Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/13b85c9c-607d-32fb-ad86-18922dca5a8d.roa
File:                     13b85c9c-607d-32fb-ad86-18922dca5a8d.roa (raw, json)
Hash identifier:          Hqb9bFzVip1nqt88XZxHzMntLWpJYBDAsykOiDmbFYk=
Subject key identifier:   37:26:B8:F6:41:D7:90:FC:5F:F3:56:C8:81:BF:61:2D:72:46:EF:1D
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584DE2B5F68829B58598DCFBD700
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/13b85c9c-607d-32fb-ad86-18922dca5a8d.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     15164
IP address blocks:        74.51.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:f6:88:29:b5:85:98:dc:fb:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=d167a31c-ea82-4154-b63f-14a0ef72a1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:c0:49:aa:0b:1d:4f:5a:71:e7:db:61:5c:
                    92:e3:a7:bb:35:1f:9e:34:d3:a6:87:22:2b:77:b4:
                    3c:a7:f7:89:aa:a7:fd:32:7f:43:aa:f5:cb:9e:63:
                    7e:d1:f0:1d:c4:66:a3:55:c7:d6:06:c7:0e:25:09:
                    d6:41:be:5a:df:3f:aa:d7:56:43:f1:3f:c4:57:90:
                    80:fb:85:be:74:7a:18:a4:b2:b8:19:8c:42:ab:db:
                    15:6e:a9:7e:79:15:fa:be:79:63:41:62:4a:af:bc:
                    8b:e2:02:19:da:43:8e:7b:3d:2c:1c:9f:23:3a:63:
                    be:8e:73:34:f6:30:c1:53:ce:ce:f2:22:a4:92:77:
                    86:8c:23:29:ae:9b:e2:1e:a3:1b:89:31:95:31:81:
                    68:74:d2:a5:47:9d:75:95:b4:18:b4:33:13:e8:01:
                    d6:a8:48:88:cc:e8:cb:1e:26:30:1e:9e:94:63:44:
                    43:9a:23:21:8d:ae:dd:5b:8a:8e:b2:15:99:65:c2:
                    18:54:0c:ae:ea:94:3e:1c:7b:9d:eb:db:98:36:cf:
                    e3:c5:5e:5e:51:23:0f:17:48:d4:ba:66:9e:85:bc:
                    b1:17:55:ec:c2:95:f0:47:37:07:5e:32:a3:e2:72:
                    e8:9d:1a:c6:bc:2f:bf:9d:4a:09:bd:d8:0c:c2:17:
                    bc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:26:B8:F6:41:D7:90:FC:5F:F3:56:C8:81:BF:61:2D:72:46:EF:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/13b85c9c-607d-32fb-ad86-18922dca5a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.51.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:c3:9c:19:55:8b:7e:9c:c2:65:c0:a5:61:f4:ff:f3:0c:22:
         ad:71:ec:e9:ac:09:fa:ee:9c:86:3d:d5:81:1c:f5:53:49:50:
         31:c4:52:42:24:66:b7:11:25:5f:b3:ad:2e:99:3f:29:8c:72:
         3d:c0:d6:dd:60:4c:13:59:cc:1b:fd:ad:17:02:a5:30:75:d5:
         48:4c:5f:3c:39:93:c3:fd:b2:8a:7e:e7:cb:25:c0:0e:57:e2:
         a6:41:11:f4:f2:e2:f8:a1:3e:1c:af:93:f5:0a:f8:dc:3a:d4:
         f0:64:8b:a1:36:d2:8e:c3:b5:ba:f8:1c:9a:87:cc:cc:0f:e5:
         b6:40:2a:d2:a8:c9:08:01:17:7b:6f:0f:98:ed:81:63:3c:69:
         47:20:67:cb:c1:a5:44:a8:1e:71:b5:f0:d8:6a:71:7c:83:d3:
         2a:33:e9:18:43:99:68:a0:93:10:c6:94:ee:37:d1:d6:7f:92:
         e1:4c:2b:17:75:76:b5:1d:49:d5:68:1c:c2:11:06:be:b8:8f:
         66:93:11:34:0f:24:97:bb:6a:0d:bb:b4:c6:87:0a:48:b1:09:
         31:07:5b:34:04:27:3d:2c:d9:51:09:a0:60:f0:cc:ae:eb:c3:
         0b:b5:16:31:46:1a:7d:93:9b:3e:37:2f:78:0f:b6:b0:9c:61:
         2d:2d:67:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:45:36 2026 by rpki-client