Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/7a033ad5-3d34-3273-ba72-d3abe6eae137.roa
File:                     7a033ad5-3d34-3273-ba72-d3abe6eae137.roa (raw, json)
Hash identifier:          Ytf4Wmss36lGZNdbOgIJGnWqVtsuzQEaL/fCgVbd3aU=
Subject key identifier:   C8:EF:B5:DB:70:67:61:E1:E2:CF:62:14:D3:94:C9:B4:CB:64:1D:62
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584EBB11B6A0CF8677E246AE0700
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/7a033ad5-3d34-3273-ba72-d3abe6eae137.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     12025
IP address blocks:        74.206.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:b6:a0:cf:86:77:e2:46:ae:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=c7dc95fc-32e3-47c1-8080-f83580bbd8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f7:4b:bc:bd:ea:5d:82:d7:2c:ac:af:63:23:
                    2b:0b:78:d6:1d:be:fb:21:e4:89:57:82:c6:8d:8d:
                    6b:e9:4b:fe:f5:d3:25:c4:d9:4f:56:3b:1b:f0:f8:
                    27:d7:0a:c1:77:80:08:09:79:31:83:c3:5f:b8:cf:
                    ce:08:c9:79:9d:8c:ba:6a:23:78:13:c6:37:1c:65:
                    40:f6:6d:90:5e:64:98:0d:59:59:7d:78:76:73:0c:
                    29:be:b6:5c:83:cf:5e:71:64:3b:89:db:98:e6:f2:
                    ba:2b:5d:79:80:74:d7:34:e0:38:8f:3d:1d:e6:82:
                    55:a6:fa:33:19:9d:f6:fe:17:b6:3f:c4:e0:68:b5:
                    89:0c:f7:35:c9:2b:71:d6:de:b4:eb:f3:85:fb:00:
                    0c:5d:c7:57:3e:5f:8e:b0:d5:6e:92:2b:62:75:23:
                    1c:8c:f4:ca:f3:df:36:96:96:7d:84:66:03:e6:71:
                    0a:81:a3:32:a2:71:f9:1f:6e:18:37:73:2e:a4:0c:
                    5b:eb:1d:b1:b0:39:c6:94:5c:66:31:34:b8:be:3c:
                    b7:88:fc:1c:c9:5c:af:c7:51:ac:75:8b:b9:b4:48:
                    fa:2d:61:73:94:24:61:00:dc:b3:d0:5e:c2:b8:03:
                    a8:15:ca:a0:59:89:2d:3d:2d:42:57:76:2c:11:71:
                    2b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EF:B5:DB:70:67:61:E1:E2:CF:62:14:D3:94:C9:B4:CB:64:1D:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/7a033ad5-3d34-3273-ba72-d3abe6eae137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.206.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:92:a6:db:f8:50:b6:8e:30:28:a2:89:ed:7f:ae:a5:6d:03:
         48:11:0d:2e:37:94:cf:1b:8d:0c:e1:ab:d0:5f:a4:d5:d1:8b:
         9d:70:85:64:98:7e:26:13:d5:6c:68:f9:31:db:4b:74:e0:ba:
         c1:18:f2:72:d0:59:e2:4f:55:02:48:95:23:2b:11:88:7b:d2:
         7f:be:a2:0d:97:36:22:cd:07:e9:22:cc:2c:d4:19:06:c8:fa:
         14:43:1b:d2:6b:bb:2f:d2:20:43:54:64:d6:c8:43:ff:36:31:
         1d:45:6c:06:eb:71:dc:cb:1d:94:7d:3f:4e:b0:90:d2:8e:62:
         0f:b6:f3:24:2d:21:8a:d5:09:29:d0:04:43:92:9a:cc:3f:e7:
         8d:9c:b2:cf:7f:66:1f:bc:4c:c5:a6:52:8e:b1:48:c1:e6:b6:
         75:09:47:10:38:84:ac:df:8b:c9:aa:63:1a:c6:4b:41:92:ab:
         9c:bc:ff:8c:17:e0:24:69:f9:88:b3:92:ca:54:37:a2:81:8b:
         28:27:b3:d6:1f:7b:dd:9b:44:30:b4:b7:d1:de:59:f5:d1:3c:
         4d:98:21:f7:6f:cc:ba:83:4c:0c:e4:28:38:c5:5a:ff:47:6e:
         62:48:d7:f9:17:01:dc:b5:3c:5a:ba:65:68:98:2f:5f:d6:10:
         bc:64:f1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 06:16:31 2026 by rpki-client