Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/408f67a4-965c-3201-9f19-0975f3af94df.roa
File:                     408f67a4-965c-3201-9f19-0975f3af94df.roa (raw, json)
Hash identifier:          lSJQ+Oj5O0zKXyvkYbCVItDYn7ffgnNRiYM6r1PNHbs=
Subject key identifier:   FE:08:00:DB:DB:24:1C:C9:C3:D6:0F:56:8D:5E:DC:6D:8C:12:86:DC
Certificate issuer:       /CN=b9ea3438-4142-4de2-a912-7b081a51b42d
Certificate serial:       010D0C9F4328584E1E449EF79ED03FD1B0D75F30
Authority key identifier: 24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/408f67a4-965c-3201-9f19-0975f3af94df.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     47870
IP address blocks:        74.116.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:9e:f7:9e:d0:3f:d1:b0:d7:5f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ea3438-4142-4de2-a912-7b081a51b42d
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=52146b3e-7e6f-4187-950c-57725d07decb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5c:c9:f6:f2:1c:c2:02:cc:c2:89:24:1d:9d:
                    44:d5:c8:21:c6:0a:b7:a2:d6:15:1a:04:9e:c0:25:
                    d5:f0:3d:1d:07:3e:30:37:45:04:06:b3:2d:40:88:
                    37:19:ef:27:b7:59:61:bf:28:22:ac:e0:fd:29:bb:
                    b9:90:06:71:3e:57:aa:6f:b7:9b:78:8e:4b:ec:46:
                    ed:1d:8f:4b:de:20:9b:6e:74:51:a8:5f:d4:6f:29:
                    d8:d5:03:64:8d:07:21:1f:67:71:7f:c9:3a:58:63:
                    75:d0:32:00:c1:a1:4e:a9:24:86:94:b8:70:bd:84:
                    20:65:2d:ea:87:fc:50:7a:58:26:db:9c:25:53:cd:
                    a8:59:02:63:29:24:bd:01:7f:4b:86:3f:9e:d9:8c:
                    9a:b6:e4:4d:00:48:24:f8:e2:9c:62:01:22:fc:bb:
                    11:3f:45:5a:87:e3:ee:e9:da:ca:b8:f3:09:5d:76:
                    a6:18:2e:00:6c:8b:4e:83:d2:8d:c9:fe:e0:95:78:
                    b2:82:20:e2:ff:fc:07:f3:85:91:81:b8:ca:24:88:
                    25:fd:ea:f5:4f:c7:7d:31:c1:b8:af:96:e2:4e:f7:
                    2c:03:32:08:7c:1a:2e:4e:c7:be:ba:11:a9:5d:62:
                    a1:b1:a9:f6:c7:d4:f2:ab:c5:95:f0:27:b3:9a:94:
                    29:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:08:00:DB:DB:24:1C:C9:C3:D6:0F:56:8D:5E:DC:6D:8C:12:86:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/408f67a4-965c-3201-9f19-0975f3af94df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl

            X509v3 Authority Key Identifier:
                keyid:24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:86:c6:3d:d3:78:cc:0a:f7:fe:c0:6d:90:5c:42:9b:3a:bc:
         e1:09:92:2e:83:e2:90:d1:82:fc:a8:fa:fb:d1:31:33:be:f8:
         f8:42:e3:6b:09:60:c9:6e:78:46:71:ff:c9:31:a8:12:1a:27:
         62:77:56:cf:0b:10:4a:cf:86:51:49:6a:c9:3c:d7:4c:32:31:
         bf:f0:7d:19:4f:a3:19:b7:47:80:4e:ac:9d:c7:66:70:6b:ee:
         fc:66:fb:71:05:63:f3:5a:e4:5b:78:e6:20:1b:16:f7:8c:31:
         cf:15:ad:04:cb:2c:2e:a2:7f:fd:90:c7:5c:82:dc:46:9a:a0:
         e4:0b:ae:d6:84:d3:5c:82:db:cc:76:13:5a:b4:2c:9c:cb:6b:
         3e:00:d4:f2:0c:fa:13:26:cf:95:1a:a6:bf:f2:03:84:03:e5:
         ae:8a:6c:10:b9:ae:62:49:0b:51:72:87:19:2c:c4:11:37:e6:
         a8:7f:fa:c1:84:dc:93:7d:cc:7f:73:a7:cd:d9:d1:65:53:00:
         aa:75:30:be:0d:ed:63:1d:0e:da:f2:53:9a:7d:26:d2:c0:4f:
         b7:fb:c6:ad:84:83:f8:ce:8c:fc:39:45:a7:b4:73:17:59:3c:
         60:0f:4a:ce:ca:b3:2c:11:14:46:11:c6:92:a2:ae:e0:03:e6:
         92:a0:34:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:42:05 2026 by rpki-client