Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22/e2b3aed4-c831-3bd9-836f-207af6434ee3.roa
File:                     e2b3aed4-c831-3bd9-836f-207af6434ee3.roa (raw, json)
Hash identifier:          WdY/oaw7X7Xl5HoV2agmHR+vpCOU1RNR1Y2Uk4DjcYM=
Subject key identifier:   8C:E1:7C:4D:B5:1B:DA:20:6B:66:77:10:BF:D1:1A:E1:D8:5C:35:07
Certificate issuer:       /CN=3c372d7c-197a-4caa-82d9-dc676d91ea22
Certificate serial:       010D0C9F4328584DE150A6EBC225AE9C34EA9F00
Authority key identifier: 28:63:7F:9B:FC:0B:AE:A9:AE:A4:D6:3A:F0:FE:88:8F:CA:C6:06:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22/e2b3aed4-c831-3bd9-836f-207af6434ee3.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     20477
IP address blocks:        74.206.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22/3c372d7c-197a-4caa-82d9-dc676d91ea22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22/3c372d7c-197a-4caa-82d9-dc676d91ea22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:a6:eb:c2:25:ae:9c:34:ea:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c372d7c-197a-4caa-82d9-dc676d91ea22
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=4812825f-568a-47a5-81b5-03f13cb03c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bf:3e:b6:05:e5:0a:37:d3:72:d2:ea:7c:07:
                    ca:53:fc:f5:df:9d:ac:d1:10:48:94:c5:d2:b7:a8:
                    14:43:bf:3c:86:f8:fb:fa:85:8c:19:72:ea:85:f8:
                    6c:df:b0:94:d5:48:64:7b:a3:b9:0a:70:65:7e:d5:
                    4b:88:a2:67:69:39:78:10:4e:3f:d5:b8:99:9e:8d:
                    99:3a:04:87:fc:04:72:a5:c0:78:9a:b6:20:9c:59:
                    b5:85:79:41:bf:a5:eb:ec:be:58:df:24:d7:87:55:
                    63:e1:a6:fd:94:49:8c:cc:bc:61:69:21:2c:23:3b:
                    2f:81:34:3b:44:58:d8:19:8c:a6:a9:6f:7f:ce:13:
                    ec:39:63:a7:fe:a7:f9:8f:66:dc:2e:c5:47:71:67:
                    21:b6:64:22:ad:c9:1d:c5:75:97:16:ff:0d:71:e8:
                    6b:70:aa:6a:6e:79:09:6e:1c:f6:82:07:63:6c:24:
                    bf:19:f2:b4:f6:a3:70:58:7d:ad:d4:65:ca:70:76:
                    f3:af:40:e9:fb:6f:0a:91:0a:27:22:59:8e:66:9c:
                    46:01:8a:eb:48:58:db:08:e1:09:fc:8f:06:3f:ad:
                    d0:e9:7d:cb:84:fe:c1:01:f5:eb:46:d1:3e:47:a5:
                    ef:11:26:90:e1:76:bd:ab:3c:1e:a4:93:21:b0:6d:
                    e2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E1:7C:4D:B5:1B:DA:20:6B:66:77:10:BF:D1:1A:E1:D8:5C:35:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22/e2b3aed4-c831-3bd9-836f-207af6434ee3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22/3c372d7c-197a-4caa-82d9-dc676d91ea22.crl

            X509v3 Authority Key Identifier:
                keyid:28:63:7F:9B:FC:0B:AE:A9:AE:A4:D6:3A:F0:FE:88:8F:CA:C6:06:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c372d7c-197a-4caa-82d9-dc676d91ea22.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.206.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ca:00:19:94:ff:ee:1d:01:5d:bd:29:aa:6a:67:b7:16:f8:
         00:35:9f:5e:a9:26:fe:43:95:ed:6f:59:bf:d8:59:13:ec:b3:
         dd:af:f2:cb:26:e6:67:9c:81:7e:1f:a1:27:69:1f:08:3e:56:
         7c:fa:88:34:1f:94:81:8e:15:0c:99:23:3d:09:e8:9f:a9:dc:
         8b:66:09:cf:4f:89:d0:b7:54:b2:50:90:0d:c0:e8:54:60:52:
         2a:91:e3:79:9b:2b:3a:0d:68:97:6c:6a:36:53:af:0c:29:56:
         b0:c0:48:fa:00:e5:5e:9c:cd:cb:04:73:27:e7:da:e7:c8:4b:
         b2:cc:9c:fd:98:ae:f2:9b:6a:86:4c:31:62:82:be:c6:47:6b:
         d5:4c:bd:3b:f8:79:b1:d7:47:18:8e:b0:cb:77:c2:d4:5c:c9:
         32:5f:c8:be:dc:98:8a:ea:de:d8:e2:06:5f:bb:45:73:9d:9f:
         2a:87:79:98:88:dc:fc:43:52:6f:d8:a0:95:f8:ea:e3:2c:76:
         d7:77:27:94:49:42:6e:ca:54:f2:68:d0:4c:ac:63:4b:15:ba:
         da:5f:08:90:a2:6b:34:31:10:b7:d8:df:7c:a4:8f:0d:ea:ea:
         3e:10:31:8c:3d:e0:bf:e5:45:41:9b:76:47:18:ab:19:b0:e2:
         80:b0:1f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:43:09 2026 by rpki-client