Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/a07f8277-ce17-34be-955c-7cc356301d2e.roa
File:                     a07f8277-ce17-34be-955c-7cc356301d2e.roa (raw, json)
Hash identifier:          5C1R5qoxXQ15LErD1iCh+dbMMKzGJnXIOEiwA7eWdyY=
Subject key identifier:   68:42:BA:9A:99:3A:BD:E8:98:33:92:62:47:9B:83:FE:FD:E0:AB:FC
Certificate issuer:       /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Certificate serial:       010D0C9F4328584EA7917DE1A564B38E4666C800
Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/a07f8277-ce17-34be-955c-7cc356301d2e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        74.123.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:7d:e1:a5:64:b3:8e:46:66:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=81e222ac-288a-49d4-9dd8-8101882579b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0d:9c:05:95:f8:8d:96:60:9b:4f:3c:18:46:
                    62:c4:8e:ed:ac:8c:10:da:ec:2b:bb:f3:37:14:00:
                    78:07:b3:97:01:51:69:4c:85:d4:ec:7e:bf:d4:39:
                    0f:a9:31:ba:b6:af:c1:18:a9:09:d5:ad:fa:46:59:
                    1d:15:4f:51:c5:ce:b3:e3:34:ce:c7:04:a3:84:a5:
                    a2:b0:49:cd:0a:45:10:99:ed:f4:c9:52:3f:9c:1b:
                    70:db:9d:a2:a1:bb:c0:b1:01:aa:dc:49:f1:22:63:
                    6c:ed:77:70:3e:94:8e:d3:66:7f:f3:16:34:3a:c8:
                    33:b2:b3:31:cd:16:d9:dc:08:bf:90:11:ce:c0:83:
                    d3:57:21:b4:17:9f:11:6a:7d:75:a7:44:0f:b3:62:
                    98:84:0b:b4:a4:bc:c6:2d:65:82:57:57:5b:b9:e1:
                    16:b2:de:5f:f7:2f:07:c8:2c:ec:48:13:64:53:72:
                    ec:10:fa:8c:56:e2:ca:04:22:9b:36:3d:ee:f8:4f:
                    ec:f0:6e:c1:6f:e4:44:de:47:65:0c:a9:46:ae:32:
                    dc:c8:ac:3a:42:d4:bd:fb:e2:df:54:ec:e7:f7:7d:
                    01:04:cf:6f:a2:30:ed:5c:e5:1d:2c:33:27:b3:27:
                    80:ce:d7:b2:cf:64:04:5f:6b:4c:c9:c1:df:e6:74:
                    a0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:42:BA:9A:99:3A:BD:E8:98:33:92:62:47:9B:83:FE:FD:E0:AB:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/a07f8277-ce17-34be-955c-7cc356301d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl

            X509v3 Authority Key Identifier:
                keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:60:fe:64:54:20:19:44:ed:bd:c1:af:07:8d:16:3f:9b:23:
         19:6c:a0:f4:ec:e6:61:0d:af:aa:28:b6:0e:71:93:e3:ee:28:
         da:c8:df:56:fa:b3:1c:6b:fd:f2:fa:32:ce:20:52:20:c4:20:
         3b:65:59:e8:78:97:ce:58:10:9d:e9:3f:ea:f3:8c:2f:98:13:
         41:f1:1f:1c:91:1e:e4:a3:ff:ef:f7:97:11:cb:1d:55:04:45:
         73:e0:ca:78:74:49:2e:60:e7:82:95:03:f0:f0:74:21:27:ff:
         57:0d:55:a8:49:1d:88:05:72:52:0b:5d:5e:76:24:76:3a:35:
         79:9e:df:a1:71:59:84:a9:e1:38:ae:3d:ed:c4:f2:dc:e5:8b:
         b9:5f:6c:fd:64:b2:b7:db:b3:b5:c7:f7:bd:43:12:c4:db:c1:
         cb:82:fa:43:4e:59:9b:46:2b:d2:9b:a6:f6:4b:67:25:b4:13:
         bd:b3:e8:03:5f:60:c8:f9:09:64:68:90:a1:58:3c:45:4f:f1:
         c6:83:e8:4d:16:d9:ae:b5:bc:63:0e:30:12:9b:67:dd:ee:cd:
         57:89:dc:8c:d3:c5:36:d9:aa:2f:a3:a9:a0:ce:5e:05:19:44:
         ef:38:ff:10:f3:74:bc:48:47:29:90:74:e4:1b:f9:96:2a:b3:
         3f:e1:c9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:02 2026 by rpki-client