Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/7aae1d91-a257-3f1e-8243-998b9bc7594c.roa
File:                     7aae1d91-a257-3f1e-8243-998b9bc7594c.roa (raw, json)
Hash identifier:          ekjGgKBT6qfK23zrCq4asr3fYtgfn7QrFFSB3/jhd5Y=
Subject key identifier:   A7:A7:94:A2:65:82:B6:24:C1:E0:25:FD:35:5F:62:99:04:8B:2F:CB
Certificate issuer:       /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial:       010D0C9F4328584F42C00A65E27BF84E4EBFBC00
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/7aae1d91-a257-3f1e-8243-998b9bc7594c.roa
Signing time:             Tue 22 Sep 2026 15:25:44 +0000
ROA not before:           Tue 22 Sep 2026 15:25:44 +0000
ROA not after:            Mon 21 Dec 2026 16:25:44 +0000
asID:                     834
IP address blocks:        74.118.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:c0:0a:65:e2:7b:f8:4e:4e:bf:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
        Validity
            Not Before: Sep 22 15:25:44 2026 GMT
            Not After : Dec 21 16:25:44 2026 GMT
        Subject: CN=a6722ed9-40e6-480d-b8a4-c0dac9b490cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2c:cb:2f:e6:aa:8f:7c:11:45:4a:c3:9c:41:
                    6c:6c:62:0a:77:c9:dc:4b:ac:ee:5e:3d:5e:01:a9:
                    2d:26:65:e3:7f:08:df:ac:da:64:80:f6:3d:14:1e:
                    12:88:2c:1a:16:1f:df:68:f8:08:6e:15:de:db:28:
                    f3:60:9d:fc:d5:fe:73:cc:d2:ea:48:1f:5c:43:5f:
                    18:32:d4:1c:9d:df:df:a1:40:6b:03:ae:1d:73:10:
                    76:fd:5b:e8:c6:cc:d1:c9:36:6d:ab:2a:89:a2:7e:
                    8c:8c:f6:8d:d0:7f:84:4d:c6:93:b2:6f:8d:3b:dd:
                    2c:cb:36:9e:c7:5c:3c:6a:57:67:e4:77:57:d3:35:
                    06:b3:12:61:dc:87:08:31:94:57:31:e6:0e:19:13:
                    12:e8:de:7c:d6:8b:b8:58:d4:fe:b3:88:03:c4:84:
                    72:99:71:5f:1d:95:80:3e:86:54:54:cf:13:d8:9c:
                    32:88:7a:c8:66:5c:c6:f3:71:19:36:6d:db:b2:26:
                    34:8d:fe:bd:ac:07:13:b2:74:40:f6:b8:0b:65:35:
                    92:6f:df:07:73:37:48:7c:21:aa:c9:9c:97:bd:e1:
                    58:10:d7:7e:a5:30:12:c5:cf:4f:b6:f5:74:84:aa:
                    ee:e3:05:13:64:e9:b1:3c:ba:c3:72:eb:ff:22:c0:
                    14:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A7:94:A2:65:82:B6:24:C1:E0:25:FD:35:5F:62:99:04:8B:2F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/7aae1d91-a257-3f1e-8243-998b9bc7594c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl

            X509v3 Authority Key Identifier:
                keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:aa:ee:7a:c6:1d:7a:a0:f5:71:74:a0:9f:5e:15:eb:b5:24:
         22:05:75:e3:06:92:bb:8e:79:33:a5:cb:f2:8b:f9:f0:0b:7a:
         78:0f:2c:5e:be:3d:85:86:be:f1:8f:26:aa:37:b8:42:e5:93:
         10:23:e7:a9:ae:96:f7:c6:aa:84:b1:d2:e3:b4:a4:92:b7:e0:
         16:c8:4c:e2:fa:9c:df:f6:c5:8d:12:42:73:1a:b8:fc:1d:55:
         8b:13:eb:d7:c3:c6:61:10:0f:60:d9:06:65:7d:ea:29:49:46:
         dd:f7:9a:f7:7a:0b:97:7c:34:bb:ff:d6:09:2a:d1:c2:15:a1:
         33:ac:3c:44:61:67:e1:48:89:22:06:9c:3d:29:2c:94:a2:62:
         c3:d1:ba:29:9f:24:d9:df:01:c7:3d:1c:1e:b0:cf:88:dd:8c:
         eb:da:30:21:a8:0c:0e:c7:ed:80:0b:e9:4c:6f:3a:7f:70:99:
         3b:11:30:f0:bb:a4:c7:0a:24:d7:e0:0d:a5:69:59:66:ac:29:
         ab:ea:50:e8:a8:b4:fe:34:1e:ca:b8:59:37:76:44:c4:57:c9:
         74:a1:3b:08:89:8c:5b:fa:4b:17:e3:95:b3:95:03:3a:74:7e:
         2a:ec:94:52:f7:d3:29:32:e6:41:13:89:cc:cf:74:47:b1:b3:
         6c:30:f3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:42:08 2026 by rpki-client