Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/119a8ee9-c67a-3c89-b56c-207a8120cc45.roa
File:                     119a8ee9-c67a-3c89-b56c-207a8120cc45.roa (raw, json)
Hash identifier:          /4RNMiTbghY/5B0yNvMRYxlmcoda8Y5Mp1fRncIwRzU=
Subject key identifier:   87:28:77:4F:67:10:7B:36:B6:ED:FD:00:03:C6:70:A6:71:AB:F1:92
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F4328584D0EA7BB378BB36EBBE46F1A40
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/119a8ee9-c67a-3c89-b56c-207a8120cc45.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     396185
IP address blocks:        74.127.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:bb:37:8b:b3:6e:bb:e4:6f:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=b31c8be3-4781-4348-8790-626de47e76e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:79:33:6c:68:89:b3:b5:09:3f:4c:da:fa:1d:
                    86:17:2b:df:8e:ce:4a:57:52:05:63:44:25:e8:ae:
                    4a:68:90:ce:9f:e7:a4:f0:5b:58:96:45:5f:b5:e5:
                    d1:bb:d4:b3:ed:81:b3:f1:28:ef:6a:c9:8e:5e:36:
                    5f:dd:61:09:02:d1:3e:8b:12:f5:63:b5:66:e3:a7:
                    25:54:00:24:66:33:e2:29:b5:6f:7b:67:75:97:7c:
                    78:49:27:cc:eb:7b:bd:c8:a1:77:06:48:d5:b2:e1:
                    71:86:d2:69:fe:89:2d:38:e4:0a:e9:70:8f:5d:1c:
                    82:fa:55:10:3e:46:f3:64:d5:9a:c7:17:2a:74:ae:
                    9c:aa:a4:a4:5a:c1:16:f4:7d:28:d0:f4:49:3d:2d:
                    da:10:46:25:04:22:cb:bd:b7:b2:4f:56:31:cc:73:
                    ff:c6:24:85:e4:e7:9b:9e:b6:ea:52:b9:a5:bf:31:
                    62:17:01:62:7e:fa:59:a0:ee:1e:9f:b2:7e:a6:c7:
                    f5:84:52:3c:5d:eb:0b:fe:dc:52:98:42:f9:c6:8e:
                    77:2d:ec:80:7a:b9:06:58:68:fc:65:73:4a:3c:6a:
                    d1:80:6e:ea:bd:31:34:3f:57:55:07:87:2c:6e:bf:
                    a8:92:b3:f8:05:02:de:2a:6e:3c:5c:41:72:25:ed:
                    bf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:28:77:4F:67:10:7B:36:B6:ED:FD:00:03:C6:70:A6:71:AB:F1:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/119a8ee9-c67a-3c89-b56c-207a8120cc45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.127.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:0c:b7:3e:14:1f:67:cb:1d:89:bd:86:75:e6:c0:12:f9:62:
         0a:1a:34:0c:6f:64:b8:cf:92:5a:7e:12:cc:35:ae:ed:ab:6a:
         bb:b4:b9:9a:29:28:7b:1e:e3:b6:89:85:c3:f7:f5:63:98:a4:
         1f:85:9f:bf:78:53:99:c5:2d:a8:da:a0:1d:6b:d6:ca:75:c4:
         90:09:21:15:d6:39:cd:22:19:a9:d7:db:73:eb:fa:8c:1e:cb:
         42:48:54:5e:91:af:55:82:fe:a8:57:c2:8a:c7:c1:be:16:53:
         c9:d8:54:5e:92:79:14:52:24:68:38:cf:05:c6:d6:06:60:d1:
         ce:3f:79:b1:bf:4b:db:05:d4:d1:0f:d1:10:1f:8d:91:be:33:
         a3:89:af:38:d8:b4:41:fb:18:77:d2:93:56:be:96:0c:17:c5:
         5b:f9:c4:19:bc:fd:a2:b3:2a:9a:04:1c:53:6b:ea:77:e8:b3:
         6c:93:83:02:18:69:02:1b:64:e9:4d:e2:d8:cd:02:3b:d0:c7:
         96:b2:9c:9f:a7:73:30:3e:01:ce:36:45:d0:44:89:92:05:bb:
         cf:06:2d:fd:b4:63:c1:88:85:cb:52:d4:2f:75:81:03:b6:cd:
         a1:17:41:98:f9:88:f2:b1:ac:82:1d:7d:7d:b0:4e:aa:91:bd:
         b0:50:06:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:05:17 2026 by rpki-client