Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/e111478c-6114-37c3-ac44-86a6ee25a0df.roa
File:                     e111478c-6114-37c3-ac44-86a6ee25a0df.roa (raw, json)
Hash identifier:          vY7qXuwIqzG36t+Bkva3FYg+aC7rztEvGJt5VjwDLsc=
Subject key identifier:   0E:12:EA:06:FB:8F:8E:1A:73:25:D8:71:60:6B:DE:28:8D:C6:57:EC
Certificate issuer:       /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial:       010D0C9F4328584EA8EC401248651FFE4B254A90
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/e111478c-6114-37c3-ac44-86a6ee25a0df.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     32035
IP address blocks:        74.115.96.0/22 maxlen: 24
                          74.122.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:40:12:48:65:1f:fe:4b:25:4a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=3167010e-7cda-4fa9-89b6-7128fb4410ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:25:52:b7:7a:e8:6f:f9:a6:78:29:d6:40:95:
                    1d:a0:55:74:06:0c:c5:c0:26:2c:a4:a6:7a:2c:2d:
                    96:b8:ee:70:f0:cb:c0:33:6d:27:9d:05:20:93:76:
                    bb:0b:d9:7d:af:aa:02:1d:7b:ee:33:a5:7a:d7:e6:
                    03:71:b5:a9:f7:5b:cf:c9:d2:e3:a9:f9:35:5b:f7:
                    79:9a:b8:67:6d:6f:b5:c4:ed:3a:17:72:f4:0f:68:
                    7e:9a:f2:a9:d6:8d:fd:13:4c:d5:50:d6:fb:c2:04:
                    51:54:29:bc:fa:3b:a0:7f:a3:44:b0:37:0f:52:4d:
                    db:45:e7:40:86:15:17:e7:13:d3:fa:9e:16:86:4f:
                    51:6a:b3:c2:0b:bb:1b:36:6f:73:b2:4c:30:0b:30:
                    88:39:43:36:4c:dd:01:29:9b:13:59:7c:d0:28:8e:
                    e8:51:18:e7:cd:0f:15:c7:00:8a:6e:6c:44:1b:b7:
                    66:41:74:15:31:b0:67:f9:27:8b:f7:20:12:a0:e9:
                    ca:e7:74:ce:52:b2:81:46:39:2e:19:f8:b0:32:35:
                    d7:0d:c9:fe:17:95:1e:09:94:c6:54:84:b4:f4:2e:
                    f4:3e:bd:e7:fd:66:dd:70:29:5e:de:9b:11:31:a5:
                    44:3f:d6:96:9b:9a:84:c1:9b:ee:b3:4e:41:84:75:
                    0a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:12:EA:06:FB:8F:8E:1A:73:25:D8:71:60:6B:DE:28:8D:C6:57:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/e111478c-6114-37c3-ac44-86a6ee25a0df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl

            X509v3 Authority Key Identifier:
                keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.96.0/22
                  74.122.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:49:a2:62:69:26:36:12:3e:d8:e7:37:26:af:c5:4e:99:c0:
         8b:e0:53:ee:cc:60:0e:eb:15:70:78:8c:37:8b:de:93:02:f4:
         ae:bf:e2:68:25:a6:7c:89:14:1d:04:1f:b0:2e:0e:ff:8a:42:
         2e:d5:37:b0:5a:2f:5b:0f:2d:9c:41:bd:49:97:17:b3:fc:28:
         45:be:62:56:83:83:96:1d:f5:15:2a:53:6f:f6:ea:00:01:a6:
         ca:b1:1f:76:9f:b7:2f:0b:df:0c:b6:85:cf:7b:0e:1f:38:b7:
         da:78:0d:42:6a:ec:08:7e:c0:2d:aa:42:e3:6f:26:3e:7f:7f:
         58:d7:2c:25:53:22:30:9e:81:a7:52:a3:cb:c9:b6:8e:49:4b:
         7e:82:e3:bf:52:77:52:1c:70:bc:86:2b:cf:03:e1:d2:8d:2a:
         b0:10:d3:e5:75:3a:8d:94:53:13:30:2d:6e:a5:35:e0:c5:4d:
         56:a8:7f:a0:4b:6e:1d:21:57:ab:0f:60:a3:90:07:fe:11:b3:
         a0:2a:13:00:85:47:68:e9:7d:75:a5:08:6d:f1:49:13:65:09:
         c7:d3:4d:67:90:36:8b:88:0e:d6:66:92:24:db:e5:ca:da:5a:
         0a:da:4b:4f:44:a2:17:8f:af:41:2c:f7:26:a2:6c:dd:75:f8:
         63:a9:83:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:40:20 2026 by rpki-client