Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f0e6b907-e3c2-3aa8-b27d-77d55e3e7cb0.roa
File:                     f0e6b907-e3c2-3aa8-b27d-77d55e3e7cb0.roa (raw, json)
Hash identifier:          5dfq92QVACvegieVLj59tt6oRB/oDeLj869TCpU2FpY=
Subject key identifier:   4B:6C:86:7A:1C:6A:44:18:B5:B9:3C:F7:8F:F9:04:89:CC:51:AE:44
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584ED001D639E0D0E945B1ADDF80
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f0e6b907-e3c2-3aa8-b27d-77d55e3e7cb0.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     21949
IP address blocks:        74.171.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:d6:39:e0:d0:e9:45:b1:ad:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=1a6b5f25-aba5-4f27-847c-6ca47e877ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:da:2c:24:e3:d3:31:fc:0d:5b:c4:f6:ca:85:
                    3e:38:80:32:42:d8:18:5c:a4:b7:d2:da:9c:59:c7:
                    02:3d:9c:5b:05:55:4f:fb:1c:1d:43:bf:10:58:ad:
                    8d:d9:e9:bb:4a:4d:34:11:25:24:9d:92:14:35:80:
                    73:dd:49:00:f3:1e:06:b5:78:81:7c:ee:ef:7a:a8:
                    5a:68:57:be:8c:79:b4:0f:50:ab:60:65:bd:f2:d1:
                    34:b4:c6:6c:0d:d6:58:d9:b5:2d:17:3e:92:72:a5:
                    8e:f7:a7:86:ef:3b:5d:fa:36:d8:e7:31:9d:70:6f:
                    03:ee:9b:34:3c:51:77:f0:41:de:78:09:14:88:16:
                    78:89:43:5c:bd:b4:bf:06:c3:26:89:0e:34:ec:b3:
                    a6:76:70:81:f0:b0:22:87:15:98:50:63:d8:9a:d2:
                    2f:12:71:54:60:52:9b:e0:d3:de:25:96:16:30:ed:
                    35:a5:40:3b:c8:a0:d0:6b:6b:3f:d4:b4:6c:25:84:
                    99:cd:b5:2e:68:b6:32:b8:dd:b3:88:02:bb:bb:d9:
                    4e:74:f7:89:d0:80:77:0e:2c:40:7b:12:d2:85:9b:
                    a3:30:c9:e6:44:e8:1d:19:2a:cb:29:1b:05:e3:26:
                    60:5a:91:1b:9a:59:d6:31:f4:a5:9f:c9:7e:f4:fa:
                    dd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6C:86:7A:1C:6A:44:18:B5:B9:3C:F7:8F:F9:04:89:CC:51:AE:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f0e6b907-e3c2-3aa8-b27d-77d55e3e7cb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.171.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:4d:fd:21:6b:43:6a:b2:7c:d0:bf:12:6a:b7:28:95:93:fa:
         d0:eb:e2:b3:7b:37:64:0f:e7:0c:32:b5:a9:f0:99:1a:6e:bc:
         26:88:17:fa:d2:c5:f1:2c:bc:87:da:5a:c2:b9:03:9c:87:42:
         03:2f:fb:dc:0c:2e:a8:c7:fe:f3:20:57:95:db:e3:f1:be:2d:
         a7:c4:ea:5e:08:a3:ef:03:6a:47:ca:85:de:38:ae:60:29:52:
         c5:df:5b:dd:68:83:ef:a3:a0:9e:63:26:a8:f2:8d:ce:84:e7:
         91:a3:b7:32:9a:9c:bf:81:67:62:d6:0e:62:39:1f:d6:37:f6:
         b5:ea:68:b1:b3:a8:e7:63:b8:6c:1a:8f:e6:e7:88:26:8d:1f:
         ca:a3:66:9c:b6:b9:0c:68:af:02:fb:5a:18:fc:e0:81:77:3c:
         1b:ae:16:7f:12:52:d0:bf:88:4d:d6:d3:ba:c5:cd:5f:cb:8c:
         65:de:e3:38:ce:da:1e:80:d8:1f:86:08:21:0d:93:ab:15:43:
         4e:0b:ea:3c:8d:be:0e:00:2f:20:86:a7:30:2f:b7:c6:52:5a:
         5b:21:68:5c:48:3f:07:85:80:5d:bb:78:8b:61:80:a7:f8:36:
         49:4b:4f:e4:c2:e4:82:3c:38:5f:b0:66:6d:5f:da:30:19:a9:
         9e:2f:6b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:35:04 2026 by rpki-client