Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/850556b3-dd11-3c58-ad75-038a96f5c625.roa
File:                     850556b3-dd11-3c58-ad75-038a96f5c625.roa (raw, json)
Hash identifier:          YOLmUOBfjdg4L+kk0xaE9wnifpGQvR+1550k3HloS20=
Subject key identifier:   FA:4C:B0:3B:26:E2:CC:05:80:64:8D:FA:0B:A9:98:26:B1:3A:DE:D9
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584EC0A7489F1A933DC8CE776080
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/850556b3-dd11-3c58-ad75-038a96f5c625.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     20115
IP address blocks:        174.87.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:48:9f:1a:93:3d:c8:ce:77:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=154447b5-6dab-4ec6-82e0-6bbf9cd7a0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3d:6d:4e:07:9a:00:03:6e:c0:72:ae:b2:1a:
                    12:17:a8:16:5d:31:cc:0f:27:12:fb:db:79:39:07:
                    f5:d1:dd:34:52:b3:8b:3a:58:91:09:8a:20:d0:6b:
                    8e:e7:17:7c:cf:fe:2d:83:4d:d1:2f:bb:05:1c:2a:
                    c0:65:ed:fa:cd:a1:4f:35:65:37:ab:44:79:3b:40:
                    d9:28:f3:d5:7f:ab:68:dd:38:cb:c7:fc:31:12:a9:
                    6a:d3:71:b0:aa:7f:41:f4:b7:e4:22:20:be:0f:4e:
                    72:a2:a9:39:dc:df:7a:bc:49:02:b1:94:66:d7:b7:
                    5c:72:0e:0a:2c:67:a9:47:23:8c:08:de:5c:d6:db:
                    18:56:0f:71:a8:84:fb:b6:64:34:02:21:fb:cf:aa:
                    90:06:d5:f9:8a:b0:7f:39:b2:3a:34:d3:a3:f7:9a:
                    7c:61:e0:16:31:1a:fc:0d:6a:c7:58:5f:ec:23:d6:
                    a0:76:0c:f1:bd:6b:e4:34:9f:6d:e4:2a:21:8f:cd:
                    64:78:88:88:2d:e1:bf:39:4d:0a:50:1d:2a:16:24:
                    90:65:a3:ea:01:96:7b:80:b2:9f:b9:95:4b:ff:b5:
                    6c:8a:e2:7b:f5:0f:46:8c:a6:95:a3:cb:aa:c0:3d:
                    10:94:a6:85:f3:bd:05:b6:45:26:52:82:c5:f0:6c:
                    a6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4C:B0:3B:26:E2:CC:05:80:64:8D:FA:0B:A9:98:26:B1:3A:DE:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/850556b3-dd11-3c58-ad75-038a96f5c625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.87.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:df:e8:45:fe:07:68:4d:a7:99:9b:ac:b6:c5:25:c5:ff:62:
         39:5e:41:c6:6e:85:5b:a9:63:f9:71:f5:14:32:70:a1:cd:47:
         bf:b4:b9:df:00:92:92:e0:87:2c:17:a1:b8:68:99:54:f5:ed:
         42:c3:2f:45:44:7a:7f:bd:f6:51:f7:d3:37:ef:96:f8:9f:be:
         01:24:30:71:31:3a:0d:62:30:9d:30:5f:77:2a:2c:a8:90:34:
         f8:dc:69:56:65:da:d8:39:7c:13:d7:52:2b:d2:65:a3:ec:47:
         a4:9e:86:02:fd:a0:13:f8:a9:a4:07:5e:93:9a:f3:b5:d4:3b:
         7a:b8:84:66:dc:cc:6f:f2:35:56:bd:af:47:ec:03:97:ae:99:
         de:0f:8f:24:51:8e:56:40:8d:b1:7c:4b:8f:a0:37:d2:73:8b:
         38:f0:4b:24:65:63:fb:b5:ea:63:8f:04:76:32:a4:68:52:b6:
         c8:ea:17:b3:cf:47:06:b8:50:a6:ea:81:78:73:eb:6b:bb:9a:
         31:3e:8f:60:06:e9:8d:ce:89:2d:62:da:86:a7:05:30:ef:44:
         20:a0:72:be:bb:cb:af:e2:c7:76:b1:32:e2:c9:1b:11:60:cc:
         5f:30:ee:ae:ca:6f:32:f8:10:69:22:a3:51:8f:95:58:75:2e:
         32:b3:af:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:25:18 2026 by rpki-client