Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/ee54df25-5db0-3dbe-9cf5-1366a3b2fdc1.roa
File:                     ee54df25-5db0-3dbe-9cf5-1366a3b2fdc1.roa (raw, json)
Hash identifier:          j6ACS/YXFIrAsWx1Ku0kbLAMqexoAa0m/eOcNd70RUM=
Subject key identifier:   5A:F3:3C:64:95:65:2C:36:4F:82:5C:D1:FA:B0:E0:B9:EC:F5:B9:0D
Certificate issuer:       /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Certificate serial:       010D0C9F4328584EA79190077D9D1E746F433300
Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/ee54df25-5db0-3dbe-9cf5-1366a3b2fdc1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        74.123.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:90:07:7d:9d:1e:74:6f:43:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7bf0e312-c30c-49c6-9955-af6e9c76f0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:07:f8:68:d3:3a:69:fc:e0:c0:f8:17:82:f5:
                    1f:73:ee:6d:fd:59:a9:85:be:f3:80:0a:40:f9:85:
                    39:51:94:92:ef:14:ee:97:cd:e1:b9:b9:76:6b:d7:
                    55:fa:f1:2c:cf:da:4b:6b:69:76:41:65:0a:b3:03:
                    97:76:24:44:4a:7e:81:78:ec:c2:c5:09:ca:c1:6c:
                    cd:da:29:db:e4:76:e6:2a:62:a3:69:5e:2e:ed:6e:
                    1a:b8:15:a8:49:57:74:99:6f:32:b9:5b:01:fc:47:
                    65:f6:60:09:07:a4:79:48:6e:6a:f4:9d:ed:4b:e0:
                    6a:81:36:67:de:69:2e:3c:db:e6:d0:2b:0c:cc:84:
                    52:f9:b0:5d:55:6d:2f:f4:0f:79:1f:df:03:82:11:
                    c5:96:ae:94:b6:c9:41:cd:98:0c:98:53:39:a6:a9:
                    29:56:06:23:3e:22:3d:99:07:a1:2d:ae:48:7b:7d:
                    0c:8d:88:e3:c9:37:08:15:cf:a3:1d:0a:75:a5:16:
                    08:01:e4:33:67:83:bd:62:d5:e3:30:59:d0:dc:3c:
                    f2:5c:04:cd:1b:bf:13:1d:03:89:58:64:c7:16:fe:
                    37:5a:2d:14:1a:dd:9e:3e:b9:19:d9:73:20:e5:45:
                    ba:4d:d0:c6:7c:a9:27:29:9d:93:5a:0f:ba:5e:c7:
                    3f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F3:3C:64:95:65:2C:36:4F:82:5C:D1:FA:B0:E0:B9:EC:F5:B9:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/ee54df25-5db0-3dbe-9cf5-1366a3b2fdc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl

            X509v3 Authority Key Identifier:
                keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:f6:1d:dc:53:be:54:6e:d8:2e:59:64:39:a2:12:22:ab:7e:
         27:f9:b7:9e:97:05:3e:0d:b7:eb:8a:84:8a:9a:60:31:e4:9c:
         70:7d:05:1a:7b:b5:59:0b:6f:bc:30:21:2b:5f:5e:02:41:d9:
         ed:54:73:7c:ed:14:55:38:0e:1a:2d:ec:e2:f0:ba:6d:76:70:
         ef:d5:b0:49:c1:84:e5:48:b9:32:b4:f3:cb:94:db:8a:c9:a8:
         f7:1a:d9:97:f6:27:2a:59:56:c9:2d:31:ce:80:75:d7:c3:ea:
         23:93:92:8f:ad:6e:6a:c7:0a:0e:ff:5b:20:91:80:a1:15:25:
         15:27:73:65:ca:63:f2:aa:38:fb:1d:ae:e0:cc:96:4a:c9:db:
         38:44:78:04:33:c0:14:34:fb:91:f8:3f:c8:bf:61:68:f3:30:
         88:b7:8b:66:07:41:c5:70:96:d4:0c:87:28:f8:e3:5f:98:b6:
         7c:15:49:f4:08:b3:c5:bb:e8:2d:eb:23:02:70:bb:8d:1a:75:
         54:d0:0b:66:8e:04:21:45:20:1d:3d:a4:8b:be:f1:a9:d8:e5:
         0f:0c:c2:48:a3:ed:d0:cc:de:64:0f:56:bb:44:88:be:65:42:
         8e:a9:3d:3e:b1:70:7e:a8:d6:8c:4e:fc:98:b1:d0:1c:67:f8:
         98:6c:d2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:42 2026 by rpki-client