Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a4e9324-9068-4a80-b6f1-835bdc3736e4/f413666d-90c1-3620-8f23-be4e40988edf.roa
File:                     f413666d-90c1-3620-8f23-be4e40988edf.roa (raw, json)
Hash identifier:          udk53eT9yKF4Ckq2isG/8APXLPgqmrE0jLmDShwkUVI=
Subject key identifier:   B1:75:E7:A2:36:23:A0:30:F7:E1:E6:7D:E9:75:D3:5D:4C:9A:51:28
Certificate issuer:       /CN=0a4e9324-9068-4a80-b6f1-835bdc3736e4
Certificate serial:       010D0C9F4328584EDF5C87EA11A7A5BCAB729680
Authority key identifier: C2:3B:B5:77:D1:09:F1:79:CF:D4:BE:4E:EB:65:FB:91:C8:78:B0:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a4e9324-9068-4a80-b6f1-835bdc3736e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a4e9324-9068-4a80-b6f1-835bdc3736e4/f413666d-90c1-3620-8f23-be4e40988edf.roa
Signing time:             Tue 18 Aug 2026 01:00:12 +0000
ROA not before:           Tue 18 Aug 2026 01:00:12 +0000
ROA not after:            Mon 16 Nov 2026 02:00:12 +0000
asID:                     402321
IP address blocks:        74.63.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a4e9324-9068-4a80-b6f1-835bdc3736e4/0a4e9324-9068-4a80-b6f1-835bdc3736e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a4e9324-9068-4a80-b6f1-835bdc3736e4/0a4e9324-9068-4a80-b6f1-835bdc3736e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a4e9324-9068-4a80-b6f1-835bdc3736e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:df:5c:87:ea:11:a7:a5:bc:ab:72:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a4e9324-9068-4a80-b6f1-835bdc3736e4
        Validity
            Not Before: Aug 18 01:00:12 2026 GMT
            Not After : Nov 16 02:00:12 2026 GMT
        Subject: CN=7ea1d820-d6b3-4dd4-8bad-a1ecdc9d47f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b0:62:36:90:6e:85:e8:91:dd:31:47:bf:5b:
                    a4:36:7a:69:61:ac:59:c0:3a:1b:e4:d8:6c:7f:78:
                    90:54:f9:fb:a5:69:6e:46:a8:23:61:dc:06:ca:ba:
                    14:85:66:86:75:b3:aa:5e:1b:26:77:c5:fc:6e:68:
                    2c:bf:03:dd:17:ef:cd:96:44:9a:9c:49:f8:72:65:
                    5f:29:23:1d:0f:13:dc:78:4f:b3:99:52:35:11:79:
                    1e:6b:6b:63:5e:c6:a4:a4:d3:0b:45:75:8e:a3:7b:
                    89:4a:4c:a0:2e:5b:61:26:10:f6:37:dc:51:81:44:
                    cb:54:b1:83:d6:0c:91:ae:8f:c8:d6:71:bf:14:17:
                    4a:a0:c4:4e:1c:f2:21:8f:04:04:36:d0:11:10:4d:
                    d0:b4:d2:27:d2:18:80:57:46:2d:46:9f:d6:a9:3b:
                    0f:dd:f8:7b:6b:c0:18:a3:08:fe:9a:45:1a:e0:c5:
                    80:46:ca:18:ea:27:1c:5f:3f:3c:5a:21:fd:1b:19:
                    d5:b4:6a:88:5d:26:d5:f9:28:36:e4:a6:4d:18:f7:
                    08:b3:12:28:43:a2:16:78:75:c7:70:4a:bc:83:b1:
                    d8:8f:f5:5d:34:4d:b0:f7:c8:9f:9f:8c:4d:f2:2a:
                    a4:05:3e:93:1d:4a:a7:f0:f4:a2:84:37:bd:33:8d:
                    c0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:75:E7:A2:36:23:A0:30:F7:E1:E6:7D:E9:75:D3:5D:4C:9A:51:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a4e9324-9068-4a80-b6f1-835bdc3736e4/f413666d-90c1-3620-8f23-be4e40988edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a4e9324-9068-4a80-b6f1-835bdc3736e4/0a4e9324-9068-4a80-b6f1-835bdc3736e4.crl

            X509v3 Authority Key Identifier:
                keyid:C2:3B:B5:77:D1:09:F1:79:CF:D4:BE:4E:EB:65:FB:91:C8:78:B0:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a4e9324-9068-4a80-b6f1-835bdc3736e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.63.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e9:77:03:78:1d:f0:73:71:08:c6:97:b1:ed:55:a2:af:98:
         03:16:ab:cd:26:5e:7a:82:c5:b8:36:ba:f7:76:4a:3d:12:f0:
         6a:12:d7:08:35:fb:e4:60:12:26:cd:9a:24:68:8b:33:e6:e8:
         6f:1f:f6:25:0d:00:fd:c0:79:4e:ed:69:7c:7c:82:4a:bf:65:
         72:40:b6:19:72:9a:ed:77:94:97:89:33:09:58:99:92:44:84:
         2f:8a:90:06:35:a7:78:bd:da:7d:48:4d:af:3f:ab:5c:1f:b4:
         2e:9e:77:ae:d4:29:fe:59:53:86:4d:85:cc:1f:19:6d:a0:98:
         f0:d3:44:18:b7:d3:4a:ff:ca:b4:c6:b1:27:43:71:e9:da:02:
         97:a8:71:0f:98:41:fc:e8:05:91:55:1d:3e:7d:5c:de:3e:88:
         ea:ab:cc:56:f4:25:1f:5b:99:cd:4b:26:ae:4a:75:ca:3c:2f:
         1c:99:ba:0a:65:3f:82:76:5c:47:8c:13:0f:fa:9f:97:9b:e5:
         81:da:30:81:d1:73:de:15:62:2a:55:ac:1a:78:e2:5f:2c:25:
         2e:de:23:5c:ab:2d:2b:b1:a5:cd:bf:bc:cc:85:3f:02:7c:72:
         08:12:ca:de:a1:f1:d6:70:6e:5a:ad:eb:88:df:de:77:5e:91:
         76:7e:d8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:14:18 2026 by rpki-client