Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/7c56b4a2-b398-32b1-a50a-75d93e0d8321.roa
File:                     7c56b4a2-b398-32b1-a50a-75d93e0d8321.roa (raw, json)
Hash identifier:          u0Ax8ygIZ2lF1fnkxahcJNLzDUF4dnhxJcFhgPiEOvM=
Subject key identifier:   DD:31:0C:0B:EE:7A:DC:53:4C:E4:EA:B5:2D:63:50:1D:F4:48:6D:A9
Certificate issuer:       /CN=677759b4-a247-47ea-badb-bb809bc80a31
Certificate serial:       010D0C9F4328584D6E355BD1EF81665DAF7815C0
Authority key identifier: 49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/7c56b4a2-b398-32b1-a50a-75d93e0d8321.roa
Signing time:             Tue 07 Apr 2026 19:28:00 +0000
ROA not before:           Tue 07 Apr 2026 19:28:00 +0000
ROA not after:            Mon 06 Jul 2026 19:28:00 +0000
asID:                     14955
IP address blocks:        74.221.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:35:5b:d1:ef:81:66:5d:af:78:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677759b4-a247-47ea-badb-bb809bc80a31
        Validity
            Not Before: Apr  7 19:28:00 2026 GMT
            Not After : Jul  6 19:28:00 2026 GMT
        Subject: CN=2b53aa56-7ffc-4d22-b92e-d584b3e9784b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6c:96:37:37:06:73:10:c7:ec:c9:55:bd:d1:
                    75:99:87:94:9b:b2:ce:d7:40:f2:56:ce:a6:d9:61:
                    ac:5d:10:3e:b3:76:fd:bf:94:45:ed:78:90:80:28:
                    2d:a5:ce:d1:53:a9:c6:c3:b9:f5:d3:ec:a7:76:c5:
                    2a:e2:90:a3:e0:7d:1d:5b:1b:45:cf:6c:ae:f6:ac:
                    fc:64:92:45:f4:60:cd:df:16:5b:9f:f0:ac:a4:88:
                    b6:0a:30:19:af:07:85:ed:1f:13:72:5c:b4:d5:ca:
                    c1:2e:07:67:3a:11:53:af:b5:1e:26:eb:ca:31:aa:
                    04:85:ee:cd:c1:40:13:c6:41:09:d6:07:73:88:52:
                    14:79:f8:31:fc:d7:ab:04:7b:79:48:a7:fa:45:34:
                    6c:65:11:2c:d8:46:16:50:6f:93:3a:32:fe:93:94:
                    3a:6c:eb:2f:1c:3d:a4:30:2d:15:66:93:ee:20:60:
                    80:45:7e:de:e6:94:39:f5:13:d7:b8:08:85:45:98:
                    7f:72:29:1e:de:a9:0f:42:67:1c:ce:89:61:af:09:
                    be:e1:54:b8:fa:1b:60:b1:75:75:d2:f6:6a:bb:64:
                    e2:1e:8d:5e:bb:f5:da:c5:cf:d3:a5:7a:5c:2b:c3:
                    d4:9d:1a:e5:82:23:37:3a:95:50:de:47:ab:04:20:
                    8a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:31:0C:0B:EE:7A:DC:53:4C:E4:EA:B5:2D:63:50:1D:F4:48:6D:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/7c56b4a2-b398-32b1-a50a-75d93e0d8321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl

            X509v3 Authority Key Identifier:
                keyid:49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:fb:75:95:07:44:da:c9:57:bc:11:6f:e9:f8:2c:4f:1c:19:
         8a:e6:a1:8c:d1:85:48:45:34:e4:66:67:14:75:e2:2d:f3:48:
         c2:8b:a6:00:15:40:32:72:5f:7c:25:74:36:73:52:f9:b5:b5:
         17:d9:81:56:52:8a:16:84:da:85:59:2b:f4:db:e6:c9:b0:74:
         63:86:c3:0c:f1:88:3e:9d:4f:87:0f:6d:f0:5d:52:0b:04:11:
         49:06:9f:09:d0:34:51:c8:03:af:6d:8b:f3:19:9f:bd:46:70:
         c7:5a:0e:f4:b7:f1:11:94:e2:23:0b:83:96:7f:1c:0c:51:b3:
         ea:80:b0:41:5e:3d:ee:15:c6:64:6e:bf:d1:6d:fa:8c:e3:bc:
         b4:b5:ce:5a:91:9b:7e:0d:ff:f0:8a:8e:cc:ec:c5:81:38:5c:
         43:8b:5c:84:31:d8:8c:a9:f6:e8:b3:c8:f1:95:6e:4d:55:f0:
         f8:19:17:e7:6d:be:eb:7e:bb:0b:8d:6e:bd:a3:66:e6:b8:83:
         91:51:16:e9:93:93:da:c2:7d:b7:3a:11:a9:8e:ba:0f:69:ae:
         a4:2b:b8:dd:9f:a3:04:e7:16:44:c7:15:42:c4:01:33:9a:f6:
         63:26:c6:7e:1e:8b:de:85:d9:86:3c:62:f1:46:ea:01:de:2c:
         85:53:8a:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1uNVvR74FmXa94FcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc3NzU5YjQtYTI0Ny00N2VhLWJhZGItYmI4MDliYzgw
YTMxMB4XDTI2MDQwNzE5MjgwMFoXDTI2MDcwNjE5MjgwMFowLzEtMCsGA1UEAxMk
MmI1M2FhNTYtN2ZmYy00ZDIyLWI5MmUtZDU4NGIzZTk3ODRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2yWNzcGcxDH7MlVvdF1mYeUm7LO10DyVs6m
2WGsXRA+s3b9v5RF7XiQgCgtpc7RU6nGw7n10+yndsUq4pCj4H0dWxtFz2yu9qz8
ZJJF9GDN3xZbn/CspIi2CjAZrweF7R8Tcly01crBLgdnOhFTr7UeJuvKMaoEhe7N
wUATxkEJ1gdziFIUefgx/NerBHt5SKf6RTRsZREs2EYWUG+TOjL+k5Q6bOsvHD2k
MC0VZpPuIGCARX7e5pQ59RPXuAiFRZh/cike3qkPQmcczolhrwm+4VS4+htgsXV1
0vZqu2TiHo1eu/Xaxc/TpXpcK8PUnRrlgiM3OpVQ3kerBCCKgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN0xDAvuetxTTOTqtS1jUB30SG2pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82Nzc3
NTliNC1hMjQ3LTQ3ZWEtYmFkYi1iYjgwOWJjODBhMzEvN2M1NmI0YTItYjM5OC0z
MmIxLWE1MGEtNzVkOTNlMGQ4MzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjc3NzU5YjQtYTI0Ny00N2VhLWJh
ZGItYmI4MDliYzgwYTMxLzY3Nzc1OWI0LWEyNDctNDdlYS1iYWRiLWJiODA5YmM4
MGEzMS5jcmwwHwYDVR0jBBgwFoAUSYDsXxW6YmUcIIY+JjxTmnHJOiwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82Nzc3NTliNC1hMjQ3LTQ3ZWEtYmFkYi1iYjgw
OWJjODBhMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSt2gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFr7dZUHRNrJV7wRb+n4LE8cGYrmoYzRhUhFNORmZxR14i3zSMKLpgAV
QDJyX3wldDZzUvm1tRfZgVZSihaE2oVZK/Tb5smwdGOGwwzxiD6dT4cPbfBdUgsE
EUkGnwnQNFHIA69ti/MZn71GcMdaDvS38RGU4iMLg5Z/HAxRs+qAsEFePe4VxmRu
v9Ft+ozjvLS1zlqRm34N//CKjszsxYE4XEOLXIQx2Iyp9uizyPGVbk1V8PgZF+dt
vut+uwuNbr2jZua4g5FRFumTk9rCfbc6EamOug9prqQruN2fowTnFkTHFULEATOa
9mMmxn4ei96F2YY8YvFG6gHeLIVTiqo=
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:59:59 2026 by rpki-client