Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/881f2ca5-7873-35ed-92d6-f73d8abafad5.roa
File:                     881f2ca5-7873-35ed-92d6-f73d8abafad5.roa (raw, json)
Hash identifier:          D6J3MMZOE1alljzQsbYCIPlYaRy6efatM1TQLrrHVDE=
Subject key identifier:   A7:76:0B:B8:40:6E:7F:12:8B:EB:B5:A0:90:AD:BF:83:A7:34:BD:DE
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F4328584DA54AC45534AB7B9B0DE46A40
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/881f2ca5-7873-35ed-92d6-f73d8abafad5.roa
Signing time:             Mon 27 Apr 2026 13:00:30 +0000
ROA not before:           Mon 27 Apr 2026 13:00:30 +0000
ROA not after:            Sun 26 Jul 2026 13:00:30 +0000
asID:                     31898
IP address blocks:        74.119.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a5:4a:c4:55:34:ab:7b:9b:0d:e4:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Apr 27 13:00:30 2026 GMT
            Not After : Jul 26 13:00:30 2026 GMT
        Subject: CN=b5b0af2c-acc6-4763-b7dd-dc8de34d6c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:65:51:a4:b5:a2:e3:91:1a:b0:95:f4:2f:bf:
                    3f:ed:e8:7d:51:d7:31:3a:0f:46:46:e5:92:66:35:
                    d0:9d:69:82:fe:a2:90:1a:81:e3:82:27:57:f6:30:
                    33:3d:7d:ae:55:5a:e8:fa:3e:d6:07:be:c8:8d:28:
                    b8:c3:73:6f:3a:03:6a:31:30:0e:a1:d0:60:81:a7:
                    aa:75:29:8b:af:0c:87:6b:84:08:a6:48:22:9e:06:
                    3d:eb:62:a3:03:86:e9:68:c7:2f:d3:de:60:fb:fb:
                    d3:3f:26:0a:f3:a0:ca:51:47:9f:65:f4:28:fd:19:
                    b4:28:c7:b4:c4:8e:90:10:d6:a8:82:13:b6:c6:01:
                    24:d5:92:d4:c3:89:f1:79:d2:a7:0b:7c:a0:90:7c:
                    a2:d3:4a:28:80:cc:bd:e5:15:3e:eb:10:d7:94:93:
                    c2:6b:66:25:55:e0:e1:90:4f:ee:8b:f0:02:58:05:
                    a4:b5:b6:da:a1:f7:55:82:1c:11:9d:12:a4:36:90:
                    13:23:c1:8f:4e:9e:5d:61:67:7e:79:a5:aa:b2:aa:
                    a9:0f:ec:0b:de:d1:57:a7:8b:a0:fb:49:fd:b2:02:
                    5c:32:88:f9:fb:36:16:06:14:ae:cf:39:99:c7:cc:
                    87:49:32:d9:47:f4:3f:1d:c1:65:5b:50:41:42:35:
                    09:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:76:0B:B8:40:6E:7F:12:8B:EB:B5:A0:90:AD:BF:83:A7:34:BD:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/881f2ca5-7873-35ed-92d6-f73d8abafad5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d1:9a:17:2b:28:ad:b2:7b:cd:91:7e:41:ad:68:f4:83:af:
         2c:dd:96:62:6f:83:4c:fa:3c:ec:52:f9:2f:de:2a:b5:ec:02:
         c1:3b:94:9a:6d:6f:67:9a:69:a5:1e:15:3b:a6:60:17:94:d3:
         a4:a4:e3:70:11:5f:15:0a:02:2f:42:45:c1:ca:f8:e6:3a:cb:
         b6:92:49:22:ad:0b:df:2f:fe:40:26:c4:f9:3c:16:d3:c0:89:
         34:a7:ac:98:93:83:44:bd:ec:eb:21:b2:84:12:17:4b:6e:09:
         4a:98:18:0b:0e:a9:75:3c:6b:99:8c:5e:33:1c:4c:16:7e:c8:
         22:0c:ea:6d:18:be:ed:fd:57:9a:d0:89:43:9b:ae:10:b9:5f:
         08:59:2a:42:d4:9a:5a:3c:4e:e3:78:0b:8e:6d:34:01:b6:3a:
         1f:78:e4:86:01:d5:0b:75:e8:4d:7b:6e:47:df:6d:84:d0:be:
         ed:12:74:f5:9b:75:d8:1f:87:fa:13:37:b2:49:78:0e:c8:a5:
         83:94:1f:66:8a:6b:4a:d0:9b:c7:83:49:e2:88:8a:67:e5:da:
         15:53:0e:03:64:29:dd:e8:0c:5b:38:21:81:e5:3d:c6:5c:ce:
         22:d5:b6:de:9d:51:36:03:29:02:c5:d5:c1:8b:f6:f6:6f:21:
         1e:d7:4d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:18:10 2026 by rpki-client