Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/bad69b5b-4fd0-384b-9e0a-3db5b0127c2a.roa
File:                     bad69b5b-4fd0-384b-9e0a-3db5b0127c2a.roa (raw, json)
Hash identifier:          rgzPj4NH++F4wYAOQg6UvL2mmhjPekySLfAOtbKJKKs=
Subject key identifier:   6B:98:71:63:D8:45:F6:3B:58:0A:17:E9:DE:C5:9E:4E:D3:0F:F0:CD
Certificate issuer:       /CN=c2c2b205-cbf7-456f-b185-0afd263c5276
Certificate serial:       010D0C9F4328584E13198497B3462257405A3E80
Authority key identifier: D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/bad69b5b-4fd0-384b-9e0a-3db5b0127c2a.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     11620
IP address blocks:        74.116.200.0/22 maxlen: 24
                          74.116.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:84:97:b3:46:22:57:40:5a:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c2b205-cbf7-456f-b185-0afd263c5276
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=2039cf47-b45c-42c4-8f9c-407cb5dea620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:df:a4:f3:16:57:b0:eb:11:c6:a7:ea:d0:
                    f7:31:be:cc:f7:c9:83:bf:be:9e:5f:3c:c0:8d:20:
                    5a:53:4c:9c:59:48:fd:70:81:e2:c2:ac:e7:37:0c:
                    c6:ba:e4:db:1d:30:6b:55:8c:97:7e:78:cb:22:e3:
                    80:e1:9a:96:eb:59:a5:3a:62:97:85:ba:c8:65:fc:
                    43:14:04:b0:b3:be:f9:0b:6e:26:cc:5f:7c:0d:95:
                    ea:46:e0:40:fa:1f:9d:e5:93:81:e8:1f:70:f7:21:
                    27:17:d9:49:9d:27:4b:01:64:af:c2:89:ff:8b:7b:
                    46:6a:26:5b:a2:1d:40:79:3d:68:0f:c3:0c:09:f7:
                    fa:be:7b:d6:11:a9:d9:67:b0:10:7f:95:7d:ac:c2:
                    dd:b8:d4:be:c2:f1:3c:d2:5d:b5:2b:c2:67:92:f5:
                    3c:c1:5a:dc:a8:65:3f:42:25:d0:8a:ae:89:26:98:
                    24:73:b0:b4:24:f2:74:ab:8b:a5:31:09:ff:7b:4d:
                    5e:64:48:2d:03:19:11:69:c4:4c:66:18:62:41:f1:
                    52:2a:39:c8:6b:54:d8:38:7a:42:1b:af:1c:9f:b8:
                    52:0b:53:73:02:47:33:61:46:e1:b9:fa:e9:a4:64:
                    0d:83:be:26:33:f1:56:a5:49:e9:e5:e0:77:58:14:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:98:71:63:D8:45:F6:3B:58:0A:17:E9:DE:C5:9E:4E:D3:0F:F0:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/bad69b5b-4fd0-384b-9e0a-3db5b0127c2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl

            X509v3 Authority Key Identifier:
                keyid:D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:26:b3:12:30:81:83:9a:bd:e6:26:3c:de:02:a4:a5:1e:09:
         cb:1d:21:3a:40:43:d4:79:8e:19:25:ff:09:30:ec:41:13:e3:
         d2:52:20:98:26:75:b3:99:2d:7c:19:63:bf:48:36:3a:02:25:
         69:cd:5f:7f:ad:ab:a1:c5:9c:f4:76:5c:54:ae:0d:cc:bc:ea:
         3e:60:18:28:69:12:3c:57:74:95:f1:25:6d:bd:3c:7d:c7:8b:
         fb:fd:a2:8d:a3:94:cf:e8:60:c3:71:10:37:e0:0d:f7:90:0d:
         8f:82:1c:d0:f1:e0:e8:08:31:9c:56:24:61:bc:04:c1:10:ea:
         48:01:60:c3:a7:fc:69:9c:5c:d8:81:5a:71:b6:be:a2:d3:93:
         fc:09:33:30:f6:45:5b:80:d2:38:e0:da:e3:32:c4:e6:56:87:
         cc:98:f8:ca:e2:8b:48:b0:0c:49:f9:af:b6:3f:4a:71:82:38:
         b0:10:d9:7d:5f:3e:31:c0:77:6b:20:b1:19:f6:28:ae:67:b5:
         5b:7f:d5:35:a1:12:e9:8f:0f:82:ba:93:73:11:01:79:7e:8f:
         b7:d1:8f:22:1c:a9:a8:85:46:c5:95:7e:e0:6d:d0:de:97:ec:
         bf:62:22:4a:8d:9e:45:ad:a2:50:41:30:7b:d3:ed:02:0a:63:
         11:8f:82:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4TGYSXs0YiV0BaPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzJjMmIyMDUtY2JmNy00NTZmLWIxODUtMGFmZDI2M2M1
Mjc2MB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk
MjAzOWNmNDctYjQ1Yy00MmM0LThmOWMtNDA3Y2I1ZGVhNjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9rfpPMWV7DrEcan6tD3Mb7M98mDv76eXzzA
jSBaU0ycWUj9cIHiwqznNwzGuuTbHTBrVYyXfnjLIuOA4ZqW61mlOmKXhbrIZfxD
FASws775C24mzF98DZXqRuBA+h+d5ZOB6B9w9yEnF9lJnSdLAWSvwon/i3tGaiZb
oh1AeT1oD8MMCff6vnvWEanZZ7AQf5V9rMLduNS+wvE80l21K8JnkvU8wVrcqGU/
QiXQiq6JJpgkc7C0JPJ0q4ulMQn/e01eZEgtAxkRacRMZhhiQfFSKjnIa1TYOHpC
G68cn7hSC1NzAkczYUbhufrppGQNg74mM/FWpUnp5eB3WBTbNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGuYcWPYRfY7WAoX6d7Fnk7TD/DNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jMmMy
YjIwNS1jYmY3LTQ1NmYtYjE4NS0wYWZkMjYzYzUyNzYvYmFkNjliNWItNGZkMC0z
ODRiLTllMGEtM2RiNWIwMTI3YzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzJjMmIyMDUtY2JmNy00NTZmLWIx
ODUtMGFmZDI2M2M1Mjc2L2MyYzJiMjA1LWNiZjctNDU2Zi1iMTg1LTBhZmQyNjNj
NTI3Ni5jcmwwHwYDVR0jBBgwFoAU1RmuFMvsJGpbukvkt9Q2FDNBUh0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jMmMyYjIwNS1jYmY3LTQ1NmYtYjE4NS0wYWZk
MjYzYzUyNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnTIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADYmsxIwgYOaveYmPN4CpKUeCcsdITpAQ9R5jhkl/wkw7EET49JSIJgm
dbOZLXwZY79INjoCJWnNX3+tq6HFnPR2XFSuDcy86j5gGChpEjxXdJXxJW29PH3H
i/v9oo2jlM/oYMNxEDfgDfeQDY+CHNDx4OgIMZxWJGG8BMEQ6kgBYMOn/GmcXNiB
WnG2vqLTk/wJMzD2RVuA0jjg2uMyxOZWh8yY+Mrii0iwDEn5r7Y/SnGCOLAQ2X1f
PjHAd2sgsRn2KK5ntVt/1TWhEumPD4K6k3MRAXl+j7fRjyIcqaiFRsWVfuBt0N6X
7L9iIkqNnkWtolBBMHvT7QIKYxGPgkw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:11:21 2026 by rpki-client