
YsGxnl0+vLJ+ZTdb8SST3F6t1dLVtyWCp19xo55ZMn7g929brlz6EfThykQATWQu
E/if93t9gajzHXbsZ1KDRdfM6DryhWhpKhhPoIBiZzqjjCsgzZW4rJQS5Enm2fpm
UnaOhL4hgXdMsQCwetqdFW5zi68ckaoez98pEyok519d+7MwGulE36jcXmTQg47b
tozq9uIRBgfE7VNTtA7LkolkWC4gvAsSqOazD0x11P6ALYZKAWLRVL6Hb36iQ2WJ
pF+HOB7mhpetMmQLhxHfnOqCXVm60ZI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:41:39 2026 by rpki-client