Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/3704e9de-48eb-3696-93a9-62a464a7e05c.roa
File:                     3704e9de-48eb-3696-93a9-62a464a7e05c.roa (raw, json)
Hash identifier:          kpt8U7DyoueN2V8sedqr5HJC7Kw324SDEh23efLpG1U=
Subject key identifier:   C0:93:5B:3C:4F:2F:B7:A5:A8:CE:EE:9F:D3:B6:F3:26:C9:E3:A7:FF
Certificate issuer:       /CN=677759b4-a247-47ea-badb-bb809bc80a31
Certificate serial:       010D0C9F4328584D6DC74C265EF8C41C98711078
Authority key identifier: 49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/3704e9de-48eb-3696-93a9-62a464a7e05c.roa
Signing time:             Tue 07 Apr 2026 15:46:15 +0000
ROA not before:           Tue 07 Apr 2026 15:46:15 +0000
ROA not after:            Mon 06 Jul 2026 15:46:15 +0000
asID:                     14955
IP address blocks:        74.221.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:c7:4c:26:5e:f8:c4:1c:98:71:10:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677759b4-a247-47ea-badb-bb809bc80a31
        Validity
            Not Before: Apr  7 15:46:15 2026 GMT
            Not After : Jul  6 15:46:15 2026 GMT
        Subject: CN=992fc3e7-a853-4cf7-a5fe-703a350e4abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d9:e9:9d:5b:50:17:28:31:b2:8d:12:10:b6:
                    2b:00:0f:7b:10:d1:4e:e2:93:61:b3:87:41:25:aa:
                    f2:50:94:35:a5:69:5d:58:3f:8f:4c:6e:ae:66:3e:
                    76:5e:b3:bd:af:51:e9:1c:32:6f:0f:05:4f:07:cd:
                    8b:99:6f:0c:42:bf:63:41:bd:34:36:e2:d8:99:02:
                    e1:61:3d:25:eb:af:71:5f:ef:78:9d:69:92:a2:d5:
                    64:5c:73:93:e5:57:26:90:f9:68:52:02:05:c4:49:
                    87:b2:5b:b3:96:7a:f6:36:7f:2d:45:72:81:f3:20:
                    29:66:1d:78:3e:64:cd:50:19:14:9c:69:3b:46:39:
                    68:7c:8a:8f:9c:bb:2c:c2:ce:58:5b:4c:36:04:a1:
                    9a:74:b0:a7:a4:1c:e8:5d:1a:31:87:c4:32:81:4f:
                    27:6e:f7:cd:e4:4b:e3:4d:1c:35:40:14:5c:a1:37:
                    dc:b7:6a:9a:ea:25:84:86:cf:99:52:f7:2c:c6:59:
                    f4:59:30:b2:17:ca:3f:93:4c:a2:97:6d:18:ba:ca:
                    e3:9a:e9:e6:52:d0:cd:ca:4c:d2:5c:5b:7f:3c:b8:
                    f1:d8:24:4c:0e:fe:1d:c1:bb:97:e9:e0:61:62:e7:
                    34:6d:d5:35:62:14:40:4f:52:f9:ac:f2:81:60:76:
                    2b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:93:5B:3C:4F:2F:B7:A5:A8:CE:EE:9F:D3:B6:F3:26:C9:E3:A7:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/3704e9de-48eb-3696-93a9-62a464a7e05c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl

            X509v3 Authority Key Identifier:
                keyid:49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:62:2e:ca:e6:27:12:f1:96:46:71:6d:cb:c7:5b:e4:1b:97:
         27:3a:f1:c4:cd:52:b1:4c:f5:f8:08:53:1a:50:03:74:cf:81:
         49:cc:a3:bc:0f:75:0b:c4:ea:69:60:76:96:d7:90:eb:76:f7:
         47:d9:b9:e7:f7:a6:d1:c7:17:97:bb:66:ab:fd:74:8a:8a:cb:
         c3:f4:a9:dd:ee:6a:83:59:d0:07:c8:2f:a0:52:43:c4:8a:9d:
         0d:98:75:9d:a1:af:53:fc:88:75:24:61:9f:9a:21:9d:5c:68:
         23:ea:7a:c7:4b:34:54:1f:9d:4d:f5:92:2a:24:f5:28:55:49:
         1c:f1:7e:3d:67:28:36:a3:f0:82:5b:14:4f:14:17:87:19:89:
         d8:6c:18:5f:33:be:12:5c:ae:1d:68:42:25:60:1e:f3:81:1a:
         68:9a:10:fd:26:ca:04:65:25:a6:55:81:2a:2d:d8:f2:9c:8c:
         f1:4e:02:79:c0:eb:9d:33:a2:58:7b:17:18:56:b9:da:9b:31:
         aa:25:2c:cd:65:d6:50:1d:50:be:ac:ed:a8:4b:70:99:de:76:
         00:f4:62:33:04:4e:b6:4e:db:be:05:a7:c8:f0:44:9a:a4:28:
         b8:28:9e:af:8f:a0:cc:28:4c:94:b8:a9:2d:63:02:3c:91:2f:
         6f:95:a5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:23:39 2026 by rpki-client