Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89cf106a-8e2a-3da0-888d-450d338dbfdc.roa
File:                     89cf106a-8e2a-3da0-888d-450d338dbfdc.roa (raw, json)
Hash identifier:          nT6HOCBZzXo3qJz2kNTTQvzvFGMf6CzzdF22Z9hZT5M=
Subject key identifier:   B5:36:D8:28:03:52:23:8D:AF:7C:74:95:43:D4:0B:3F:44:43:AC:5D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3723BD43312111CE3672000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89cf106a-8e2a-3da0-888d-450d338dbfdc.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     33588
IP address blocks:        174.45.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:3b:d4:33:12:11:1c:e3:67:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=e632d213-4ec4-4940-a953-bcab2e824f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1d:1e:38:4d:67:7b:2d:c0:c9:0f:92:0d:61:
                    c7:22:a7:b4:13:c1:12:33:4b:aa:b5:57:30:2f:7b:
                    5e:bc:d4:c3:98:c9:a3:ae:f8:e5:50:1f:f3:dc:60:
                    64:4f:34:7d:98:57:19:c4:69:05:47:6b:57:59:23:
                    8d:99:40:3c:15:2f:f5:01:a0:2d:d3:04:01:26:cb:
                    a6:d5:27:be:df:a5:55:6a:80:54:11:d1:c0:8c:c0:
                    7e:0d:65:3c:80:54:d0:af:02:e5:9f:24:c4:d8:be:
                    93:fb:23:d2:a7:9e:e2:29:78:30:68:8e:73:3c:bb:
                    58:6c:22:2b:c8:40:7a:83:90:37:f1:a9:72:be:99:
                    6f:b7:1b:eb:87:ac:e9:ab:dd:e6:62:03:c2:fc:f6:
                    61:60:40:e6:20:44:c9:0e:d8:64:62:7f:e7:7e:32:
                    dd:a7:43:c8:e2:78:8f:5b:33:00:cd:e6:c4:ca:d3:
                    f7:32:48:76:f6:94:33:f5:ed:d7:48:86:5b:6b:d6:
                    c8:7c:b3:61:bc:1e:f4:e6:21:7a:13:5f:f0:62:be:
                    f8:63:67:20:11:ca:2f:c4:34:ac:6e:83:ee:ea:5d:
                    52:1a:3c:c9:ff:b9:03:0e:b9:78:17:44:15:1f:19:
                    37:96:11:f5:32:e6:1b:0d:3a:74:3d:71:c6:ee:fd:
                    0a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:36:D8:28:03:52:23:8D:AF:7C:74:95:43:D4:0B:3F:44:43:AC:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89cf106a-8e2a-3da0-888d-450d338dbfdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.45.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:7f:88:03:14:f6:9a:fd:6c:20:26:20:2c:63:67:dd:fd:ff:
         79:7b:7e:1d:54:c2:a9:a3:c9:52:7c:33:86:22:f6:c8:23:ac:
         ae:ae:20:66:ea:90:fb:6d:6f:3c:be:c1:12:4f:70:74:bc:02:
         24:a7:b5:c5:5e:3e:80:15:b7:af:8b:08:a8:e5:c6:c4:15:b7:
         e1:42:e9:23:21:ca:78:3d:53:4a:86:d7:92:20:6d:89:8c:4a:
         74:2a:83:ec:85:89:9f:d9:b1:1c:d1:f5:0f:22:09:e6:03:2a:
         62:b3:ea:87:86:8a:68:ee:43:8c:70:c2:f2:4f:6f:f2:18:5e:
         26:84:a9:6e:96:59:b7:5a:77:0f:31:d0:8c:a3:0b:c2:5c:af:
         84:73:36:e7:33:08:a8:3d:b2:2c:f2:a1:1f:28:ea:b9:20:ad:
         92:05:e5:e7:08:75:ff:73:2d:66:a0:78:88:83:dc:54:c7:1d:
         5a:cb:ab:af:d1:a7:16:c6:f5:35:d1:eb:7f:b2:6a:14:05:d1:
         d9:4c:c7:27:da:48:5d:5f:eb:74:5f:e5:42:6c:c3:ca:4d:87:
         69:03:8d:7b:86:99:8e:c3:61:bd:65:ab:8f:73:51:89:e0:c6:
         89:07:d8:fd:20:80:8d:8f:2f:02:46:d6:cc:d8:0b:18:e7:c4:
         4f:64:7c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:13:31 2026 by rpki-client