Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/60be6b7e-6cad-3c0f-8715-e9fc5bc29b70.roa
File:                     60be6b7e-6cad-3c0f-8715-e9fc5bc29b70.roa (raw, json)
Hash identifier:          kPZpx+oPNWOQevQjBQciGO2K0GeOCoQmW1U+rp/zUqU=
Subject key identifier:   EC:86:B3:B3:9D:7A:21:1A:40:A7:7C:C3:E3:BA:86:40:47:CA:22:BC
Certificate issuer:       /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial:       010D0C9F4328584E5084B66998EE58AAEE10BC00
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/60be6b7e-6cad-3c0f-8715-e9fc5bc29b70.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     812
IP address blocks:        74.198.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:b6:69:98:ee:58:aa:ee:10:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=9c8850a7-e437-4822-bc5b-164afefd14ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:65:a8:08:3c:94:ea:c6:d7:fd:cc:5f:3d:3e:
                    16:bd:cf:da:04:b9:5d:02:ec:17:63:30:84:fb:58:
                    80:b8:41:69:ff:c6:9b:ab:86:0f:3b:01:d1:d9:bd:
                    dc:f7:72:d7:6f:13:01:de:78:31:d5:8a:fc:d9:bf:
                    04:79:1f:47:ac:db:44:50:f0:5d:e5:31:7a:e8:c7:
                    4a:d2:49:8e:0b:67:12:37:4d:4e:a9:db:e4:7f:92:
                    5e:a2:6f:6d:1e:be:60:8f:41:d3:4e:4c:e9:5f:8e:
                    d4:07:36:16:66:88:a0:f0:06:d1:27:0e:a3:24:75:
                    2d:61:91:22:42:3f:af:be:31:2a:ce:ac:f1:67:46:
                    05:21:bf:2f:ea:5b:86:1f:80:d9:aa:fe:4f:c8:24:
                    cf:96:e7:2f:5e:31:42:8b:9e:ab:f9:72:78:21:2c:
                    99:c7:18:40:cb:d0:74:80:2c:92:a2:9d:ea:5e:85:
                    8f:7d:0c:0d:ce:60:9f:b3:1d:b6:ef:66:8c:17:92:
                    84:d7:98:d5:93:5e:f5:0c:10:28:5f:d4:c1:86:2c:
                    a0:13:18:78:33:67:92:ba:de:d9:86:af:d1:11:d8:
                    57:9d:03:a8:0d:88:b8:d2:aa:4e:26:ab:4f:0b:52:
                    02:81:43:47:e2:ba:79:87:12:49:7d:c0:f7:25:9d:
                    a1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:86:B3:B3:9D:7A:21:1A:40:A7:7C:C3:E3:BA:86:40:47:CA:22:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/60be6b7e-6cad-3c0f-8715-e9fc5bc29b70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl

            X509v3 Authority Key Identifier:
                keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.198.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:6d:76:37:b4:ca:aa:5d:b9:37:ac:36:63:b2:a5:70:77:cc:
         d5:4e:22:2d:20:6f:66:4e:7d:04:aa:df:3c:3c:f2:49:ee:01:
         42:05:91:55:e1:09:41:f5:b0:b2:eb:00:65:83:02:60:9a:a1:
         c9:f4:7c:5c:65:f1:d8:b1:f6:eb:8f:e7:db:03:91:c4:a6:29:
         83:4a:aa:d0:51:33:1d:f6:e2:d2:cd:96:7b:71:8c:02:20:3e:
         b8:3b:36:08:4d:95:9e:b3:1b:15:be:14:cc:34:a2:f2:b5:09:
         da:e4:16:de:ac:d1:4e:c0:c5:05:1c:ec:cc:10:bc:46:4a:84:
         f8:5f:60:15:32:61:78:a6:67:5c:19:cd:4c:82:9b:8d:64:b6:
         d5:12:71:31:af:65:3d:59:36:e7:59:ac:aa:67:c9:a1:c5:e3:
         77:f6:e4:31:9e:98:9d:27:f0:40:28:cf:a8:28:6a:5f:54:0b:
         dc:54:1d:a7:a0:53:33:1a:69:d8:33:39:fc:ae:4c:48:c4:ee:
         a1:5e:79:d4:ec:45:30:7b:fe:96:c6:30:93:dc:ea:ad:51:03:
         78:78:e9:c8:7e:2f:5e:d0:93:14:1e:18:41:24:88:07:79:2e:
         61:c1:02:ac:4e:5a:75:0c:00:18:75:c9:6c:a4:89:73:80:80:
         4a:2d:ad:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 15:02:26 2026 by rpki-client