Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/726c0b24-924c-3475-aaf3-87662feec99c.roa
File:                     726c0b24-924c-3475-aaf3-87662feec99c.roa (raw, json)
Hash identifier:          rrpVGqOhaS4oeiUkM2btHd7uia2WOQP/ExQGBd0ZonE=
Subject key identifier:   6C:67:44:89:29:EB:EB:5C:D1:EB:6A:9A:6F:D6:99:0B:CF:63:21:9F
Certificate issuer:       /CN=74aa5b22-bda2-4141-8bdf-98a78696dd03
Certificate serial:       010D0C9F4328584D67666B78CEAC586A6795F680
Authority key identifier: DE:AA:7D:B1:45:23:40:13:01:BE:78:B7:DA:FF:CE:CF:CF:D4:F3:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/726c0b24-924c-3475-aaf3-87662feec99c.roa
Signing time:             Sun 05 Apr 2026 08:56:12 +0000
ROA not before:           Sun 05 Apr 2026 08:56:12 +0000
ROA not after:            Wed 01 Jul 2026 17:03:00 +0000
asID:                     400402
IP address blocks:        192.225.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/74aa5b22-bda2-4141-8bdf-98a78696dd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/74aa5b22-bda2-4141-8bdf-98a78696dd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:66:6b:78:ce:ac:58:6a:67:95:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74aa5b22-bda2-4141-8bdf-98a78696dd03
        Validity
            Not Before: Apr  5 08:56:12 2026 GMT
            Not After : Jul  1 17:03:00 2026 GMT
        Subject: CN=0809ed14-e829-424b-a673-eadcbf414a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a6:74:7c:f9:c0:64:63:54:bf:6a:db:15:03:
                    67:91:30:83:3c:d6:a9:ae:ff:00:8e:3a:6f:e0:d9:
                    e6:87:73:90:d9:5b:38:6d:5a:a5:40:f7:42:a9:0b:
                    c3:57:95:44:ad:6f:c6:64:a5:74:fc:24:06:78:e5:
                    be:82:ae:11:39:e2:63:a2:87:1c:27:93:41:04:89:
                    3c:89:57:05:7c:3a:3a:71:6b:fb:ed:ef:a8:06:a8:
                    d4:ff:d2:0e:0a:15:e8:81:68:5b:c0:00:11:7a:cd:
                    47:7e:30:5a:0c:9f:b3:8a:07:d4:97:72:5d:5f:42:
                    ff:6d:65:14:ca:86:21:32:e5:74:e2:4a:40:ab:66:
                    9e:9c:86:2d:5a:a3:a3:3b:8e:95:3c:c4:a3:00:4a:
                    55:07:e5:6a:bc:64:e2:b5:5e:fb:be:6a:b4:db:94:
                    1d:64:0b:a2:f9:e7:2f:ea:77:6f:6d:e1:5a:32:20:
                    09:02:42:ba:42:af:f9:b9:7d:26:2b:aa:a7:a5:e9:
                    de:42:35:57:ef:d1:d7:f4:92:6a:e8:f8:96:a0:32:
                    39:96:c7:17:28:30:1d:24:86:39:3d:52:0c:07:72:
                    f9:11:9c:0e:83:2a:5a:a6:13:cd:a0:5f:45:8c:30:
                    f8:eb:1d:33:c7:a2:f6:90:58:85:cd:c1:8c:a8:e6:
                    ef:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:67:44:89:29:EB:EB:5C:D1:EB:6A:9A:6F:D6:99:0B:CF:63:21:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/726c0b24-924c-3475-aaf3-87662feec99c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/74aa5b22-bda2-4141-8bdf-98a78696dd03.crl

            X509v3 Authority Key Identifier:
                keyid:DE:AA:7D:B1:45:23:40:13:01:BE:78:B7:DA:FF:CE:CF:CF:D4:F3:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.225.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:cf:ce:d7:4a:11:ed:1e:4a:95:4a:76:f5:d8:0c:87:9d:16:
         bc:59:29:53:d9:9c:d6:a4:b8:0c:97:71:9e:29:29:20:70:47:
         bb:d6:23:1d:37:ca:06:c2:52:c5:5c:8f:5e:84:3b:10:8d:fe:
         82:92:4b:94:3f:b0:56:87:10:83:fd:db:b9:b0:9f:83:36:aa:
         d4:ce:f1:cb:db:56:3f:64:ef:3d:32:ea:13:de:1e:47:80:84:
         22:10:df:33:d1:d4:e7:53:85:0d:5f:19:c4:8f:89:2b:9e:e3:
         e9:cf:09:e2:c5:6d:63:54:50:f2:32:0f:69:5a:1f:f1:05:bf:
         af:17:7b:cd:81:a7:65:16:56:a4:01:f6:10:db:42:2f:b3:54:
         2f:3c:cb:ac:52:f6:86:6d:57:f4:c8:57:6f:9f:98:9c:7f:c6:
         f0:13:32:22:17:dd:d7:08:1d:67:be:5d:84:aa:51:6a:74:48:
         0a:e3:9c:60:d7:f7:3f:38:f2:46:a8:4f:24:dd:62:b4:54:76:
         b1:bd:87:57:2e:d8:42:3b:45:51:16:d1:6c:04:e5:49:f4:02:
         ba:ca:28:54:9f:ef:8f:17:1e:44:90:e3:43:4f:5c:38:31:df:
         de:8e:78:78:ee:b2:6a:5c:77:a1:c9:a1:b3:e8:9c:aa:cd:71:
         f7:80:a0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:39:37 2026 by rpki-client