Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/de9a14da-eb21-3df9-88a3-a094282ec012.roa
File:                     de9a14da-eb21-3df9-88a3-a094282ec012.roa (raw, json)
Hash identifier:          9gJdU5G4vfGuz60QSLY1jV/5JY3wUHWhqIgqn//ZiNA=
Subject key identifier:   72:E9:8C:E7:77:B6:20:C1:51:65:EC:E1:EC:EA:EF:92:F0:2A:33:2D
Certificate issuer:       /CN=d7a960e2-9fa8-4b77-8609-5ee424f44087
Certificate serial:       010D0C9F4328584CCBA767AEA094DEDE6EDA9470
Authority key identifier: A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/de9a14da-eb21-3df9-88a3-a094282ec012.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     19318
IP address blocks:        74.50.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:67:ae:a0:94:de:de:6e:da:94:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7a960e2-9fa8-4b77-8609-5ee424f44087
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=e953d491-eb41-40c8-8870-e9ec5bc0b0b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:86:fc:80:1e:51:60:a2:76:5c:7d:b7:d2:d1:
                    a1:f0:a3:ea:02:82:aa:56:ad:89:fe:63:7c:81:b0:
                    cf:21:6f:90:c3:75:8d:98:2b:49:cd:d8:03:5e:bb:
                    e4:e6:08:29:f2:e3:34:b7:de:1c:17:18:54:54:11:
                    1c:fb:2a:3a:a9:b2:03:0b:b0:07:35:6a:74:6b:d2:
                    d9:1a:3a:d0:60:65:ec:84:f4:a5:07:84:88:70:c8:
                    bc:74:07:31:0e:33:6b:d4:f1:7b:79:f3:4b:12:50:
                    3a:95:cc:a1:02:5f:d0:39:df:eb:51:c2:86:ff:18:
                    0a:80:2c:58:e8:e1:94:03:27:52:9a:7c:48:e5:26:
                    99:7a:4c:f6:55:bc:70:cd:71:e8:4f:0c:34:b5:76:
                    20:c5:83:3d:12:9f:a9:01:be:8d:78:27:bf:af:d6:
                    a9:72:25:35:43:51:17:ff:6c:67:74:5b:e9:e9:f1:
                    89:60:7b:05:4f:77:a2:9c:0a:7f:e4:20:b2:90:3a:
                    ef:1f:87:3d:f6:32:84:2a:da:b9:8f:60:4d:f7:8c:
                    a0:3d:7e:ec:4d:ac:fc:4f:2f:02:88:ba:e3:e5:d8:
                    9d:e2:b1:40:43:c7:24:bd:04:c2:1b:99:f4:86:b6:
                    d4:bc:9e:35:39:d0:93:72:8c:be:6b:37:86:b3:27:
                    bc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E9:8C:E7:77:B6:20:C1:51:65:EC:E1:EC:EA:EF:92:F0:2A:33:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/de9a14da-eb21-3df9-88a3-a094282ec012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.crl

            X509v3 Authority Key Identifier:
                keyid:A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:85:92:78:17:ed:a6:a9:b7:40:7f:72:fd:d6:7e:ff:1a:3b:
         e6:19:68:70:ac:1d:a1:61:bd:37:44:64:c5:78:f2:85:c8:83:
         5e:14:54:d1:b3:31:cf:20:f6:68:25:21:ef:e5:7a:bc:98:8b:
         89:3d:c2:4d:b4:3e:47:73:8c:dd:f0:c1:d8:62:77:22:b1:3b:
         d3:8c:c2:a4:e2:1e:3d:8d:1c:4e:ba:18:16:70:cf:b4:99:14:
         6f:cd:0f:86:c3:ad:24:75:23:58:1c:bc:f7:66:f2:9e:83:1b:
         ef:07:59:e4:ee:85:a9:a9:a6:a5:99:33:62:66:fa:a9:e8:38:
         25:a0:f7:39:42:06:09:9e:7f:10:65:1b:81:80:3e:b0:0b:a4:
         f7:8c:c8:19:14:4d:77:33:cb:a4:36:6e:3f:eb:45:a9:f3:0d:
         cb:35:ec:73:27:ee:ce:5b:a1:47:93:fb:4a:b9:43:7b:3b:e2:
         2a:33:5c:16:ea:55:32:14:cd:12:ce:f8:a9:9c:0f:2b:90:8a:
         2b:f9:8e:93:13:35:65:cf:2d:4a:a4:60:3a:f9:bb:ec:cc:d9:
         91:ea:87:50:35:e3:f6:e0:6b:f8:97:89:31:61:12:f5:1c:79:
         f4:eb:3d:7f:03:4f:3f:89:ee:6a:61:bd:c3:d0:81:f2:9d:5b:
         c9:a2:9c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:36:41 2026 by rpki-client