Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/897e8122-e29c-392b-b8e5-76848c850458.roa
File:                     897e8122-e29c-392b-b8e5-76848c850458.roa (raw, json)
Hash identifier:          yffU0rxKHVhnY80W685PfwvakhkfJxtgKhUj0AVtNUs=
Subject key identifier:   75:7F:0F:1A:25:7B:95:06:38:FB:89:1A:A3:04:E5:3A:95:CE:D5:75
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584CEE8CC3F4E29D2EF35914F300
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/897e8122-e29c-392b-b8e5-76848c850458.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     46606
IP address blocks:        74.91.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:c3:f4:e2:9d:2e:f3:59:14:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=327e5929-adb0-4dae-bc5c-de088a1e5757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f5:db:8c:80:c5:bf:f7:82:5c:a8:1c:f5:91:
                    96:2b:59:83:91:83:d2:49:3e:b9:bd:d9:93:49:1d:
                    7c:c3:3a:7c:c9:c9:36:77:f0:86:25:02:87:20:0c:
                    3d:eb:f5:d7:34:91:96:c1:c6:28:92:31:57:e5:57:
                    47:57:b2:6f:63:88:8b:be:ad:c8:c0:f4:7d:f4:31:
                    31:e3:f7:5f:ec:bc:eb:ae:a4:a8:08:1a:6c:c8:91:
                    94:f7:a0:9f:9b:dc:c2:ce:03:aa:7e:0e:d8:ef:dd:
                    b3:73:ba:f0:3c:e9:40:fc:3e:e4:2a:31:91:4e:a8:
                    66:21:8f:28:d6:09:f9:20:2d:f8:7e:4c:86:30:fb:
                    81:8a:2b:5f:aa:c6:66:9b:cf:e8:77:9e:94:4a:5b:
                    8e:40:3b:aa:69:10:42:aa:cf:83:db:26:51:cb:7d:
                    3c:5c:27:6c:8f:96:a3:9d:99:79:aa:65:47:6b:2b:
                    5e:92:2d:77:c0:52:b5:87:48:66:04:6e:af:47:f9:
                    6d:8a:b7:c2:b3:1e:47:fa:56:7c:28:ce:10:fc:79:
                    44:3a:d6:84:25:5d:f8:5c:59:e8:fb:75:de:4f:56:
                    74:67:22:5e:d4:a0:cc:4a:00:90:cf:58:82:fd:39:
                    63:4d:ac:5a:41:b2:20:6a:6d:a4:c0:37:d5:b9:68:
                    79:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7F:0F:1A:25:7B:95:06:38:FB:89:1A:A3:04:E5:3A:95:CE:D5:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/897e8122-e29c-392b-b8e5-76848c850458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:c7:b6:7c:41:77:c6:4d:6b:20:0b:0d:89:7a:ad:f1:e7:ee:
         1e:42:30:bd:eb:78:c4:ac:a9:2d:26:2b:5d:10:93:d9:43:9b:
         96:a2:fe:58:56:eb:eb:e3:19:d5:86:18:b2:19:26:99:92:44:
         13:ef:d6:93:f4:be:77:fc:b2:02:c8:06:df:b7:67:e2:e6:56:
         67:7c:d5:6b:42:24:39:e0:ae:c1:d4:4a:59:8f:c6:43:a1:7b:
         5a:9e:af:68:e1:e6:89:b9:fb:06:4b:01:c0:5b:55:c8:a6:cb:
         5f:6e:4b:84:bb:cf:db:92:f7:41:23:85:e8:c8:45:4d:a1:e1:
         b3:f7:86:2e:70:93:6a:17:0a:8f:7b:fd:c2:9b:b0:d1:96:33:
         56:a2:90:64:2e:f8:e3:39:9e:c0:f3:a8:a9:d1:57:98:a5:43:
         d1:fa:02:87:7f:74:f7:41:1a:11:7d:35:5b:91:87:48:e8:aa:
         1a:a0:9c:b7:e2:f2:b1:f3:be:82:dd:dd:1d:98:f5:e6:86:ec:
         7b:ae:2d:07:f2:4b:0a:ef:6c:cc:5a:97:ae:14:60:1d:13:88:
         c3:cc:45:26:27:01:ef:9d:09:04:67:40:6e:a8:f5:b4:a1:6e:
         f3:2e:30:33:16:a2:e3:35:bb:b0:c2:a4:5e:45:9f:75:aa:22:
         60:d6:32:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:49 2026 by rpki-client