Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/8e5194c7-1d25-31b6-871a-d1c911589f64.roa
File:                     8e5194c7-1d25-31b6-871a-d1c911589f64.roa (raw, json)
Hash identifier:          lv2vt1+/lGI6vRFPZ7MbAFE+IBXOJQU4rExOpvVGqiw=
Subject key identifier:   3B:B2:15:F9:7E:3D:4E:BF:5B:7A:10:34:DB:F5:C5:B0:0C:13:78:78
Certificate issuer:       /CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Certificate serial:       010D0C9F4328584EE04056DBED92E898D7CA9C80
Authority key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/8e5194c7-1d25-31b6-871a-d1c911589f64.roa
Signing time:             Tue 18 Aug 2026 08:39:13 +0000
ROA not before:           Tue 18 Aug 2026 08:39:13 +0000
ROA not after:            Mon 16 Nov 2026 09:39:13 +0000
asID:                     20473
IP address blocks:        74.63.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:40:56:db:ed:92:e8:98:d7:ca:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
        Validity
            Not Before: Aug 18 08:39:13 2026 GMT
            Not After : Nov 16 09:39:13 2026 GMT
        Subject: CN=f165bbf5-cced-439e-8545-85d98d4064bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:de:20:0a:e1:c7:70:cb:fe:b4:24:5b:bd:fe:
                    99:7d:59:87:ac:fe:65:56:42:5e:f9:37:85:6a:0b:
                    3b:9d:26:13:03:f9:5b:57:14:70:97:ba:aa:03:ac:
                    d9:93:d7:12:ab:4f:cf:ba:88:62:05:08:dc:28:79:
                    61:09:19:a6:6c:5f:d3:4a:ba:17:44:85:3b:45:8d:
                    80:be:5f:a2:86:45:98:59:eb:a7:65:d0:c7:ed:7f:
                    3d:1a:4d:d7:be:fd:ab:73:68:60:f7:7c:29:c4:69:
                    53:af:54:c0:dd:e1:b7:61:bd:70:d1:82:de:69:fb:
                    7b:19:f2:b5:e7:9b:38:9f:14:58:9b:c3:fb:67:3e:
                    71:59:82:11:e2:93:a0:fa:2b:ef:1f:32:5b:dd:12:
                    46:c2:86:95:95:d0:e9:e5:1c:c9:85:74:6c:43:5b:
                    e6:2c:ce:fe:74:21:0d:26:d1:ae:67:04:19:64:38:
                    88:d7:a8:c6:b3:0d:25:2d:3b:83:c5:a9:9f:f1:f1:
                    95:fd:62:b8:fa:f2:91:b8:59:db:33:f3:f3:d9:d8:
                    6f:60:7d:aa:b7:51:72:bb:f6:f0:72:50:1a:dd:c3:
                    11:31:d7:a4:a4:4d:04:c3:03:a7:3c:56:f6:b9:f8:
                    b5:37:7c:54:04:9a:67:cc:18:4e:a8:a7:ca:f6:bb:
                    4e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B2:15:F9:7E:3D:4E:BF:5B:7A:10:34:DB:F5:C5:B0:0C:13:78:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/8e5194c7-1d25-31b6-871a-d1c911589f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.63.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:72:d5:9e:e6:58:20:77:e1:81:45:dd:a4:19:e3:1f:6e:59:
         d7:ac:0d:3e:56:8b:90:cc:a8:f3:26:0f:2e:3a:4e:f4:d0:9d:
         79:6a:d0:12:ce:be:c6:68:1b:a6:44:76:70:c1:42:9b:10:6e:
         6f:11:e5:41:05:4d:2d:8f:a0:c8:45:03:61:b9:0f:cd:e0:dc:
         ab:54:51:f8:76:2f:ef:ad:bc:2b:b5:95:ce:76:aa:8b:01:12:
         7b:cc:c4:92:b3:27:fb:36:20:b3:4b:02:a8:16:98:d0:7c:2f:
         2e:5f:dd:5f:17:7a:f2:79:14:59:51:a7:98:16:c6:41:d4:b5:
         05:62:76:9b:b2:83:b8:03:bf:1e:db:70:07:92:d3:17:0f:d8:
         eb:09:6e:88:77:10:de:8e:e4:57:61:4b:6e:46:5d:e5:e8:f1:
         44:1d:a5:e1:c7:3b:2b:19:eb:04:1a:57:c0:80:4e:e0:db:d4:
         33:25:33:d9:94:db:01:34:69:af:25:4e:d1:ef:3a:4a:41:8d:
         b5:7a:07:5e:6c:9d:6b:84:fe:9c:bc:2b:a0:23:0b:41:d0:90:
         58:5a:ba:b8:ce:75:23:36:b8:8a:60:6d:e6:0d:27:e5:f9:a4:
         b5:a4:7b:ca:74:9d:5e:e1:53:b7:bc:2e:2c:1b:27:14:05:63:
         8f:9c:bb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:23:18 2026 by rpki-client