Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cdd06723-d4ac-308c-be74-e154e8ce40a2.roa
File:                     cdd06723-d4ac-308c-be74-e154e8ce40a2.roa (raw, json)
Hash identifier:          bu54Zs5BWcAvHqz1GRNHSog0/bmFMeavWjeZYT+gE1o=
Subject key identifier:   44:4D:EB:11:C8:D4:29:8B:D3:33:49:C2:D1:20:94:4E:F2:33:9E:F3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA8283E9854EC13CF5CA00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cdd06723-d4ac-308c-be74-e154e8ce40a2.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     394996
IP address blocks:        74.82.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:82:83:e9:85:4e:c1:3c:f5:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=af30595f-2c13-4173-ab41-4aa30654aa1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:35:b9:0b:00:b1:57:38:b3:de:b0:fe:1a:9e:
                    12:21:bf:91:62:21:01:c6:bf:c9:69:67:d4:bc:bc:
                    02:73:29:05:be:41:ab:24:4b:32:0f:70:27:79:93:
                    54:eb:e8:1e:37:b5:d0:67:a7:51:b2:a2:32:26:8f:
                    1a:05:3e:2a:65:6b:48:4e:93:9f:35:da:27:19:67:
                    5b:f7:a4:5d:0b:6e:29:f8:59:6a:ad:53:d2:ca:99:
                    c4:08:95:16:f7:22:61:77:22:68:73:7c:f8:ca:9f:
                    9e:5c:64:07:cc:f2:68:06:1a:79:04:b9:ca:a2:d2:
                    cd:e1:c6:74:6e:5d:c2:db:31:d7:9d:52:07:36:23:
                    5f:06:f8:e7:0f:5d:34:a8:0f:4d:f4:40:76:bf:07:
                    1d:73:cc:95:25:12:de:4a:f2:b8:06:5f:f9:c1:ea:
                    81:b3:5c:6e:87:91:84:ab:5e:5d:57:24:33:6d:7e:
                    dc:d0:49:70:8d:11:40:30:25:e5:36:cf:66:a0:a6:
                    f0:93:42:d8:f5:9a:ea:42:e4:65:82:38:ff:f3:33:
                    05:4b:13:c7:40:c3:64:0e:a4:3d:4b:4a:2c:fd:e5:
                    bb:82:4c:62:d4:0b:42:c7:2c:46:6d:f6:91:ee:12:
                    78:ae:c0:45:00:bc:db:9b:22:6d:1a:e5:90:d4:f3:
                    12:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4D:EB:11:C8:D4:29:8B:D3:33:49:C2:D1:20:94:4E:F2:33:9E:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cdd06723-d4ac-308c-be74-e154e8ce40a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.82.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:93:af:3c:1d:7b:92:16:c4:3a:f6:f4:a7:bf:9c:03:9b:d3:
         e9:c4:0c:5f:13:c6:2a:d5:7a:c1:c1:71:a1:6e:44:03:90:ab:
         6a:2a:7b:d9:b7:b2:e8:5c:e4:fa:de:d4:1b:8b:36:c8:d1:6c:
         91:33:26:5b:cb:c7:74:dd:f5:08:0f:33:21:85:f4:32:77:43:
         3b:36:03:38:3e:39:44:26:71:1e:8e:e7:d7:5a:bd:e9:cd:fb:
         4b:1b:a0:c1:c4:ca:c6:43:e2:47:b1:30:ff:21:1a:de:93:56:
         78:94:dd:e1:95:74:d4:ea:41:93:01:7b:43:f5:7d:b7:7e:11:
         d0:14:c7:50:a6:f1:4f:c9:9c:cf:ed:c0:e9:92:f9:f7:aa:ae:
         5a:08:f7:b8:d9:bf:eb:42:75:04:03:10:d1:e7:05:b3:06:fb:
         67:ba:52:ec:e8:20:7f:78:c6:55:17:0a:2f:e0:6b:43:8c:bd:
         0a:42:43:8f:57:24:72:76:c2:bb:f2:91:5d:94:71:69:0f:ff:
         ed:87:9e:61:24:21:d7:f1:cb:ef:39:57:63:fa:cc:7c:98:ce:
         44:5c:40:01:45:77:7b:8f:d1:c3:0a:3d:b0:b8:84:83:4e:3a:
         4f:e9:e4:95:f4:45:f1:c6:b8:08:57:66:27:78:b1:1c:a5:b9:
         cf:78:f8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:44:47 2026 by rpki-client