Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d255a690-f1da-3b5c-9a78-6e1e5bc0b1ca.roa
File:                     d255a690-f1da-3b5c-9a78-6e1e5bc0b1ca.roa (raw, json)
Hash identifier:          WTwlql+TqIGHDT1RfWdE95xHE0VScL/2GMEV1A5wdVQ=
Subject key identifier:   54:38:99:23:77:43:EE:EF:BB:52:01:E8:F1:E0:35:09:37:C2:8B:40
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA79668A4F6182AC0121E34A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d255a690-f1da-3b5c-9a78-6e1e5bc0b1ca.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        74.49.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:68:a4:f6:18:2a:c0:12:1e:34:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=87d62741-62ea-40ae-8e62-a7609acc8ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bd:91:8b:c4:18:cc:bc:10:d1:54:13:91:13:
                    e6:f1:5e:c4:cd:e3:5e:bb:3b:5e:e8:e2:ab:31:ea:
                    b3:31:21:70:55:41:c6:72:79:36:45:5f:f1:02:48:
                    c1:bd:a3:7b:0e:3d:52:bf:87:0a:b8:d2:8f:d2:67:
                    83:04:e7:21:18:27:c9:c1:41:be:df:f8:9c:3e:6b:
                    72:a2:f6:8a:6e:36:7e:7b:e5:bb:76:d0:94:4a:07:
                    95:4c:95:2d:07:ce:53:07:8d:2c:76:46:91:01:1f:
                    21:c0:a2:ce:04:0c:b1:1f:c8:4b:04:ab:43:c2:d8:
                    b1:34:ac:8f:55:34:fb:0d:8f:4a:f7:b8:d1:b9:7d:
                    e0:1c:45:df:d0:54:17:3b:a5:32:77:66:50:88:fc:
                    e0:89:9f:bb:3e:16:2a:9a:f3:9f:01:d3:53:61:b6:
                    73:09:37:a1:d9:4e:41:c1:08:e8:dd:f7:08:9f:d2:
                    4e:ef:b6:82:eb:20:52:2e:e1:e3:d9:16:90:8b:25:
                    68:e9:8f:29:36:9e:9b:01:50:c5:11:56:0c:cd:77:
                    fa:cc:91:49:50:59:01:95:88:fb:64:02:b4:23:d7:
                    1b:0a:1c:dc:d8:22:96:99:b7:a0:03:a2:f4:d8:d9:
                    49:29:53:f2:85:d1:ea:7a:d2:1e:e8:42:07:52:96:
                    21:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:38:99:23:77:43:EE:EF:BB:52:01:E8:F1:E0:35:09:37:C2:8B:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d255a690-f1da-3b5c-9a78-6e1e5bc0b1ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.49.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:42:86:40:54:29:bf:cb:76:df:5e:fa:ba:0f:85:f7:0a:ee:
         e7:d1:54:a7:29:7e:61:1e:63:73:60:11:14:9f:69:e4:b1:ab:
         6b:aa:85:32:cb:02:2a:1d:db:a9:b4:0d:31:ff:6a:af:6e:a0:
         47:34:d8:48:15:51:4e:a0:a4:27:7f:dd:30:75:86:eb:b8:21:
         5e:79:49:35:da:e7:ee:b8:74:96:b5:b4:f3:a0:62:5c:25:41:
         10:ac:32:94:0a:73:3a:57:aa:4e:83:18:a9:97:30:42:87:dc:
         cd:21:27:20:49:82:e9:65:fd:fb:be:5a:62:b0:0a:33:e1:fc:
         dc:1f:6d:50:59:22:c9:27:dd:56:0b:32:f2:78:86:35:9a:cb:
         09:02:2c:73:a9:06:cb:4e:98:17:6d:4c:26:75:7d:d0:66:25:
         70:3d:49:0a:ac:93:4a:7b:91:1f:10:78:27:b2:fb:20:0f:9a:
         b3:3f:b0:1c:e5:fa:46:70:92:69:8b:d0:41:98:65:53:0e:0c:
         7a:0b:5e:7e:f4:f2:67:82:8e:06:44:7e:80:58:70:f2:06:6b:
         22:4d:f0:39:21:cc:1c:96:10:5b:82:cd:e5:68:ae:50:31:e6:
         0e:e0:74:4d:d1:e7:76:0b:af:a2:f3:1e:e8:4b:ef:b3:32:c1:
         3c:4a:87:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlmik9hgqwBIeNKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ODdkNjI3NDEtNjJlYS00MGFlLThlNjItYTc2MDlhY2M4YWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo72Ri8QYzLwQ0VQTkRPm8V7EzeNeuzte6OKr
MeqzMSFwVUHGcnk2RV/xAkjBvaN7Dj1Sv4cKuNKP0meDBOchGCfJwUG+3/icPmty
ovaKbjZ+e+W7dtCUSgeVTJUtB85TB40sdkaRAR8hwKLOBAyxH8hLBKtDwtixNKyP
VTT7DY9K97jRuX3gHEXf0FQXO6Uyd2ZQiPzgiZ+7PhYqmvOfAdNTYbZzCTeh2U5B
wQjo3fcIn9JO77aC6yBSLuHj2RaQiyVo6Y8pNp6bAVDFEVYMzXf6zJFJUFkBlYj7
ZAK0I9cbChzc2CKWmbegA6L02NlJKVPyhdHqetIe6EIHUpYhqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFQ4mSN3Q+7vu1IB6PHgNQk3wotAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDI1NWE2OTAtZjFkYS0z
YjVjLTlhNzgtNmUxZTViYzBiMWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjHgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANVChkBUKb/Ldt9e+roPhfcK7ufRVKcpfmEeY3NgERSfaeSxq2uqhTLL
Aiod26m0DTH/aq9uoEc02EgVUU6gpCd/3TB1huu4IV55STXa5+64dJa1tPOgYlwl
QRCsMpQKczpXqk6DGKmXMEKH3M0hJyBJgull/fu+WmKwCjPh/NwfbVBZIskn3VYL
MvJ4hjWaywkCLHOpBstOmBdtTCZ1fdBmJXA9SQqsk0p7kR8QeCey+yAPmrM/sBzl
+kZwkmmL0EGYZVMODHoLXn708meCjgZEfoBYcPIGayJN8DkhzByWEFuCzeVorlAx
5g7gdE3R53YLr6LzHuhL77MywTxKh6M=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:16:42 2026 by rpki-client