Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/e1a7be4a-5c75-3cfe-a4f3-ae01e91101d1.roa
File:                     e1a7be4a-5c75-3cfe-a4f3-ae01e91101d1.roa (raw, json)
Hash identifier:          YJpM8IXP084e/pT9QsEG8rsgJTCVuEsElcS4rJYDIGE=
Subject key identifier:   58:50:DE:01:09:54:49:FC:72:12:19:79:CF:78:AC:E1:75:68:D7:D7
Certificate issuer:       /CN=b9ea3438-4142-4de2-a912-7b081a51b42d
Certificate serial:       010D0C9F4328584D492A5DE5121F7BA992AD4280
Authority key identifier: 24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/e1a7be4a-5c75-3cfe-a4f3-ae01e91101d1.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     19210
IP address blocks:        74.116.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:5d:e5:12:1f:7b:a9:92:ad:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ea3438-4142-4de2-a912-7b081a51b42d
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=f3d5d44b-3605-4a46-a5aa-cb9dc1954f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f4:70:0e:d3:bc:e7:d5:8c:4b:67:f0:30:53:
                    a0:ea:e5:22:bd:8c:96:87:08:8c:3a:33:d0:ef:e7:
                    2e:1c:f6:d8:b2:35:5b:df:1b:e7:12:93:3e:0b:5a:
                    05:bb:8a:75:44:27:27:e8:99:ba:c9:69:48:e9:32:
                    86:71:51:a5:bb:8a:26:e8:1d:ab:e8:42:b2:14:1b:
                    2e:75:0d:8d:4a:af:53:0b:78:c2:89:21:f0:ca:ab:
                    32:76:9a:e5:a7:73:ef:b6:cf:13:31:90:91:65:48:
                    6c:8c:32:3e:ed:bd:56:3c:df:91:f3:ee:24:ac:4e:
                    64:24:88:86:10:f1:19:ea:7f:19:2d:ca:13:7c:97:
                    d7:c4:c9:f9:90:8d:83:84:12:2f:4e:73:cd:5f:1a:
                    9b:64:2c:7e:b0:96:8e:0d:21:ce:a2:7c:d2:59:33:
                    a0:be:b9:5e:b9:fd:71:ca:4e:13:b4:a7:aa:be:6b:
                    a9:5b:09:6d:d0:22:94:ea:7a:54:c8:ef:88:79:9f:
                    37:26:73:91:64:a1:16:09:78:90:b6:20:58:34:ea:
                    36:d7:b2:a8:31:80:1d:b8:d7:b6:6b:35:fb:1e:55:
                    9d:a8:78:58:c5:93:a9:90:fe:a3:60:6a:4e:58:0b:
                    ea:d4:9e:d9:fe:e9:8f:ae:0d:08:7e:67:b2:b0:a5:
                    59:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:50:DE:01:09:54:49:FC:72:12:19:79:CF:78:AC:E1:75:68:D7:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/e1a7be4a-5c75-3cfe-a4f3-ae01e91101d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl

            X509v3 Authority Key Identifier:
                keyid:24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:10:51:ae:00:15:7a:75:cc:b3:cf:63:06:f9:ef:17:0a:6b:
         17:ab:95:ce:73:9a:fc:8a:92:25:64:7e:52:f6:31:2a:56:ce:
         88:f2:58:a9:ea:f6:81:1a:da:52:62:74:fa:9c:84:30:2c:df:
         4e:71:8b:4b:70:3e:94:a8:4e:79:e3:e0:53:5f:34:36:52:20:
         42:55:b5:aa:7a:a2:42:4e:46:4b:99:22:8b:42:df:2d:c0:31:
         4a:ab:62:15:d1:66:70:8e:e8:42:6e:89:a1:82:aa:20:17:09:
         fc:36:b6:35:31:d2:25:7a:3e:a1:46:a4:b9:3e:cb:7c:ab:7c:
         44:aa:b8:27:00:4b:dd:f4:50:38:1f:19:cd:3d:28:03:0a:0a:
         56:b5:47:49:56:e8:88:e9:78:c0:b0:37:f4:8e:7d:0d:9c:9b:
         6d:72:7f:65:53:d0:f0:2f:41:ad:35:27:19:86:bd:2c:b0:22:
         3b:e7:e0:81:19:b8:0a:fb:65:30:be:49:90:a6:da:ed:91:f1:
         d2:6e:c1:4d:e7:08:15:33:f6:86:9e:3a:c9:2d:8c:8e:79:dc:
         b5:a0:b9:96:81:e0:42:7a:65:99:c7:a9:df:7c:f0:d7:96:72:
         ac:a5:b9:25:51:82:9a:31:1d:12:c6:3f:00:fd:2a:94:18:1b:
         2a:91:57:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKl3lEh97qZKtQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjllYTM0MzgtNDE0Mi00ZGUyLWE5MTItN2IwODFhNTFi
NDJkMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk
ZjNkNWQ0NGItMzYwNS00YTQ2LWE1YWEtY2I5ZGMxOTU0ZjhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivRwDtO859WMS2fwMFOg6uUivYyWhwiMOjPQ
7+cuHPbYsjVb3xvnEpM+C1oFu4p1RCcn6Jm6yWlI6TKGcVGlu4om6B2r6EKyFBsu
dQ2NSq9TC3jCiSHwyqsydprlp3Pvts8TMZCRZUhsjDI+7b1WPN+R8+4krE5kJIiG
EPEZ6n8ZLcoTfJfXxMn5kI2DhBIvTnPNXxqbZCx+sJaODSHOonzSWTOgvrleuf1x
yk4TtKeqvmupWwlt0CKU6npUyO+IeZ83JnORZKEWCXiQtiBYNOo217KoMYAduNe2
azX7HlWdqHhYxZOpkP6jYGpOWAvq1J7Z/umPrg0IfmeysKVZywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFhQ3gEJVEn8chIZec94rOF1aNfXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOWVh
MzQzOC00MTQyLTRkZTItYTkxMi03YjA4MWE1MWI0MmQvZTFhN2JlNGEtNWM3NS0z
Y2ZlLWE0ZjMtYWUwMWU5MTEwMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjllYTM0MzgtNDE0Mi00ZGUyLWE5
MTItN2IwODFhNTFiNDJkL2I5ZWEzNDM4LTQxNDItNGRlMi1hOTEyLTdiMDgxYTUx
YjQyZC5jcmwwHwYDVR0jBBgwFoAUJDliXoh2ePZzmBGt5EgWbTk2r20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOWVhMzQzOC00MTQyLTRkZTItYTkxMi03YjA4
MWE1MWI0MmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnRpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHwQUa4AFXp1zLPPYwb57xcKaxerlc5zmvyKkiVkflL2MSpWzojyWKnq
9oEa2lJidPqchDAs305xi0twPpSoTnnj4FNfNDZSIEJVtap6okJORkuZIotC3y3A
MUqrYhXRZnCO6EJuiaGCqiAXCfw2tjUx0iV6PqFGpLk+y3yrfESquCcAS930UDgf
Gc09KAMKCla1R0lW6IjpeMCwN/SOfQ2cm21yf2VT0PAvQa01JxmGvSywIjvn4IEZ
uAr7ZTC+SZCm2u2R8dJuwU3nCBUz9oaeOsktjI553LWguZaB4EJ6ZZnHqd988NeW
cqyluSVRgpoxHRLGPwD9KpQYGyqRVyg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:58:20 2026 by rpki-client