Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd47801c-83fe-3074-a901-73e47eeabdac.roa
File:                     cd47801c-83fe-3074-a901-73e47eeabdac.roa (raw, json)
Hash identifier:          n6cVWpCQw2xB3rqrkJQFrD2eW6VBQbgph2HIwjZOC7U=
Subject key identifier:   22:BD:3E:4A:04:7F:1F:EC:9D:93:E8:43:B6:50:3B:5E:75:06:FD:FA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5A32B05093F763347259F3A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd47801c-83fe-3074-a901-73e47eeabdac.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        74.44.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:b0:50:93:f7:63:34:72:59:f3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=47430105-b038-405a-ad9e-2044b9a5a306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7a:a2:1d:b9:05:17:57:a9:c7:15:db:93:ec:
                    8d:69:9e:b3:d5:6e:be:56:7c:7b:24:a1:61:ce:09:
                    b2:94:32:22:d9:8c:d4:30:41:23:49:83:ce:b9:ef:
                    ab:48:e8:32:22:73:98:a8:cb:92:06:c1:9c:9d:1a:
                    4b:c0:1a:55:b8:73:2a:af:23:6f:15:39:48:c5:ed:
                    bd:e1:e9:4a:1b:a5:56:ad:ad:c6:87:c2:af:d3:e6:
                    66:c6:03:66:5d:1d:68:73:3a:77:14:d8:a9:b6:66:
                    34:1e:f1:70:98:ba:05:e4:e2:b1:60:91:91:a8:4e:
                    8b:f4:b1:71:be:29:d1:f6:71:b2:62:b3:73:5c:3b:
                    4b:3c:f6:f4:a2:22:b9:c2:ec:b9:ae:4f:de:ca:4d:
                    ca:5f:13:2a:56:62:d9:3d:8e:cf:7c:69:98:67:b1:
                    12:2e:62:41:38:50:29:ce:a8:e3:cc:3c:99:98:40:
                    34:1f:89:9f:24:97:57:d5:f2:ea:e7:d3:84:2b:b3:
                    b2:12:b1:34:88:09:34:1a:0c:fd:fa:12:4a:b3:8d:
                    24:12:fe:a5:4a:db:27:1d:67:b1:3a:fa:c2:d4:e9:
                    a6:e5:69:fe:45:57:54:bd:fe:44:44:3e:60:a7:20:
                    03:62:96:b5:17:0d:d7:c6:c5:b3:05:db:53:86:9b:
                    6d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BD:3E:4A:04:7F:1F:EC:9D:93:E8:43:B6:50:3B:5E:75:06:FD:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd47801c-83fe-3074-a901-73e47eeabdac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.44.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:43:65:46:05:9b:df:5c:14:f1:da:db:8e:f4:33:4c:61:fc:
         a0:b5:81:e7:6d:ab:a2:e0:b4:d6:80:eb:05:21:db:c4:be:d7:
         5c:3f:8d:d0:4b:be:67:b8:93:70:7c:46:3d:2b:85:5d:0b:5b:
         1e:9a:72:48:4e:f7:2b:bf:c0:b5:52:c5:9c:59:75:f9:dd:b4:
         b4:12:85:bd:08:ad:15:07:58:ad:25:fe:fc:74:e4:19:15:34:
         73:95:7a:86:c8:87:3b:89:9e:3f:f1:c6:39:02:fc:97:b5:9c:
         4d:a5:f7:f0:2b:1b:27:b3:76:d9:e2:81:38:4b:b4:eb:3f:01:
         ad:1a:82:6b:f8:d9:bf:aa:24:df:e8:42:b8:6a:8f:15:3e:9b:
         2d:a9:4e:5e:9f:2f:96:79:06:71:26:ec:9d:32:f6:ae:d0:cb:
         77:d8:73:66:2e:d3:f1:8c:9b:28:95:20:2c:0a:0b:34:ee:42:
         12:9c:eb:29:e0:01:2e:13:40:84:f1:70:de:04:ab:95:00:28:
         0e:7f:71:12:c9:23:26:7f:75:fa:96:5d:de:0e:ee:46:c5:30:
         1a:39:7b:e6:b5:12:6d:fe:58:bd:58:ea:38:48:9f:2b:ca:f0:
         89:90:0d:83:d5:97:4e:24:a4:59:58:1c:4a:e8:ac:d5:e8:dc:
         44:ce:c6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 21:53:14 2026 by rpki-client