Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/8d0cac73-efc7-398b-936e-1c9237bb4b8f.roa
File:                     8d0cac73-efc7-398b-936e-1c9237bb4b8f.roa (raw, json)
Hash identifier:          fsyYJoUaB+vrsFKKFAU21UbHKP5NkpfEjwVgTKfe/tM=
Subject key identifier:   33:19:E7:8F:C4:BE:F4:EB:0D:2F:98:B5:7F:EA:09:89:E2:DB:72:E6
Certificate issuer:       /CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
Certificate serial:       010D0C9F4328584E9A7FBAD63274435BF592C500
Authority key identifier: 0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/8d0cac73-efc7-398b-936e-1c9237bb4b8f.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     21634
IP address blocks:        74.123.28.0/22 maxlen: 24
                          162.210.128.0/22 maxlen: 24
                          2620:a0:4000::/44 maxlen: 48
                          2620:114:a000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:ba:d6:32:74:43:5b:f5:92:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=64c3ff91-d76a-4519-9def-1f00536d064f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:23:b8:a1:48:c2:57:9a:1e:a9:9c:3a:a7:83:
                    d2:b7:90:db:3d:f9:27:e9:5e:f5:84:4b:9f:a7:82:
                    95:4c:4b:69:50:2d:42:d5:07:2b:28:18:5c:35:25:
                    54:3d:81:c6:19:b6:0d:db:3b:1a:0d:15:f8:71:ee:
                    83:48:31:7c:d6:a4:06:e7:3e:0a:2c:f3:13:9b:da:
                    d7:3d:33:ad:6c:8b:80:7d:ce:36:8c:99:e3:d6:b9:
                    c2:f3:18:b2:8b:8d:67:ea:c3:ea:0a:44:e8:51:5b:
                    c5:14:03:6d:11:43:a5:25:6a:c4:49:df:c9:5a:6f:
                    be:7f:52:2e:29:b2:36:8b:59:b5:cd:35:99:4a:6d:
                    ba:52:50:69:76:e4:2c:99:91:b9:a8:db:1f:fc:90:
                    79:dc:2e:85:a0:76:c9:78:28:61:91:c8:4f:7e:bd:
                    f5:6a:4b:65:f5:93:39:53:98:9d:5d:e0:55:1c:50:
                    27:b9:32:58:6b:5a:28:00:f2:b9:8c:cf:01:82:41:
                    56:d7:c4:ec:d8:cd:5e:c0:dd:d5:9b:f2:12:96:b7:
                    5c:82:01:52:ad:da:3e:2d:55:75:42:d1:cd:3d:9c:
                    62:a4:34:f8:2c:10:aa:69:63:ac:6f:76:45:d0:58:
                    c9:d5:79:01:ac:45:02:b5:33:ad:43:75:64:74:82:
                    da:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:19:E7:8F:C4:BE:F4:EB:0D:2F:98:B5:7F:EA:09:89:E2:DB:72:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/8d0cac73-efc7-398b-936e-1c9237bb4b8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl

            X509v3 Authority Key Identifier:
                keyid:0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.28.0/22
                  162.210.128.0/22
                IPv6:
                  2620:a0:4000::/44
                  2620:114:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:ec:b1:4b:ee:11:af:8b:3e:7d:17:2e:0b:9c:1f:98:84:22:
         8e:8a:7c:d1:92:3c:54:d2:84:21:88:93:71:99:82:1a:4a:3c:
         fc:17:05:36:48:df:2e:b8:9a:24:50:3a:32:d4:32:6e:32:34:
         92:31:35:bc:b0:31:ef:55:d3:52:3d:31:f6:70:70:d1:63:5e:
         73:19:a8:e8:dd:36:de:46:e0:0d:d4:b2:52:7f:da:05:32:42:
         33:6e:fb:13:22:b9:65:e8:4d:8a:cb:4c:5f:a8:f5:0a:4b:09:
         25:ad:18:bc:58:b1:8e:0b:d6:a2:8c:94:87:78:97:45:c2:f9:
         16:65:b2:65:6e:14:4f:f3:d8:9d:12:c2:8e:94:48:9f:4f:d2:
         1b:31:86:d5:cb:95:a5:dc:07:d5:ed:f9:f6:53:3b:29:94:9b:
         39:d5:ad:88:02:8e:67:1b:25:e1:76:33:c4:3b:bc:d7:b4:49:
         24:f9:76:93:89:90:42:52:a5:ea:46:a2:6e:87:d8:f8:95:3f:
         b9:a2:9e:5d:cb:36:ea:17:70:0f:e8:7f:26:f3:60:bc:bc:05:
         fc:ea:cf:9e:95:ad:ed:1a:6f:b9:1e:81:24:bd:09:dd:5d:b8:
         ed:d6:55:20:3a:bb:d2:6d:6f:04:04:36:10:dd:74:36:e5:40:
         0c:33:6c:4b
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWE6af7rWMnRDW/WSxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU4MmRmMTYtYzY1Zi00NTJmLWFjNGEtYTFkM2FmNmY4
YWQxMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk
NjRjM2ZmOTEtZDc2YS00NTE5LTlkZWYtMWYwMDUzNmQwNjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSO4oUjCV5oeqZw6p4PSt5DbPfkn6V71hEuf
p4KVTEtpUC1C1QcrKBhcNSVUPYHGGbYN2zsaDRX4ce6DSDF81qQG5z4KLPMTm9rX
PTOtbIuAfc42jJnj1rnC8xiyi41n6sPqCkToUVvFFANtEUOlJWrESd/JWm++f1Iu
KbI2i1m1zTWZSm26UlBpduQsmZG5qNsf/JB53C6FoHbJeChhkchPfr31aktl9ZM5
U5idXeBVHFAnuTJYa1ooAPK5jM8BgkFW18Ts2M1ewN3Vm/ISlrdcggFSrdo+LVV1
QtHNPZxipDT4LBCqaWOsb3ZF0FjJ1XkBrEUCtTOtQ3VkdILaYQIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFDMZ54/EvvTrDS+YtX/qCYni23LmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNTgy
ZGYxNi1jNjVmLTQ1MmYtYWM0YS1hMWQzYWY2ZjhhZDEvOGQwY2FjNzMtZWZjNy0z
OThiLTkzNmUtMWM5MjM3YmI0YjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjU4MmRmMTYtYzY1Zi00NTJmLWFj
NGEtYTFkM2FmNmY4YWQxL2I1ODJkZjE2LWM2NWYtNDUyZi1hYzRhLWExZDNhZjZm
OGFkMS5jcmwwHwYDVR0jBBgwFoAUDKVnxol+3I0MmsfLs0X47zkTrbEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNTgyZGYxNi1jNjVmLTQ1MmYtYWM0YS1hMWQz
YWY2ZjhhZDEuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQCSnscAwQC
otKAMBgEAgACMBIDBwQmIACgQAADBwQmIAEUoAAwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYeyxS+4Rr4s+
fRcuC5wfmIQijop80ZI8VNKEIYiTcZmCGko8/BcFNkjfLriaJFA6MtQybjI0kjE1
vLAx71XTUj0x9nBw0WNecxmo6N023kbgDdSyUn/aBTJCM277EyK5ZehNistMX6j1
CksJJa0YvFixjgvWooyUh3iXRcL5FmWyZW4UT/PYnRLCjpRIn0/SGzGG1cuVpdwH
1e359lM7KZSbOdWtiAKOZxsl4XYzxDu817RJJPl2k4mQQlKl6kaibofY+JU/uaKe
Xcs26hdwD+h/JvNgvLwF/OrPnpWt7RpvuR6BJL0J3V247dZVIDq70m1vBAQ2EN10
NuVADDNsSw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:01:34 2026 by rpki-client