Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53/c520f1f5-fa27-3314-bdd7-48ef172a427d.roa
File:                     c520f1f5-fa27-3314-bdd7-48ef172a427d.roa (raw, json)
Hash identifier:          LLxxxJa1ls1ds09NijK73di8QN+xVkmQ0BWolGiXU/U=
Subject key identifier:   BA:11:92:81:7E:69:0A:50:FA:AA:7C:A5:CB:A8:82:6D:53:30:C1:B4
Certificate issuer:       /CN=0a1ff3e6-c9a5-4864-9107-b8da19c23c53
Certificate serial:       010D0C9F4328584CC11A35E53CF3FF8442C327C0
Authority key identifier: 64:41:3C:3D:D9:54:12:74:22:99:05:26:52:06:96:5D:42:58:7F:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53/c520f1f5-fa27-3314-bdd7-48ef172a427d.roa
Signing time:             Wed 04 Feb 2026 19:18:28 +0000
ROA not before:           Wed 04 Feb 2026 19:18:28 +0000
ROA not after:            Tue 05 May 2026 18:18:28 +0000
asID:                     32560
IP address blocks:        74.119.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53/0a1ff3e6-c9a5-4864-9107-b8da19c23c53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53/0a1ff3e6-c9a5-4864-9107-b8da19c23c53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c1:1a:35:e5:3c:f3:ff:84:42:c3:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1ff3e6-c9a5-4864-9107-b8da19c23c53
        Validity
            Not Before: Feb  4 19:18:28 2026 GMT
            Not After : May  5 18:18:28 2026 GMT
        Subject: CN=aa910ccb-ac00-4d47-a21e-5ee974ed0bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9b:1a:b7:70:23:a2:e3:98:d6:4c:95:56:a1:
                    18:06:73:a1:03:ba:9a:55:47:34:f9:06:0b:9d:a9:
                    8d:9c:d9:bc:a6:44:4c:ef:3a:b4:7d:35:72:f6:cf:
                    e1:50:f9:78:ba:d1:fe:5d:f1:c2:43:06:a6:c8:73:
                    82:0a:a1:d1:99:be:82:bb:4d:8b:b4:51:f8:b0:69:
                    a0:1c:4a:67:88:fc:b7:e6:32:a6:c6:c3:80:66:3f:
                    3c:ed:7b:39:67:cd:d9:3f:b8:ec:a9:e1:1e:4b:98:
                    6e:97:05:6d:5e:70:82:e6:ee:6e:d5:00:18:e8:47:
                    63:c3:13:cd:be:e4:9e:77:fb:8d:ae:93:0b:85:d8:
                    d7:06:1c:eb:19:90:eb:d4:5d:ee:e0:42:24:6a:3f:
                    e2:de:5f:1b:7a:f9:69:2c:6f:b3:f1:1b:e3:0b:f6:
                    aa:1d:37:ac:74:8b:c3:99:43:0c:ec:aa:c1:d3:28:
                    d5:cb:76:b4:f0:c3:d3:9d:00:e4:46:ad:d5:3a:d8:
                    35:73:d4:7a:a7:6f:39:b7:18:5d:c3:96:42:f3:7b:
                    32:1c:55:24:84:cb:38:43:d7:83:6e:dc:63:fc:70:
                    de:99:5a:cb:40:c0:c7:ff:d0:f8:b8:0b:18:91:9f:
                    60:29:6d:2a:dc:b7:00:3b:5c:46:29:3e:38:83:ce:
                    b7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:11:92:81:7E:69:0A:50:FA:AA:7C:A5:CB:A8:82:6D:53:30:C1:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53/c520f1f5-fa27-3314-bdd7-48ef172a427d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53/0a1ff3e6-c9a5-4864-9107-b8da19c23c53.crl

            X509v3 Authority Key Identifier:
                keyid:64:41:3C:3D:D9:54:12:74:22:99:05:26:52:06:96:5D:42:58:7F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:4a:ab:b9:49:a6:98:47:3f:96:03:0b:03:99:f1:3c:42:28:
         3f:44:8e:78:c2:7c:d0:5f:ec:d4:d1:26:f4:54:12:70:da:f5:
         a6:1f:e5:3a:4f:07:7c:42:e4:31:75:a5:d1:b4:cd:7a:31:7a:
         15:c5:14:2a:b8:86:b6:30:b2:ad:fe:39:de:c3:ee:1f:1f:18:
         18:9f:78:c3:47:b5:f9:98:4f:88:c9:40:81:28:ff:be:66:0f:
         52:47:fc:3e:c1:2f:a6:57:c7:1b:f4:51:9e:06:d5:18:2d:92:
         6a:b5:02:13:27:9e:ea:0a:4c:d3:0e:d9:9a:21:9a:98:47:b7:
         0d:52:2f:b6:51:8c:5a:b1:01:b9:e4:17:47:97:ed:f5:33:3b:
         9b:76:32:e8:fa:5f:59:41:0e:3f:41:06:c7:0c:70:8f:17:9a:
         36:96:d9:7c:86:17:0d:c8:93:fa:11:43:18:a9:65:a0:18:13:
         17:40:08:6d:7f:86:c6:b7:56:ad:2a:72:6b:94:3b:0f:21:f4:
         9e:13:df:59:97:a4:68:e4:6b:fc:89:bd:e4:22:d6:a4:77:03:
         6a:6e:3f:6f:77:e0:71:88:4d:9c:1a:e7:6e:21:d0:74:b7:5e:
         33:9d:60:0a:ec:17:b2:c4:9e:a5:d9:41:fd:e2:f0:b6:ae:e3:
         7f:23:ec:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:13 2026 by rpki-client