Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/4a0a8425-216c-35cc-813a-362b9fe28985.roa
File:                     4a0a8425-216c-35cc-813a-362b9fe28985.roa (raw, json)
Hash identifier:          AXJ2jgcdGIPZ8FXlFQRghFKUWqObVOv7b5nNdsfHPdQ=
Subject key identifier:   61:1A:96:84:2E:1D:9A:27:E1:4D:1D:04:6F:EE:87:BE:CE:33:ED:7A
Certificate issuer:       /CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Certificate serial:       010D0C9F4328584EA7876E4EF44FB7815D558200
Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/4a0a8425-216c-35cc-813a-362b9fe28985.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19503
IP address blocks:        74.113.149.0/24 maxlen: 24
                          2620:7d:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:6e:4e:f4:4f:b7:81:5d:55:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e0e85369-d841-40cb-9691-b95e7d2a9473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:37:e6:d5:42:0d:03:bb:8c:1d:98:e9:7a:4a:
                    b5:99:1d:65:0d:07:9f:69:60:15:32:31:d8:27:52:
                    76:20:8e:88:6b:99:eb:6e:36:8b:e8:35:49:be:62:
                    c5:7a:dd:c4:f1:e3:0d:ed:7c:1d:89:ff:b7:af:ee:
                    6b:10:cc:55:f0:cf:9c:3c:88:8e:6b:a7:a5:cd:76:
                    35:c7:c8:bd:d1:41:f1:22:0a:9d:61:94:de:4c:ec:
                    e4:39:32:d9:57:fb:bc:bb:1b:8b:5e:53:2f:60:5b:
                    02:2a:89:17:e7:61:5b:33:2a:f7:aa:5b:23:87:13:
                    80:3c:57:b7:75:26:17:53:65:79:2e:28:be:ad:13:
                    d2:9c:69:e9:0e:00:b3:ef:74:4c:cb:13:d5:65:44:
                    0e:e6:72:4f:ee:6e:94:08:99:14:f8:ff:58:e1:02:
                    86:09:08:30:d9:55:32:24:f6:6a:24:b1:66:5f:7d:
                    c5:04:a9:52:27:9c:83:ac:34:87:ad:7a:1e:21:25:
                    c2:af:59:5f:86:67:f5:10:6f:44:f8:20:e6:e5:b8:
                    71:b5:81:db:df:7a:22:5d:e6:b4:f6:d8:42:5d:ea:
                    1d:4c:77:fb:bc:e2:bf:5d:3f:a1:3a:f9:f1:44:dd:
                    c5:91:3d:88:38:93:da:22:80:2c:c1:6f:2c:bc:bb:
                    a7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1A:96:84:2E:1D:9A:27:E1:4D:1D:04:6F:EE:87:BE:CE:33:ED:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/4a0a8425-216c-35cc-813a-362b9fe28985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl

            X509v3 Authority Key Identifier:
                keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.149.0/24
                IPv6:
                  2620:7d:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:5b:0d:8d:10:78:cd:e3:23:08:ed:3f:c8:9c:b8:a3:0e:69:
         42:bd:14:e5:40:b7:a9:3d:8a:b1:d1:4b:0e:08:97:93:19:10:
         bc:44:20:e6:d8:4d:b4:41:2e:cd:c2:91:0b:19:12:a9:3a:90:
         e7:f4:5e:bb:46:5c:49:fc:52:89:8b:17:82:79:4b:58:46:87:
         6d:9f:63:64:ad:93:45:ad:33:99:f4:7b:12:3c:91:77:7e:ea:
         f0:92:e2:b3:fc:70:b7:b8:a0:37:00:87:2e:fd:8c:64:f1:a3:
         7c:ca:77:90:f9:cc:92:ce:73:0d:f9:a2:90:9c:ae:9f:14:46:
         1e:2b:c5:10:53:88:2b:e1:25:27:f3:08:1f:16:b5:0e:8c:81:
         2e:00:c0:05:29:f9:81:59:a1:12:eb:6a:0d:71:3a:48:24:e4:
         69:3b:ce:49:cc:4e:9f:f2:0b:05:7f:43:bd:1c:46:1e:d1:e7:
         14:9c:d9:9c:14:5f:98:5b:b8:32:65:32:78:0f:d2:be:85:eb:
         c2:4d:2e:ce:39:44:b3:a1:81:08:09:1b:10:a7:f1:e9:76:08:
         e6:8e:8d:27:1e:3f:88:31:a3:8e:92:66:36:14:3b:8a:f6:eb:
         85:15:82:02:d1:bf:bf:20:3b:76:99:96:7d:35:9d:09:e6:70:
         c6:63:86:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 07:09:36 2026 by rpki-client