Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/b2961625-afdd-3c57-ae0c-90c9e114d526.roa
File:                     b2961625-afdd-3c57-ae0c-90c9e114d526.roa (raw, json)
Hash identifier:          Ig/OFN8i7tY6RC0xAiW/aPCZ6++36m4H53sqLpRbEQI=
Subject key identifier:   95:4D:47:65:E9:5E:9E:C3:09:FF:CD:A2:FD:B1:7F:8E:29:CD:EB:50
Certificate issuer:       /CN=3bb6068b-be48-4cc9-ad75-338daae24880
Certificate serial:       010D0C9F4328584E2D9F207D35CA542B47EA9300
Authority key identifier: 6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/b2961625-afdd-3c57-ae0c-90c9e114d526.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        74.117.216.0/21 maxlen: 21
                          74.117.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:20:7d:35:ca:54:2b:47:ea:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bb6068b-be48-4cc9-ad75-338daae24880
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=ebfd9c7e-ea54-4970-886f-970dc3ff66ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:2a:6b:e0:16:9d:e5:43:64:41:a5:71:4a:
                    0d:83:60:f2:90:fa:46:07:4c:e7:d7:fd:9b:49:eb:
                    93:e9:e9:90:e0:a9:d0:31:b4:8d:8a:44:e9:3b:e1:
                    15:68:41:b7:d2:c8:95:18:cd:c1:c4:14:29:3d:5e:
                    34:96:57:76:f4:26:59:1a:68:c1:e6:a0:2c:00:6b:
                    3d:06:34:12:41:81:a5:68:db:59:3f:43:53:14:68:
                    2e:d7:22:67:41:ae:8d:fd:cc:97:45:3d:17:d0:0f:
                    75:af:a6:2d:bc:7f:4e:d1:61:2e:a8:da:93:6e:37:
                    48:d2:51:70:fa:e6:90:ca:20:02:f9:4e:e4:0d:01:
                    2d:7b:fa:ba:29:df:fd:e3:f9:70:7d:fa:6a:8e:7a:
                    6e:f3:bf:64:dd:b8:4c:83:2b:8d:b5:1e:74:10:dd:
                    b5:d6:99:59:3e:53:61:39:45:81:5c:a6:9d:f0:9d:
                    fa:32:16:d5:9a:56:00:45:5b:2f:10:49:15:e2:11:
                    a8:72:5f:1b:6a:dc:7d:f2:95:db:e3:0f:85:7a:3f:
                    69:f9:88:12:ce:29:0e:46:47:f1:d0:57:25:ab:74:
                    38:07:a1:90:f9:ca:5e:8c:3b:ed:ae:61:df:e5:69:
                    3f:c2:41:ca:31:30:05:41:72:5b:ef:d3:f8:dd:97:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4D:47:65:E9:5E:9E:C3:09:FF:CD:A2:FD:B1:7F:8E:29:CD:EB:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/b2961625-afdd-3c57-ae0c-90c9e114d526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl

            X509v3 Authority Key Identifier:
                keyid:6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ed:28:47:1b:be:54:71:b2:7c:a9:d3:21:d6:06:bb:e7:28:
         1e:7b:61:ad:02:1a:ad:da:61:1a:c9:32:4c:f2:7d:9c:d0:00:
         59:9b:5d:3a:b3:94:81:6c:62:2c:45:13:ce:da:72:9a:c8:7e:
         36:26:23:1a:b2:80:a2:60:5c:22:da:26:29:cb:5d:cf:1e:4e:
         5b:da:0a:99:aa:20:2c:1e:59:f3:9c:ca:98:69:7d:0c:fe:06:
         e1:9a:41:c7:dc:fe:14:83:6a:5e:68:30:09:3f:94:9c:92:55:
         5a:0d:f6:68:8c:c5:b4:ae:4c:72:d6:12:51:1c:75:0a:ba:9a:
         dd:5c:8b:f6:3a:d0:36:2d:6e:bb:3e:15:c7:80:73:48:2f:15:
         51:99:f3:9b:d9:db:b3:48:3f:cc:01:80:a9:71:c4:93:11:ab:
         d8:72:fd:12:6c:23:5e:71:03:ee:53:73:c0:8b:b8:31:b9:5e:
         ec:da:d4:97:53:0f:e4:15:4b:49:ec:dd:ec:e4:4f:62:02:9a:
         3f:cc:1b:84:90:4a:d4:ba:9d:4e:ba:51:6b:f2:ce:93:8a:84:
         70:c1:4c:aa:56:b3:fa:50:80:41:45:e2:62:69:b4:c6:1b:4d:
         9a:86:06:d7:a6:61:d6:ee:99:97:ce:82:a4:c2:72:2f:22:79:
         8f:df:ca:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:14 2026 by rpki-client