Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/c447fb76-52ba-33be-8ab4-3fd8f2d6da65.roa
File:                     c447fb76-52ba-33be-8ab4-3fd8f2d6da65.roa (raw, json)
Hash identifier:          DpIFdiD+Ka1U8WFKnRzFlp6GO3auPjOylcwyTIBMgok=
Subject key identifier:   B3:C4:6D:DF:76:BA:CF:9F:45:9F:23:97:72:28:62:9E:88:5B:AB:4A
Certificate issuer:       /CN=97e60b77-17e3-4250-9bc8-b5e7664a320a
Certificate serial:       010D0C9F4328584D98BAAC6CAC0E37F4B9F24600
Authority key identifier: B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/c447fb76-52ba-33be-8ab4-3fd8f2d6da65.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     54552
IP address blocks:        74.123.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:ac:6c:ac:0e:37:f4:b9:f2:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97e60b77-17e3-4250-9bc8-b5e7664a320a
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=88020920-c8e3-448b-aa35-a6fb15e61f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:75:a3:12:2b:8c:7d:5e:7d:4c:29:d4:c9:e3:
                    d2:94:fe:59:33:07:eb:6a:8c:73:d5:87:3e:d9:4b:
                    aa:2e:74:91:b3:ec:96:8c:aa:a4:ca:49:40:e5:dc:
                    db:28:0a:57:04:cd:db:e7:e8:44:41:80:fe:17:78:
                    9b:2d:33:71:9f:64:a5:0f:ca:d4:64:15:37:ee:bb:
                    a5:89:58:18:ee:3f:0c:14:d5:44:34:3a:52:90:b0:
                    7c:7a:3f:5d:0d:ac:b7:47:90:36:cc:4e:33:33:3a:
                    07:09:1c:e1:67:18:a8:50:f3:4e:a4:a9:de:cf:cd:
                    6d:0c:93:c5:8c:e8:6a:ee:41:5a:65:5e:61:e8:9c:
                    8a:dd:03:28:a1:89:5d:7e:e5:c8:79:80:72:31:70:
                    62:a1:6b:96:ac:79:7b:d6:59:04:d6:20:91:3d:64:
                    0e:04:e5:a1:01:07:cc:ec:29:5c:e2:91:33:32:94:
                    28:87:cf:8d:5e:68:99:de:88:c8:82:2b:4c:b0:db:
                    18:5c:de:0f:6d:8e:56:7f:94:6c:78:aa:86:f8:4e:
                    2d:90:b4:38:84:e1:6d:79:18:3e:28:d5:aa:32:86:
                    eb:89:89:cf:c8:a5:44:0f:1c:e6:18:b3:e2:e4:5b:
                    32:c8:28:6d:2c:3b:ba:7d:af:d7:1b:fe:67:04:1c:
                    9d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C4:6D:DF:76:BA:CF:9F:45:9F:23:97:72:28:62:9E:88:5B:AB:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/c447fb76-52ba-33be-8ab4-3fd8f2d6da65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl

            X509v3 Authority Key Identifier:
                keyid:B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:67:10:7b:00:36:c5:97:9b:1a:25:e6:fa:fb:53:c9:32:d9:
         1a:1e:ee:e9:eb:f2:84:8f:ce:1b:66:8e:cd:06:0f:02:de:c0:
         fc:c0:2d:b9:8c:c2:a6:21:f9:78:d6:23:55:0f:63:67:7d:3e:
         25:23:9d:2c:aa:ab:53:10:24:fb:36:77:f6:28:e3:7a:9e:4c:
         3c:24:12:04:60:c0:85:d3:de:fd:d1:ec:af:43:b3:6f:d9:ea:
         9c:48:df:e9:72:71:67:06:33:1e:21:76:08:d0:83:71:aa:cd:
         39:94:03:49:45:47:33:23:5f:bc:33:b1:1f:a9:3e:9a:64:d0:
         33:9a:97:9d:aa:d2:8d:d0:27:08:fb:12:c1:63:af:98:32:c9:
         4a:88:19:1f:41:a5:84:aa:e8:8d:f4:f1:77:ae:40:2b:62:4c:
         f6:0d:4e:8b:c3:ba:53:aa:43:91:3d:07:37:6f:e7:e3:c9:f8:
         11:60:6b:66:72:2d:12:f8:21:59:69:d8:15:c8:f9:0d:66:a8:
         b9:28:83:b5:b6:4c:86:6e:b5:e9:57:24:ce:af:2a:c9:6f:7e:
         73:92:46:73:ef:63:04:7e:71:b2:78:26:a6:83:41:c0:f6:43:
         58:6a:df:b6:3d:68:6b:16:29:12:ca:60:93:2d:07:1f:7c:c7:
         f2:f0:fd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:12:31 2026 by rpki-client