Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/051cc5cb-8c63-38ee-b5b0-8b805430c612.roa
File:                     051cc5cb-8c63-38ee-b5b0-8b805430c612.roa (raw, json)
Hash identifier:          5zor8BNSQy0Kc3AmjkYdEwI17egdR2xynS65+bjtrGQ=
Subject key identifier:   08:74:64:90:A7:D1:21:02:1A:F6:D6:7B:23:75:B0:F6:EF:30:56:4A
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584E668B2A38810018B13F6C1A80
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/051cc5cb-8c63-38ee-b5b0-8b805430c612.roa
Signing time:             Sun 05 Jul 2026 18:21:22 +0000
ROA not before:           Sun 05 Jul 2026 18:21:22 +0000
ROA not after:            Sat 03 Oct 2026 18:21:22 +0000
asID:                     5650
IP address blocks:        74.91.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:8b:2a:38:81:00:18:b1:3f:6c:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Jul  5 18:21:22 2026 GMT
            Not After : Oct  3 18:21:22 2026 GMT
        Subject: CN=6563e482-3db0-40c8-a4ef-ba5a694e496c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9c:ff:bd:cf:83:18:82:1e:99:08:4a:b6:5b:
                    29:2b:ae:56:f9:b9:cd:1f:53:3b:de:05:21:3b:7f:
                    ac:73:62:13:bd:84:fe:cc:4d:af:ef:9d:c2:da:ab:
                    01:6f:b8:da:71:51:bc:4c:a5:33:86:89:9c:c5:00:
                    ed:59:7b:ec:f4:b7:a2:2e:47:13:89:bb:eb:21:b5:
                    41:0c:e3:49:9c:f5:da:1c:f7:df:02:bb:6a:fa:db:
                    85:73:a4:1e:48:d0:86:c2:ea:8b:00:3e:47:29:d4:
                    15:ad:1f:79:ea:0d:dc:2b:ff:e2:df:d6:c8:f1:26:
                    65:06:c9:22:ca:a8:85:6b:19:01:32:0f:e8:03:5f:
                    3b:89:4b:30:6a:72:4a:e2:c7:ed:36:90:e2:fe:7a:
                    f3:46:bb:a3:91:95:b9:57:a5:05:4e:38:ba:df:ba:
                    3f:e4:15:7e:43:3f:0c:ff:f8:3f:81:e5:26:9a:4e:
                    7a:50:76:9b:1f:3f:00:7c:22:d0:c8:67:f0:2e:43:
                    96:8e:92:67:a4:e9:c8:52:29:e8:03:b9:80:09:ad:
                    4d:f1:3f:55:d5:b8:64:86:ea:43:23:c8:18:cd:d8:
                    a0:ef:85:6b:32:bb:f5:02:fb:63:c6:0a:8b:9d:c4:
                    f2:19:da:ff:42:a4:0f:32:53:de:d8:e7:d9:78:c5:
                    03:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:74:64:90:A7:D1:21:02:1A:F6:D6:7B:23:75:B0:F6:EF:30:56:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/051cc5cb-8c63-38ee-b5b0-8b805430c612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:45:2f:7f:9c:80:01:62:7d:ae:99:d5:13:53:ad:90:98:4e:
         e4:19:1a:49:75:61:84:d8:54:db:37:ed:eb:8b:56:d1:ac:ba:
         9c:1e:92:79:de:af:76:d9:1f:3a:e6:b8:50:52:c8:99:18:d0:
         2c:16:87:96:85:80:fe:b4:2e:06:bc:2b:ee:65:3c:f7:12:66:
         10:76:9c:dd:da:2c:1b:e6:f1:e0:54:2a:7f:87:80:ff:1e:79:
         ae:31:b1:ea:8e:c8:71:3d:23:2e:7a:cc:b4:fe:9d:55:21:67:
         1b:db:ee:0e:8b:a7:40:ba:6b:6a:40:0d:7a:c7:b3:74:f4:02:
         bb:02:57:26:57:87:ee:56:fd:bb:a2:7d:bf:c3:86:0e:1c:68:
         f2:70:66:24:b5:e7:8c:40:85:d4:da:ba:ab:e2:00:27:ae:75:
         15:c0:c8:c6:5e:82:87:18:25:92:e0:c2:c1:6f:6c:92:7b:ea:
         15:62:83:94:dc:60:41:f2:f7:5d:c6:28:a3:5b:f8:a4:6c:1e:
         67:66:d9:fd:ae:5a:2d:6a:72:c5:8f:ff:43:8b:7d:6c:09:a0:
         3c:06:71:65:a8:6b:ef:e8:62:52:d7:0b:03:ee:d2:18:ba:30:
         22:de:9b:9c:20:37:46:f3:32:96:74:f9:50:40:52:f6:c7:d3:
         af:fd:33:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:46:48 2026 by rpki-client