Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/0fea7843-3a79-3120-852f-3282029f1a98.roa
File:                     0fea7843-3a79-3120-852f-3282029f1a98.roa (raw, json)
Hash identifier:          2MOIM29d621HCM0a2P/joUIEd/B+DayQTdHm361EXVk=
Subject key identifier:   C2:43:75:AB:97:7D:28:9B:82:77:23:A1:8B:84:DC:51:A7:4B:98:D0
Certificate issuer:       /CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
Certificate serial:       010D0C9F4328584E1E444CFBA7D7706F67EBF2C0
Authority key identifier: 9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/0fea7843-3a79-3120-852f-3282029f1a98.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33011
IP address blocks:        74.112.184.0/22 maxlen: 24
                          107.152.16.0/20 maxlen: 24
                          2620:117:b000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:4c:fb:a7:d7:70:6f:67:eb:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=f55b4803-7e68-48b4-97d1-827ff6bb3113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:96:46:f9:64:3e:ef:c8:e4:e7:00:0c:bc:d9:
                    46:70:8d:0c:b2:f7:a8:a8:56:fd:74:04:f7:52:43:
                    6e:6c:8f:2e:39:1f:16:32:08:c9:1b:c3:c4:0e:92:
                    2a:b4:fe:9c:e2:19:74:9a:62:91:fa:27:8b:40:ac:
                    59:06:cf:c0:19:a9:1f:3e:27:a1:e8:cb:e8:14:47:
                    bd:b8:3b:f0:07:d2:6c:79:33:5b:b1:1a:5d:23:88:
                    8d:d7:68:57:a4:35:3c:53:b9:ef:41:72:58:af:61:
                    5e:91:6b:80:4f:c7:2c:5f:31:2d:2a:85:25:fa:9c:
                    d7:f3:42:b0:84:95:d9:47:1e:1c:65:01:fe:94:2d:
                    8f:dc:74:20:38:40:79:3d:64:68:a2:cd:bc:13:a3:
                    7e:38:53:ba:52:bd:22:00:6e:1c:c9:56:cd:85:39:
                    e0:de:6f:87:79:04:c3:a5:f1:51:5b:d4:d9:6a:68:
                    42:1a:52:3a:3b:2e:45:e6:dd:ae:4f:42:db:09:27:
                    46:5d:66:08:cd:0f:a1:2f:ba:96:a7:36:2d:cf:8f:
                    5f:8a:11:57:2d:c1:52:7f:e8:51:e0:cb:f5:7f:a8:
                    73:86:27:a9:15:bf:7f:58:23:6a:86:4d:f9:fc:69:
                    e8:9e:63:a1:8f:39:f7:a2:ce:6c:3c:02:f0:78:4b:
                    b5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:43:75:AB:97:7D:28:9B:82:77:23:A1:8B:84:DC:51:A7:4B:98:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/0fea7843-3a79-3120-852f-3282029f1a98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl

            X509v3 Authority Key Identifier:
                keyid:9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.184.0/22
                  107.152.16.0/20
                IPv6:
                  2620:117:b000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:1f:df:11:63:9e:da:96:14:93:3e:11:3c:ed:49:f8:0c:32:
         74:00:de:ab:64:da:0f:fa:0e:0c:0a:38:75:f0:53:4e:d9:d4:
         9b:60:15:90:6c:68:c4:0a:1b:33:ee:3e:47:28:95:68:61:07:
         ed:82:e3:fd:b9:0d:6d:9e:21:82:cf:6b:30:f4:90:e3:b2:b1:
         ce:24:88:ae:f5:fa:8f:b2:c7:ea:ea:87:b2:3f:c9:ec:f4:b1:
         c6:1b:63:e4:e1:9b:69:57:13:55:82:aa:30:e6:49:b5:90:bf:
         01:ea:7a:e4:82:7b:62:9d:17:ca:db:a7:82:e6:d2:b2:da:68:
         83:10:25:15:5e:50:e5:1c:22:e5:7d:f5:34:c6:d9:c2:60:73:
         05:5a:de:70:dd:6f:8e:4f:f4:52:fd:6d:aa:f0:3a:b4:a5:7c:
         61:fe:ba:72:aa:44:ec:a0:cf:64:6a:c7:a4:ff:bb:90:54:44:
         f3:d2:f9:87:48:4b:ce:12:23:d3:c9:ba:ea:83:3d:02:7b:98:
         e1:15:16:8c:70:c0:63:78:d9:e1:d0:af:c1:df:d8:13:24:70:
         e2:f2:3e:e1:8b:b5:93:d2:1b:74:38:0e:b2:df:5b:ee:93:da:
         7b:36:0e:e4:c8:94:b4:97:62:05:38:6b:f3:61:61:d7:75:f7:
         9e:cf:af:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:21:50 2026 by rpki-client