Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/22ba18f0-6c43-33a0-ae78-23ba1ff1a85b.roa
File:                     22ba18f0-6c43-33a0-ae78-23ba1ff1a85b.roa (raw, json)
Hash identifier:          0CLcgTqRfiR2sgoKKL5Z4OUTjeKydEme+hJo+ACMV9s=
Subject key identifier:   F2:E1:B5:E8:44:B0:8E:1B:5D:38:E7:37:45:90:32:53:21:3E:85:10
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F4328584B821CB73C4E601218BF67B600
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/22ba18f0-6c43-33a0-ae78-23ba1ff1a85b.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     16509
IP address blocks:        74.115.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:b7:3c:4e:60:12:18:bf:67:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=500dfe5b-3e5b-4ed1-8973-7d83118966bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5d:af:f3:5c:84:41:c2:ea:90:59:c9:d3:73:
                    e0:3e:fb:d9:23:40:98:a4:b4:0b:ae:c7:57:a0:38:
                    de:32:9e:7e:48:58:7e:c6:08:07:52:d5:d6:de:c2:
                    3f:a7:08:93:b6:51:19:4f:d7:dc:e7:f5:51:cb:d6:
                    f1:0a:5c:93:d3:2f:f6:63:af:67:e3:c6:ed:bc:cf:
                    b1:cc:1f:15:a2:8d:08:ec:37:20:20:33:d2:96:24:
                    b3:d7:a2:d4:3e:ce:dc:21:9c:66:67:3a:0c:3c:47:
                    af:25:26:9a:86:bf:fc:68:c5:31:79:ea:44:ac:ad:
                    cd:fb:ee:4d:38:c5:78:7a:97:c2:cb:a6:a8:4f:08:
                    1e:86:fa:fa:f8:2a:ad:a0:21:5d:ea:55:18:b3:ff:
                    cc:f1:2a:3f:4e:b7:fb:74:7f:21:28:42:cb:84:20:
                    ea:ce:6d:f1:6e:cf:49:91:ab:5d:54:45:25:70:f5:
                    e5:b2:d8:94:ab:76:60:0a:83:b2:95:29:da:05:bf:
                    e9:ed:d2:7a:62:94:16:59:06:43:b3:96:c0:ba:f3:
                    af:8b:c1:36:59:bd:8a:b9:89:25:eb:d4:82:70:9e:
                    49:97:51:51:ad:89:2e:3e:af:a5:a9:ea:f6:86:14:
                    e8:d3:68:ec:1a:9e:d3:a4:9f:6f:7c:4e:6c:51:fd:
                    c2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E1:B5:E8:44:B0:8E:1B:5D:38:E7:37:45:90:32:53:21:3E:85:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/22ba18f0-6c43-33a0-ae78-23ba1ff1a85b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:71:d1:ee:51:d9:7f:1a:87:0d:e0:6b:24:e9:40:be:70:27:
         27:15:f8:6b:a8:c7:ea:58:00:c0:c4:cc:45:97:c1:e0:56:d8:
         46:ab:b8:eb:f2:de:95:5c:1f:e5:3c:e8:be:3e:71:cd:44:30:
         29:6b:6d:96:41:a0:67:b5:43:f4:46:46:4d:d0:bb:31:70:30:
         34:a3:9f:3f:14:05:ae:b8:c2:fe:f0:d1:e8:7c:dc:51:2a:3d:
         8c:12:7a:ec:b9:7d:aa:8b:d6:d4:01:b2:ed:02:d8:41:dd:1e:
         3a:95:65:4d:83:f8:4a:9d:64:7c:34:ba:22:1c:fe:a8:c3:36:
         21:ed:9f:4b:7e:b9:74:2c:f6:90:1e:21:66:04:04:2d:ab:25:
         35:e3:dd:86:00:56:8a:e5:a7:d0:f9:92:ee:03:8d:86:ca:f4:
         65:81:6e:b3:7c:07:4e:d1:6d:41:19:52:36:9a:0b:d1:7b:52:
         d0:7d:18:a1:ef:84:fe:2b:59:6f:dd:4b:ca:48:a0:c7:49:b1:
         ba:97:ad:08:79:29:d5:f9:d4:50:b0:66:7f:67:66:43:74:3b:
         28:37:b7:f7:6a:45:49:8e:65:df:15:1d:65:12:13:fe:58:35:
         d7:ef:10:10:fd:44:cb:12:f3:b8:86:2a:4e:39:8f:7f:28:80:
         03:c5:b6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:00:42 2025 by rpki-client