Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/7e5bea68-03f1-363b-b17a-aefebdc29f3e.roa
File:                     7e5bea68-03f1-363b-b17a-aefebdc29f3e.roa (raw, json)
Hash identifier:          K/NvD08kXtrdlmBpreR2mS05qo47q2DUmqiKUj4WcXU=
Subject key identifier:   9E:51:C3:5D:D6:B3:13:A7:D4:AE:C8:C4:79:61:E0:D0:8B:48:F8:CA
Certificate issuer:       /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial:       010D0C9F4328584EA78897B99182B2B346D05460
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/7e5bea68-03f1-363b-b17a-aefebdc29f3e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398420
IP address blocks:        74.126.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:97:b9:91:82:b2:b3:46:d0:54:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3298a5b0-d5a0-4a23-a873-ef7325f78569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:97:02:5d:36:c9:88:01:1c:11:56:42:f1:23:
                    75:30:42:2c:3a:ba:95:ec:53:b3:7f:32:73:d2:0d:
                    ef:05:de:98:60:9b:a6:64:36:c6:f5:37:1e:78:c8:
                    92:25:b6:9b:78:61:68:5a:91:6f:be:a5:a2:16:65:
                    70:69:15:fd:05:21:7d:b2:f8:4b:04:ca:5e:47:eb:
                    18:78:09:dd:15:22:b0:72:7b:b7:49:09:7a:fe:18:
                    3c:13:fa:1d:e4:1a:3c:15:d0:a1:4b:9f:3f:56:ee:
                    d3:1c:ae:70:cd:9d:d0:d3:2c:19:03:f0:84:0d:19:
                    d6:0c:0c:b6:51:87:77:02:22:b5:d7:4a:d0:36:40:
                    06:3e:f8:26:01:e9:de:16:10:a6:f3:73:7f:8c:26:
                    7f:98:a2:67:34:b6:b2:03:c3:db:8d:1f:c3:7f:6b:
                    50:55:9c:79:72:6c:ad:fc:73:55:02:93:65:e3:77:
                    c9:1b:69:9b:c1:3b:29:6c:06:43:b6:bf:b5:7b:32:
                    f0:f6:c6:57:90:9e:2c:96:9f:ef:eb:8e:6d:61:7f:
                    09:36:69:6d:de:11:08:8a:84:91:c3:cf:27:30:fd:
                    c4:fc:94:dd:08:a6:47:fb:5d:d4:aa:19:42:b1:e8:
                    c1:52:12:19:ca:fd:48:3e:cf:66:17:65:10:0a:53:
                    02:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:51:C3:5D:D6:B3:13:A7:D4:AE:C8:C4:79:61:E0:D0:8B:48:F8:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/7e5bea68-03f1-363b-b17a-aefebdc29f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl

            X509v3 Authority Key Identifier:
                keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:70:6d:f9:21:52:7d:3d:3b:ac:d7:e6:57:e4:ba:8b:c8:db:
         e4:12:f3:cc:b3:44:f1:bb:c6:10:2b:02:62:f4:d5:69:a2:bd:
         c1:3b:08:7c:ed:67:29:f6:87:60:80:c3:3e:0b:04:50:c1:8a:
         a6:67:aa:9f:86:cb:3f:6b:46:cd:e5:cb:c2:11:a7:25:21:08:
         20:80:74:a8:66:23:3c:0e:6b:40:ec:4d:9a:6f:38:46:2c:9a:
         f6:ab:65:2c:7e:3e:fc:be:f6:eb:d4:a3:00:e6:bd:c7:33:39:
         f8:12:2d:92:75:c7:b7:2d:a5:b8:7d:52:5a:51:ec:fe:a7:e4:
         a6:1a:b7:81:c2:a9:95:6a:62:d0:e6:a0:b9:4a:e4:dd:cf:d7:
         76:b7:53:b0:cf:80:b3:79:73:6a:d1:08:67:5d:1d:2e:20:c0:
         58:0c:d6:db:ec:1c:28:4e:6e:18:43:cf:36:ef:a2:c3:13:a3:
         7d:a7:9a:34:37:d4:ab:93:ac:9c:44:9b:29:d7:03:6f:df:76:
         fe:9b:7a:3d:2e:34:c5:a9:9f:67:36:6d:1a:b8:70:71:1b:f5:
         f4:17:ac:15:1d:7c:74:43:17:72:81:e3:77:b3:ea:6b:95:25:
         3f:eb:12:31:f0:b6:0e:3e:09:87:81:eb:ac:5a:65:a0:f0:d5:
         0e:2a:05:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 15:53:21 2026 by rpki-client