Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/41f12ae0-732a-33e8-abb3-ae17f49fb859.roa
File:                     41f12ae0-732a-33e8-abb3-ae17f49fb859.roa (raw, json)
Hash identifier:          XxzS/CKfbsy9Et8g0mDZ93Z6T7YboRWn6hFycOx7+qY=
Subject key identifier:   0F:E4:C7:06:57:4A:DE:DF:EB:D2:85:16:76:55:3C:59:69:B9:CC:CA
Certificate issuer:       /CN=44b4119f-34fc-4fce-8dbf-b69ae33a493a
Certificate serial:       010D0C9F4328584DA28016CA24B4180A1E204380
Authority key identifier: 92:1C:D0:0D:FE:07:3C:69:E7:56:03:52:BD:6C:5D:11:29:A5:13:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/41f12ae0-732a-33e8-abb3-ae17f49fb859.roa
Signing time:             Sun 26 Apr 2026 13:00:30 +0000
ROA not before:           Sun 26 Apr 2026 13:00:30 +0000
ROA not after:            Sat 25 Jul 2026 13:00:30 +0000
asID:                     18659
IP address blocks:        74.120.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a2:80:16:ca:24:b4:18:0a:1e:20:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b4119f-34fc-4fce-8dbf-b69ae33a493a
        Validity
            Not Before: Apr 26 13:00:30 2026 GMT
            Not After : Jul 25 13:00:30 2026 GMT
        Subject: CN=d9e470f4-cd14-44a4-9411-56dc8ead5007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d8:d3:02:f1:83:6f:91:11:d8:ca:28:49:99:
                    b6:75:74:e4:da:eb:1c:01:30:57:7b:9e:4c:63:b2:
                    c1:d6:43:69:a9:2d:be:b8:d8:a3:81:2c:c2:a5:7c:
                    2a:d8:6b:2c:e6:c5:d8:fa:4e:80:91:8b:02:e4:bb:
                    ac:33:53:fa:a9:32:b7:32:93:9e:ad:ae:1f:c2:bc:
                    b9:e3:da:84:5f:32:6d:e6:04:c2:ff:54:a0:14:66:
                    e0:07:8b:a9:39:15:3e:c1:c0:46:4a:b5:89:38:59:
                    39:25:1c:6a:bf:d3:90:85:2e:65:fd:0d:c8:75:e0:
                    48:c3:09:b4:e2:be:53:90:df:2e:a2:56:03:af:d5:
                    63:1f:76:a9:0a:9a:29:17:16:a6:8a:ac:58:09:15:
                    77:5f:4c:55:0a:03:c4:61:7e:99:d2:af:37:ea:5a:
                    fe:56:7d:80:49:6e:9a:49:83:5d:84:da:fc:64:90:
                    9d:16:3c:ec:8c:d6:a1:e3:84:19:e1:69:49:cb:cf:
                    39:4d:be:b4:c6:c6:89:a1:c1:da:ee:1c:b3:1b:1b:
                    33:b2:0d:a4:16:58:98:a6:0a:0a:bc:96:5a:1e:41:
                    5b:6d:ac:83:2c:ce:44:b8:dd:b6:a1:4f:09:0b:41:
                    a2:e5:22:7f:65:e7:92:1d:0a:5b:ed:55:ab:00:7a:
                    46:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E4:C7:06:57:4A:DE:DF:EB:D2:85:16:76:55:3C:59:69:B9:CC:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/41f12ae0-732a-33e8-abb3-ae17f49fb859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.crl

            X509v3 Authority Key Identifier:
                keyid:92:1C:D0:0D:FE:07:3C:69:E7:56:03:52:BD:6C:5D:11:29:A5:13:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:b3:7a:7b:bf:66:1d:58:97:3d:5f:71:c7:31:ab:42:1b:e2:
         9c:30:68:07:35:cc:14:01:d4:ed:45:1b:06:13:e1:11:e6:9c:
         e7:11:86:dd:75:4a:23:54:d7:2b:42:ab:51:80:09:3f:d3:7b:
         57:e0:ec:e0:47:c8:a5:97:14:64:19:26:2e:bf:c3:f6:20:5d:
         db:61:16:3d:52:4a:44:18:71:3c:d4:86:fc:cd:34:a4:ca:5e:
         2e:bf:88:d7:1f:9d:f6:a8:f6:3e:d3:4c:86:1b:fd:00:5c:e1:
         4f:ff:fc:55:fb:43:f9:62:37:2e:6f:19:bf:14:75:fe:fb:04:
         7a:e3:e2:4e:51:07:d7:c9:ab:e6:60:69:ee:2f:9b:ba:f5:dc:
         29:06:f1:59:8c:2c:14:53:7d:47:67:18:a9:92:81:62:8d:63:
         e4:48:95:84:f4:96:94:96:c8:1d:3f:d0:fd:18:78:de:f2:34:
         9a:52:7f:f8:1d:ce:82:25:ff:ba:5b:f9:6a:d8:57:30:f7:af:
         59:5e:5e:71:74:82:d4:c5:a7:a3:73:af:2a:c7:9a:7a:ce:4c:
         06:f6:2a:74:ea:33:96:78:f4:a8:a9:94:5f:79:de:cd:6f:9c:
         4c:ed:74:4f:57:43:84:8a:ac:68:e0:31:80:27:d4:a2:90:96:
         13:17:96:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:27 2026 by rpki-client