Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b41a7554-51aa-325c-bdec-b0f18b6bdf02.roa
File:                     b41a7554-51aa-325c-bdec-b0f18b6bdf02.roa (raw, json)
Hash identifier:          nfq0I2JFOevV4dJSlcr9S/r4UskEAVnOu0dtCmDUlmE=
Subject key identifier:   97:58:F5:6D:5C:7A:81:E4:CA:EF:ED:C5:9E:A5:31:5A:5D:7C:C3:41
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B52A758EDFE1CA496F2C4BC80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b41a7554-51aa-325c-bdec-b0f18b6bdf02.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        74.49.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:58:ed:fe:1c:a4:96:f2:c4:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=1000ff4b-255c-4de6-ac33-5ae6f77ea092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a3:03:c5:c1:e2:33:2f:6e:7c:c0:4a:be:4e:
                    2c:b6:d0:b8:1b:1b:24:60:02:20:b5:7f:37:b3:5a:
                    f2:79:98:cc:ce:51:e7:17:78:a1:55:44:fc:68:3f:
                    1f:84:74:1f:11:59:33:a5:b2:cf:ab:0b:5c:5d:06:
                    a9:62:28:36:cd:58:a5:4e:04:6e:af:a4:82:d6:ea:
                    8a:bc:3d:b7:61:96:8f:c9:8c:b9:ee:61:2d:11:ee:
                    10:5c:1e:54:c9:f8:a9:96:bb:5d:d6:aa:06:9b:13:
                    f2:b0:7a:18:1e:59:54:1c:a2:aa:e9:be:e6:4e:0a:
                    d5:04:07:fb:7b:8b:c8:f0:10:5e:d8:4c:b6:b8:74:
                    3d:32:66:a2:01:3b:7e:ee:b3:ad:91:a1:5d:21:e3:
                    01:f2:00:a3:c4:fd:31:bd:2f:08:b1:c6:ec:4b:e5:
                    76:9d:85:5e:ea:2e:a7:ae:fa:b0:ea:ae:74:e8:eb:
                    e9:83:81:f8:cc:08:9d:6a:dd:c3:d0:8e:8f:db:7c:
                    ed:a6:20:8d:7a:75:5c:88:21:6a:5f:8e:75:af:ea:
                    06:45:3e:4f:38:d2:79:de:e4:7a:77:2e:25:3f:95:
                    64:e3:d0:bc:13:6a:6f:0f:f1:ae:3c:42:70:33:49:
                    1e:11:a3:8c:18:e2:72:67:ef:11:b5:9b:a6:3f:9c:
                    e8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:58:F5:6D:5C:7A:81:E4:CA:EF:ED:C5:9E:A5:31:5A:5D:7C:C3:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b41a7554-51aa-325c-bdec-b0f18b6bdf02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.49.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:f9:17:fb:fd:c1:5f:a7:7d:16:55:c5:3f:31:ad:b0:30:24:
         52:13:71:16:10:97:aa:a4:04:93:3d:ed:0c:1c:63:a6:81:48:
         83:95:06:8c:e4:84:b9:27:03:bc:21:60:69:4a:af:fc:42:ec:
         85:22:c6:c0:91:d9:6c:35:19:54:74:a3:c9:d0:4d:6e:10:66:
         93:30:2c:02:07:68:69:70:5d:02:e5:2c:2a:92:1e:8a:b8:cc:
         52:28:62:1a:0e:99:56:f4:22:4e:2a:2e:6a:99:01:8c:b4:c5:
         60:85:2e:06:71:2f:e3:61:d2:39:a1:da:51:95:8c:38:a6:d9:
         d8:27:0c:7d:18:18:08:1d:c9:a3:1c:00:e3:39:5f:b5:e0:fa:
         e6:24:f8:dc:8a:5f:25:01:36:60:b4:0f:72:dd:60:2d:ae:c5:
         e0:bc:c7:de:48:15:36:2b:0d:6d:6a:0e:43:8c:fb:db:24:47:
         73:b5:a5:ed:00:a6:b1:34:44:6a:f4:02:7a:be:bc:cb:62:77:
         fd:08:3a:d7:0d:06:3d:a6:8a:4b:34:08:37:f1:41:d6:d3:2c:
         0c:d0:1c:81:94:e3:03:73:a8:c6:6a:19:94:59:74:c8:7e:3c:
         83:4d:0e:e7:e0:32:17:76:b9:91:dc:0a:9a:e7:e8:95:1c:5f:
         c5:e9:8c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:35:50 2025 by rpki-client