Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/2d73d8dd-51e6-36c6-8683-ea8172639586.roa
File:                     2d73d8dd-51e6-36c6-8683-ea8172639586.roa (raw, json)
Hash identifier:          DWt/0fR6qruFdArAb9aMq/PGro+GAU2r4NSdj8t+/8U=
Subject key identifier:   89:02:88:BD:98:A9:D7:A4:66:00:2C:77:56:FE:3E:C2:30:E0:C7:F7
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584E8DA22F2DBD89EF6DBCB3F100
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/2d73d8dd-51e6-36c6-8683-ea8172639586.roa
Signing time:             Sun 19 Jul 2026 18:24:16 +0000
ROA not before:           Sun 19 Jul 2026 18:24:16 +0000
ROA not after:            Sat 17 Oct 2026 18:24:16 +0000
asID:                     11404
IP address blocks:        74.85.64.0/19 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:a2:2f:2d:bd:89:ef:6d:bc:b3:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jul 19 18:24:16 2026 GMT
            Not After : Oct 17 18:24:16 2026 GMT
        Subject: CN=93215b5f-4c0d-440b-b261-759eb43ea631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9d:dc:ce:f7:7e:74:b7:50:61:f6:c0:e8:52:
                    21:d5:93:95:25:af:be:39:52:d1:49:52:74:3b:fd:
                    4a:f6:71:90:32:94:60:14:88:c4:73:a9:5c:17:91:
                    a2:39:f4:e4:50:01:9d:b7:1e:8a:7f:df:96:32:12:
                    18:c6:ef:c3:ad:36:80:40:e3:4b:9b:56:30:4c:91:
                    03:97:d5:e2:3c:a7:e0:16:ec:36:73:3d:16:81:a2:
                    af:4d:9f:6e:d7:b3:54:c0:31:35:95:6c:5e:81:2a:
                    d9:a8:e0:2c:e8:5b:01:bf:97:f2:29:8f:6a:b4:44:
                    62:81:16:7e:76:2b:a3:83:ef:d2:b7:8e:9f:ad:51:
                    bf:5b:0c:4e:22:d2:2a:b1:47:e5:ce:c2:3c:0b:da:
                    87:1e:06:9d:d3:8f:dd:bf:1a:6b:27:a3:1b:3a:d2:
                    9d:90:f2:e4:e0:b4:67:c6:61:5c:6c:64:55:c9:ea:
                    d1:1a:bb:ed:ff:1e:61:7a:fc:87:03:2c:62:24:bc:
                    56:d6:9b:c9:66:33:9a:89:50:01:cf:6f:2c:13:61:
                    1d:2d:93:fb:ab:13:69:8c:53:e7:5b:92:18:b5:27:
                    20:03:d3:01:1f:97:38:34:8e:02:15:44:d3:c8:8e:
                    14:df:ff:85:da:69:ba:0c:08:86:d1:c1:b8:90:db:
                    ee:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:02:88:BD:98:A9:D7:A4:66:00:2C:77:56:FE:3E:C2:30:E0:C7:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/2d73d8dd-51e6-36c6-8683-ea8172639586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:e1:92:9b:d2:0e:8a:ae:1f:f3:9e:56:ad:2f:58:85:94:e7:
         21:20:5d:a7:e0:83:eb:8f:80:89:c5:66:14:12:f9:3f:16:05:
         a0:e2:25:64:33:db:c7:c4:13:81:15:ed:0a:16:3e:c4:36:17:
         36:96:74:22:d5:3f:b5:ac:e2:22:2b:13:e2:88:01:a2:26:79:
         8f:1d:f6:8d:ec:63:25:55:32:9d:8b:ae:22:87:9b:38:89:d0:
         0c:a9:1f:80:f6:fd:62:b8:aa:e7:11:3f:2d:60:cc:7d:a5:f8:
         dc:e9:40:d7:7c:91:08:27:ab:83:37:0c:49:52:6b:52:34:4d:
         d9:51:e1:be:ca:c9:76:6d:9a:5c:f1:78:8c:86:78:b0:32:c7:
         e4:76:38:81:64:d4:54:2d:67:c7:7a:38:62:3b:ea:63:ba:2d:
         bb:98:d7:e6:54:8d:f9:a1:78:6c:59:1b:c3:30:79:d4:2b:60:
         6c:98:d4:66:4d:8a:72:51:1f:ed:18:18:1d:85:83:6e:3b:15:
         c1:ad:fe:5b:8a:80:5d:39:21:bf:78:ad:01:ed:c7:01:97:97:
         64:0a:8a:a4:37:d1:88:18:dd:4f:b4:34:32:82:db:c2:6b:3c:
         50:14:b2:38:e4:b4:ce:cb:c3:be:5d:8f:2e:53:44:4a:02:e5:
         b4:cd:65:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:25 2026 by rpki-client