Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9e37601a-254c-3f5b-99ce-b80465826ec9.roa
File:                     9e37601a-254c-3f5b-99ce-b80465826ec9.roa (raw, json)
Hash identifier:          5GiA3KnzrbDDqgG5BCbHS857Zr3ZvyZaw1DOcZsxnYg=
Subject key identifier:   0C:AC:89:CD:B4:33:8B:22:32:F5:D1:0D:25:F3:B0:69:1C:FA:4E:25
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EA78759C9791EA1CF575A6700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9e37601a-254c-3f5b-99ce-b80465826ec9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     27338
IP address blocks:        74.10.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:59:c9:79:1e:a1:cf:57:5a:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=94eace1a-e02b-41ee-8ef9-d9bb459c0a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ee:24:49:4b:5b:4a:0b:3d:5d:30:27:75:ba:
                    1f:f5:46:c0:2f:26:d1:61:ff:a0:33:18:0a:94:38:
                    0c:37:34:8e:07:f9:d4:d4:ab:8c:a7:01:5d:03:60:
                    64:56:9c:e4:d1:92:91:66:76:5a:b1:78:8f:78:55:
                    26:ff:1a:c4:45:32:7c:51:16:3b:42:f2:c5:25:8d:
                    27:1f:ac:19:e2:2e:bd:cf:8a:ea:b9:13:8b:9e:88:
                    40:1b:39:85:5f:19:8e:8b:48:82:0d:f1:fc:5c:ce:
                    ba:a7:bd:76:b2:4b:42:8f:af:d6:cb:72:64:1b:2f:
                    7b:2c:7e:46:91:78:9d:17:12:d1:e0:8d:42:a7:b2:
                    18:68:2f:f4:1f:56:6f:4c:fc:40:4c:ef:73:fc:02:
                    e8:aa:4c:8c:e9:ff:a9:ae:8c:d7:ed:a2:23:34:85:
                    e4:49:ba:e0:fd:98:fc:28:fe:2d:22:b3:7f:aa:1c:
                    04:fb:c1:00:78:18:53:5b:cf:aa:e7:e3:e4:55:86:
                    57:a0:94:23:43:23:86:b1:4a:0c:d4:41:3f:b2:a0:
                    c9:4c:48:1d:bf:fe:4c:f7:ea:6c:70:19:7c:03:d4:
                    35:43:e0:e0:ad:94:2b:4b:76:6c:30:a4:fc:5f:2f:
                    e8:1b:f0:3f:bd:86:ff:bb:1d:fa:8f:70:26:7d:d1:
                    bb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AC:89:CD:B4:33:8B:22:32:F5:D1:0D:25:F3:B0:69:1C:FA:4E:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9e37601a-254c-3f5b-99ce-b80465826ec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.10.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:bf:9c:f1:9c:90:f4:1e:38:87:41:f7:4d:19:c0:f5:e6:78:
         2f:7d:ce:4d:15:b4:e7:33:0d:19:e3:c9:9b:74:ed:3d:23:77:
         6d:91:67:86:d1:0b:c3:a4:51:7b:fe:43:38:7a:22:d9:2b:ad:
         cd:44:24:21:62:f3:08:2e:68:c4:ed:d9:69:37:7a:10:40:77:
         88:42:97:35:c2:60:f0:64:3e:8f:ad:a5:42:4e:68:a0:01:86:
         4b:e1:56:37:80:51:bd:1f:0b:61:fd:ed:71:bc:4e:69:47:fa:
         97:29:fc:85:49:ee:fc:31:91:3d:2c:03:b3:02:45:82:29:e0:
         8b:c2:b5:e7:1b:73:df:7d:a6:9e:dd:61:60:74:55:af:05:0c:
         ba:6e:49:8d:bb:99:93:b1:0a:8c:e9:c0:25:4c:d6:65:07:6c:
         5a:32:04:17:86:f0:f8:7b:e5:f5:89:63:e3:86:b2:d4:6a:92:
         99:ab:a5:64:3b:a5:3f:a0:8b:94:fd:e7:c1:d2:a0:b8:7f:c4:
         49:1b:a7:58:be:c7:b9:37:f3:d0:3c:c6:27:e4:46:85:b6:b5:
         31:e6:30:76:86:08:32:8f:2a:50:5f:79:e7:6b:c5:de:4c:6b:
         31:a3:fd:94:ae:c5:48:de:85:c8:dc:fa:a3:a4:cb:ac:f2:d8:
         e8:10:54:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:31:44 2026 by rpki-client