Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/d3f7bd2e-8814-306b-8c73-4153a8d9071c.roa
File:                     d3f7bd2e-8814-306b-8c73-4153a8d9071c.roa (raw, json)
Hash identifier:          BmkljRoQcVxLd9Dtl7XmcxoYwnqXzu+ya3XGN3yl/LU=
Subject key identifier:   09:9D:AF:4F:1A:1E:E9:34:87:8A:AF:B7:B7:9C:5B:3E:2E:5D:92:DE
Certificate issuer:       /CN=1934fa05-d7a3-4b7d-be5d-dc83d4a7199d
Certificate serial:       010D0C9F4328584E0A6FF6700366B3BEA80C9C80
Authority key identifier: 38:8B:95:35:2C:AD:AF:3C:EE:68:E0:29:45:86:0F:27:48:D0:D4:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/d3f7bd2e-8814-306b-8c73-4153a8d9071c.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     21529
IP address blocks:        74.118.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:f6:70:03:66:b3:be:a8:0c:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1934fa05-d7a3-4b7d-be5d-dc83d4a7199d
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=c367958d-693f-4550-be5e-8abcb2ae6d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:cc:dc:e1:62:98:19:32:64:6c:55:e6:6b:
                    03:b5:c5:75:61:d5:c9:cc:34:7a:f9:54:02:6e:0a:
                    27:aa:5a:9a:84:40:37:97:4f:91:16:7e:2d:e0:05:
                    af:79:18:31:cd:7a:7c:6c:d3:da:38:33:c6:1e:89:
                    ba:37:71:a7:68:6a:e0:54:35:64:b5:1b:44:eb:10:
                    de:7e:83:f6:0f:4b:48:ea:93:3e:39:76:ab:2f:53:
                    4e:e9:75:b3:90:5a:b3:4b:97:e4:f5:7b:f6:5b:9b:
                    b9:3e:70:28:b7:b1:ad:5a:93:4c:83:db:c1:e1:d3:
                    d1:83:ce:eb:9b:eb:98:43:c8:18:26:2e:89:51:2f:
                    bd:50:94:ea:c4:48:32:d3:17:55:8c:4e:21:5c:cc:
                    16:8e:c0:f8:d3:b7:e9:78:e4:d3:21:99:8c:b4:34:
                    e2:fb:8d:8a:1a:ab:7e:ec:57:9b:0e:8b:8b:fe:7f:
                    9a:d2:b8:73:a4:43:ed:45:c1:33:74:77:60:d9:fc:
                    da:73:b8:c1:14:84:67:f9:c0:fe:19:e4:3c:49:20:
                    40:de:24:5a:e8:1c:87:b2:9d:e1:4e:d6:8b:cb:7a:
                    80:ba:4e:66:49:0c:81:64:af:f1:b1:4f:8c:71:1c:
                    e1:e3:b9:ce:39:a6:f6:c7:f7:b9:41:89:3b:7d:f0:
                    a7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9D:AF:4F:1A:1E:E9:34:87:8A:AF:B7:B7:9C:5B:3E:2E:5D:92:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/d3f7bd2e-8814-306b-8c73-4153a8d9071c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.crl

            X509v3 Authority Key Identifier:
                keyid:38:8B:95:35:2C:AD:AF:3C:EE:68:E0:29:45:86:0F:27:48:D0:D4:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:67:68:70:f4:bb:9a:fb:84:fc:64:93:ee:3b:65:1d:73:4b:
         e9:4f:41:30:37:0f:d1:07:ec:d3:86:f0:68:75:28:0e:2c:97:
         41:74:4f:7b:e1:26:e5:74:f3:95:07:77:36:4c:8a:55:19:ec:
         19:16:f5:03:f2:5b:4b:51:a6:36:bc:00:01:b7:a5:9d:02:09:
         ea:0c:ed:21:11:0d:18:e4:47:34:9a:94:ce:1f:fd:aa:e5:29:
         07:88:10:94:3f:d3:5a:c7:f4:29:fb:cb:07:a6:b8:4a:c3:ea:
         19:32:d8:ac:95:5f:88:5e:91:08:f4:19:48:47:2d:c7:a6:4d:
         ef:47:5a:51:6b:72:d3:a6:6c:ca:fa:11:e2:ca:0a:75:38:33:
         1e:fd:b9:0a:d4:7c:1d:5f:ea:be:40:cc:3a:b6:79:15:75:14:
         4e:18:1e:c7:87:69:77:d6:e4:03:4c:2c:b7:06:85:ac:cf:8d:
         f7:e8:2f:94:5b:a7:87:42:50:30:53:61:e4:fd:80:38:e7:9c:
         d6:e9:d4:90:bb:d5:e7:21:56:03:2f:55:ff:ca:9d:bd:34:b7:
         aa:a7:4b:73:58:3d:00:b9:c6:4b:05:6d:08:23:85:b2:5d:b3:
         fe:db:a4:35:5c:55:71:bf:0b:9f:c4:9d:f6:d9:21:40:f9:e5:
         dd:b0:da:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Kb/ZwA2azvqgMnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTkzNGZhMDUtZDdhMy00YjdkLWJlNWQtZGM4M2Q0YTcx
OTlkMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk
YzM2Nzk1OGQtNjkzZi00NTUwLWJlNWUtOGFiY2IyYWU2ZDg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycLM3OFimBkyZGxV5msDtcV1YdXJzDR6+VQC
bgonqlqahEA3l0+RFn4t4AWveRgxzXp8bNPaODPGHom6N3GnaGrgVDVktRtE6xDe
foP2D0tI6pM+OXarL1NO6XWzkFqzS5fk9Xv2W5u5PnAot7GtWpNMg9vB4dPRg87r
m+uYQ8gYJi6JUS+9UJTqxEgy0xdVjE4hXMwWjsD407fpeOTTIZmMtDTi+42KGqt+
7FebDouL/n+a0rhzpEPtRcEzdHdg2fzac7jBFIRn+cD+GeQ8SSBA3iRa6ByHsp3h
TtaLy3qAuk5mSQyBZK/xsU+McRzh47nOOab2x/e5QYk7ffCn6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAmdr08aHuk0h4qvt7ecWz4uXZLeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xOTM0
ZmEwNS1kN2EzLTRiN2QtYmU1ZC1kYzgzZDRhNzE5OWQvZDNmN2JkMmUtODgxNC0z
MDZiLThjNzMtNDE1M2E4ZDkwNzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTkzNGZhMDUtZDdhMy00YjdkLWJl
NWQtZGM4M2Q0YTcxOTlkLzE5MzRmYTA1LWQ3YTMtNGI3ZC1iZTVkLWRjODNkNGE3
MTk5ZC5jcmwwHwYDVR0jBBgwFoAUOIuVNSytrzzuaOApRYYPJ0jQ1MEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xOTM0ZmEwNS1kN2EzLTRiN2QtYmU1ZC1kYzgz
ZDRhNzE5OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnYwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGlnaHD0u5r7hPxkk+47ZR1zS+lPQTA3D9EH7NOG8Gh1KA4sl0F0T3vh
JuV085UHdzZMilUZ7BkW9QPyW0tRpja8AAG3pZ0CCeoM7SERDRjkRzSalM4f/arl
KQeIEJQ/01rH9Cn7ywemuErD6hky2KyVX4hekQj0GUhHLcemTe9HWlFrctOmbMr6
EeLKCnU4Mx79uQrUfB1f6r5AzDq2eRV1FE4YHseHaXfW5ANMLLcGhazPjffoL5Rb
p4dCUDBTYeT9gDjnnNbp1JC71echVgMvVf/Knb00t6qnS3NYPQC5xksFbQgjhbJd
s/7bpDVcVXG/C5/EnfbZIUD55d2w2no=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:10:29 2026 by rpki-client