Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ee282b1a-ceb5-3eef-95c5-520359544df0.roa
File:                     ee282b1a-ceb5-3eef-95c5-520359544df0.roa (raw, json)
Hash identifier:          +5Jz3SaPsj6ElBrKpApsGT5Txo+0OPfcKP7nvl6oeA4=
Subject key identifier:   49:51:6E:27:50:C2:2C:42:1A:B6:AE:BE:A1:08:6D:47:A1:81:2E:9B
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584F4277F7D27D80BB6038DA28C0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ee282b1a-ceb5-3eef-95c5-520359544df0.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     26421
IP address blocks:        74.202.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:77:f7:d2:7d:80:bb:60:38:da:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=9746ddc3-4f17-4282-961a-8a1b2df62623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0d:3c:53:4e:1d:4f:61:e1:a4:35:8a:6c:5b:
                    5b:83:6a:8b:55:71:cc:45:03:fe:90:e2:ea:9f:c3:
                    34:a5:58:59:4e:62:26:ee:73:da:01:97:9c:cd:a7:
                    83:6f:51:00:69:4a:33:4a:aa:6e:56:12:3f:f8:68:
                    d2:2b:fe:31:16:5a:47:82:c7:18:b0:fb:be:53:cd:
                    f6:d6:1a:e3:15:53:5e:47:90:d1:71:b9:6f:50:e8:
                    c4:b7:2a:f8:36:a9:87:a6:b9:34:31:17:df:d8:f7:
                    e6:08:22:1a:b7:83:4d:1f:a9:94:19:f3:83:79:78:
                    02:bc:d5:e4:80:45:38:dd:a7:08:8f:ba:b1:5d:e4:
                    6b:3c:8f:9e:e3:5f:0d:1d:2f:d0:40:d6:34:c2:a5:
                    3f:d6:08:a2:f1:72:59:c0:3a:69:e3:3c:99:db:08:
                    88:73:71:ef:2d:1b:7d:b7:5e:23:87:a1:ff:08:b4:
                    8f:16:5f:5c:74:32:58:af:19:0e:4c:8a:61:7f:24:
                    c4:5f:13:07:a1:13:b3:43:68:72:65:4f:76:70:86:
                    2d:e4:b4:05:d2:00:82:28:c0:f4:26:23:ed:33:04:
                    cc:bb:76:6f:1b:5f:18:4e:8f:f4:fa:4e:60:ca:cf:
                    c4:fb:ee:40:65:aa:c8:e1:51:d6:6c:59:a2:90:f7:
                    c3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:51:6E:27:50:C2:2C:42:1A:B6:AE:BE:A1:08:6D:47:A1:81:2E:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ee282b1a-ceb5-3eef-95c5-520359544df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.202.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:13:db:9e:e9:11:be:9f:05:ab:3e:0a:99:8d:db:a7:02:41:
         29:b5:6f:7f:ea:b7:c7:89:b4:30:14:5c:ce:18:e7:98:72:93:
         78:2d:a8:2e:2f:31:c2:75:9f:ac:87:3b:09:d6:e6:08:a4:20:
         d3:cc:5b:1a:d4:da:d2:06:e1:c3:ef:d9:a3:e7:63:23:d3:c2:
         af:e2:59:ac:ba:96:af:84:74:91:57:d0:2d:34:fd:19:3c:67:
         81:b7:63:37:f4:45:09:d7:78:e2:95:06:57:39:cb:81:26:f4:
         e1:b2:3d:c5:fb:2b:80:ab:4a:35:d3:75:de:d2:de:95:93:f1:
         e3:2e:61:05:46:8b:a8:f7:c3:76:56:3a:f9:d3:26:f8:e4:f8:
         2d:39:07:f2:bd:e7:35:75:1b:1a:1f:2f:f3:27:23:20:3a:2b:
         38:24:9e:32:20:19:0c:cc:40:ac:79:56:32:dd:3d:eb:4a:b2:
         b3:30:f7:6b:02:73:01:f2:e7:54:f0:d7:e4:4f:0e:2d:90:5b:
         f9:3b:3d:27:03:f5:08:34:e4:24:b5:9e:34:c2:1e:16:08:c5:
         dd:5f:bc:d8:93:60:53:af:4a:c8:81:bc:04:53:14:1b:b1:d7:
         c1:67:2d:41:d9:92:c5:81:92:79:26:30:84:12:75:c6:d6:ae:
         5b:fd:22:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd/fSfYC7YDjaKMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk
OTc0NmRkYzMtNGYxNy00MjgyLTk2MWEtOGExYjJkZjYyNjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg08U04dT2HhpDWKbFtbg2qLVXHMRQP+kOLq
n8M0pVhZTmIm7nPaAZeczaeDb1EAaUozSqpuVhI/+GjSK/4xFlpHgscYsPu+U832
1hrjFVNeR5DRcblvUOjEtyr4NqmHprk0MRff2PfmCCIat4NNH6mUGfODeXgCvNXk
gEU43acIj7qxXeRrPI+e418NHS/QQNY0wqU/1gii8XJZwDpp4zyZ2wiIc3HvLRt9
t14jh6H/CLSPFl9cdDJYrxkOTIphfyTEXxMHoROzQ2hyZU92cIYt5LQF0gCCKMD0
JiPtMwTMu3ZvG18YTo/0+k5gys/E++5AZarI4VHWbFmikPfDXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFElRbidQwixCGrauvqEIbUehgS6bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZWUyODJiMWEtY2ViNS0z
ZWVmLTk1YzUtNTIwMzU5NTQ0ZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSsrIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC4T257pEb6fBas+CpmN26cCQSm1b3/qt8eJtDAUXM4Y55hyk3gtqC4v
McJ1n6yHOwnW5gikINPMWxrU2tIG4cPv2aPnYyPTwq/iWay6lq+EdJFX0C00/Rk8
Z4G3Yzf0RQnXeOKVBlc5y4Em9OGyPcX7K4CrSjXTdd7S3pWT8eMuYQVGi6j3w3ZW
OvnTJvjk+C05B/K95zV1GxofL/MnIyA6KzgknjIgGQzMQKx5VjLdPetKsrMw92sC
cwHy51Tw1+RPDi2QW/k7PScD9Qg05CS1njTCHhYIxd1fvNiTYFOvSsiBvARTFBux
18FnLUHZksWBknkmMIQSdcbWrlv9Irg=
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:44:48 2026 by rpki-client