Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/0e855958-9f0a-3d7b-abfe-1135dc974e0a.roa
File:                     0e855958-9f0a-3d7b-abfe-1135dc974e0a.roa (raw, json)
Hash identifier:          k39iqImY7K9jZ8CNtf+DFtf+RY+OEI5/b30zu1s9j2w=
Subject key identifier:   49:7C:0C:D9:6D:56:79:C2:BD:F4:EA:55:FD:28:57:B8:7A:C2:F8:1F
Certificate issuer:       /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial:       010D0C9F4328584D738FEA4F3A1130D17C6FBB00
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/0e855958-9f0a-3d7b-abfe-1135dc974e0a.roa
Signing time:             Thu 09 Apr 2026 17:29:30 +0000
ROA not before:           Thu 09 Apr 2026 17:29:30 +0000
ROA not after:            Wed 08 Jul 2026 17:29:30 +0000
asID:                     812
IP address blocks:        74.198.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:8f:ea:4f:3a:11:30:d1:7c:6f:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
        Validity
            Not Before: Apr  9 17:29:30 2026 GMT
            Not After : Jul  8 17:29:30 2026 GMT
        Subject: CN=b1a40699-fd22-4f5f-b712-b16bc2c42117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:90:bd:f0:7a:b8:b8:ce:6d:93:35:8a:37:
                    3c:40:f3:da:bf:55:07:b5:89:44:bb:e2:1f:45:a2:
                    32:69:c6:9e:7c:57:26:f1:e5:27:4c:ce:31:e1:92:
                    15:d4:ff:e6:0d:54:23:62:45:e1:5d:6a:7f:3b:71:
                    97:b3:4a:61:48:9f:4b:98:a0:42:95:53:8d:20:25:
                    f3:58:12:65:97:d4:ea:72:f9:a6:e5:5c:0c:04:31:
                    a6:b1:31:a1:6e:3e:6a:d7:de:4e:44:ef:9b:5d:c0:
                    b1:79:e0:98:42:7c:29:47:2d:dd:89:f0:38:d4:9c:
                    d9:bf:a2:30:1b:8e:84:c9:3c:f4:78:4d:4a:f5:64:
                    0c:26:70:81:fe:66:19:ea:cf:55:73:f3:aa:f3:bc:
                    2c:a0:0a:ef:28:d5:38:32:3b:6b:02:21:54:79:85:
                    cc:6b:5d:8f:14:c9:a0:33:ee:07:de:1b:22:d3:ab:
                    95:ee:f2:8f:16:fc:17:07:3e:c0:99:8b:95:c8:6a:
                    d2:c2:3e:b1:a1:08:50:e8:91:ca:d9:80:e6:5e:9c:
                    eb:d0:b5:5d:df:e5:c9:ca:1e:80:b0:1f:ba:bd:d1:
                    60:d1:0a:3d:38:2c:c2:db:20:f9:27:bf:9a:7a:bd:
                    bf:d9:0a:a1:03:6e:2a:e4:3d:18:70:87:50:83:12:
                    2c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7C:0C:D9:6D:56:79:C2:BD:F4:EA:55:FD:28:57:B8:7A:C2:F8:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/0e855958-9f0a-3d7b-abfe-1135dc974e0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl

            X509v3 Authority Key Identifier:
                keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.198.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:f8:b1:13:5c:ea:04:e4:4f:fa:e1:75:12:5b:09:3d:bb:38:
         b1:be:03:03:3e:0c:ea:65:ae:a4:81:39:d6:03:75:5b:09:f9:
         4b:bf:f6:a3:e3:6e:48:47:c5:3d:48:a4:46:cd:25:84:ea:3e:
         63:31:cd:b0:fc:2f:4f:9e:0c:c1:5e:cb:2e:55:33:cd:54:36:
         88:2d:14:c5:30:39:64:fb:e9:e4:20:b6:e0:f7:17:9d:5a:86:
         27:79:63:66:80:69:71:87:f6:40:93:e1:41:f5:8f:9f:79:f4:
         5a:df:ef:d4:a4:9b:bc:69:d2:75:e9:29:a0:b0:cb:22:3b:f2:
         bb:b1:40:66:53:82:12:b0:c4:d3:4c:1e:d0:99:aa:38:fc:29:
         8a:dc:1b:70:e5:de:09:e0:ff:08:67:95:c0:74:aa:8c:0f:1d:
         cd:ac:fa:9d:92:32:d1:ee:86:34:41:6e:9d:f5:e5:ea:43:36:
         dd:56:d0:d4:90:d5:8f:14:54:c0:1e:5d:05:25:c6:62:af:1b:
         b6:73:6c:c0:9e:2b:d0:37:76:73:0a:4d:c3:78:58:c8:cd:2b:
         d6:dc:9f:19:ea:97:8b:2c:69:f2:4f:b8:e7:6f:8d:82:e7:01:
         2e:42:60:33:04:56:85:6a:a1:cb:58:20:e3:50:de:24:a1:06:
         f2:46:93:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:05:20 2026 by rpki-client