Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946/e5dbd32e-a2ec-335c-9051-c367f05f674e.roa
File:                     e5dbd32e-a2ec-335c-9051-c367f05f674e.roa (raw, json)
Hash identifier:          +3vp2XDWMaaW78iuDN+Z3Pox9sVvJW4xHMptOcenqd0=
Subject key identifier:   FE:63:FE:0F:1B:55:13:F8:58:F2:0D:22:37:44:97:D8:2F:18:11:2D
Certificate issuer:       /CN=a4781e6b-d849-4429-a725-c3a994ed0946
Certificate serial:       010D0C9F4328584B84E782760029AC6502C53A80
Authority key identifier: 73:F8:D7:38:7C:9E:57:F8:94:34:BE:4C:63:86:73:1E:30:AD:B1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946/e5dbd32e-a2ec-335c-9051-c367f05f674e.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     40335
IP address blocks:        208.74.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946/a4781e6b-d849-4429-a725-c3a994ed0946.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946/a4781e6b-d849-4429-a725-c3a994ed0946.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:82:76:00:29:ac:65:02:c5:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4781e6b-d849-4429-a725-c3a994ed0946
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=9cb0477b-8a97-498e-afc8-e7b56a8dc994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2e:0a:e1:d7:1c:b3:ae:9d:70:58:95:b9:93:
                    23:a6:ad:f3:86:9d:20:7a:27:47:cf:f5:47:dd:c7:
                    10:28:96:06:36:b5:a9:37:7f:82:e5:4f:f2:67:32:
                    b8:78:18:30:a6:88:88:ca:ab:98:ab:a6:6f:fa:ab:
                    c1:fe:8c:2f:e5:6e:33:22:db:ed:96:e6:90:6e:d0:
                    1a:10:6f:c8:a6:08:d2:83:db:22:c0:f0:5c:32:8d:
                    99:91:24:61:47:dc:3f:48:b8:55:49:9f:f4:13:1f:
                    98:f9:59:b3:7c:88:84:04:4b:b1:b3:dc:9e:0b:ca:
                    38:97:6a:b0:fb:ef:3d:c6:ca:71:7d:75:9c:df:49:
                    26:a7:ad:55:f6:66:5b:7d:3e:77:ed:57:0f:06:0e:
                    dd:9b:5e:f7:73:55:f7:81:10:52:bc:aa:e3:1f:5e:
                    92:a4:4c:26:50:8e:7a:27:f8:64:8f:b7:17:32:0b:
                    d4:29:56:1a:6e:9e:9d:76:38:15:5a:a5:cd:e2:37:
                    70:cd:de:02:51:6f:ed:ea:ea:dd:c2:0a:09:92:45:
                    b5:86:31:1a:c4:11:c4:7c:5b:51:b9:fb:fe:8f:c7:
                    bb:5a:c4:08:85:85:5f:63:79:6b:8b:bd:ff:94:f3:
                    99:74:01:3a:65:51:fa:6e:73:43:8e:d9:93:2d:f0:
                    ed:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:63:FE:0F:1B:55:13:F8:58:F2:0D:22:37:44:97:D8:2F:18:11:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946/e5dbd32e-a2ec-335c-9051-c367f05f674e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946/a4781e6b-d849-4429-a725-c3a994ed0946.crl

            X509v3 Authority Key Identifier:
                keyid:73:F8:D7:38:7C:9E:57:F8:94:34:BE:4C:63:86:73:1E:30:AD:B1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:cd:cf:56:52:3a:1a:14:5f:74:d4:c1:70:82:c7:e4:9c:a5:
         58:42:c2:86:ff:e3:7a:89:98:68:b6:df:6b:c8:cd:50:25:1b:
         10:d5:9b:92:c8:54:1a:33:fc:b9:bb:96:f2:1a:24:6d:d2:18:
         a7:b1:45:3a:8d:38:e0:79:68:9e:ca:6b:a3:a8:54:e4:c1:ab:
         9d:77:25:aa:9b:5f:2d:08:71:e7:b3:b4:f6:04:af:8d:4c:27:
         4d:cc:89:7f:d7:46:65:a3:a5:7a:4d:82:a2:e4:82:8c:45:d0:
         4b:f3:0e:14:03:a2:91:75:37:e8:78:4b:ba:3f:c9:7c:87:cb:
         54:4e:0b:37:d5:30:75:66:45:8f:6e:e6:04:e5:1a:01:58:e6:
         e5:10:17:b0:76:44:32:a1:a8:1a:4b:08:2e:79:51:cf:0e:c7:
         a9:58:f9:38:f4:3c:48:94:ee:06:b7:8f:ac:11:22:4b:28:3a:
         98:24:61:1f:36:40:ac:85:28:c9:f7:ed:95:5c:52:dc:07:4a:
         aa:69:06:aa:dd:8c:3a:cb:97:b7:07:5b:0f:96:fe:bc:26:a6:
         5d:e8:e9:e4:a9:c1:92:9b:33:b8:6b:35:36:57:75:30:ff:18:
         63:53:a0:44:4c:7c:93:08:9b:21:d5:8a:36:f4:ca:df:5b:3d:
         4c:54:86:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:46:59 2025 by rpki-client