Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c96598e-60df-3680-a5d8-c75843d67211.roa
File:                     2c96598e-60df-3680-a5d8-c75843d67211.roa (raw, json)
Hash identifier:          zMS1QHZXlbud07uxizBcM1RmHVG+P/O/G1q+i45LoHA=
Subject key identifier:   0A:E9:76:01:CE:07:45:C4:79:96:CA:15:48:EC:FA:B9:EB:22:30:7E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E9EAFFED37E5EF92ED3886D00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c96598e-60df-3680-a5d8-c75843d67211.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     22773
IP address blocks:        174.74.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:fe:d3:7e:5e:f9:2e:d3:88:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=92211a01-12f7-45a1-9a4e-09038d2918a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:73:72:18:27:e7:44:71:b6:82:3a:b8:7e:12:
                    80:0c:c5:5c:c8:0a:eb:bf:b1:bf:f3:c5:65:29:24:
                    54:91:54:5c:b8:4e:f4:86:c2:ea:c1:cc:6f:10:49:
                    ba:30:ac:f6:64:07:9b:90:a0:d4:14:a8:2d:ea:d4:
                    a1:2e:e7:e5:a0:51:0c:8a:02:95:50:76:5a:91:7a:
                    1d:d4:3f:2f:ab:6e:cc:b7:03:5f:4e:aa:00:84:e2:
                    dd:51:33:bc:34:9c:6a:5d:4a:a3:d3:85:60:1e:f1:
                    ff:e1:12:16:93:ab:8b:46:df:6e:95:99:84:ce:c9:
                    a5:ab:13:70:ba:2e:eb:92:e5:b4:ce:a3:29:1c:4b:
                    42:8b:1d:f3:3f:23:0c:40:ab:ee:d0:48:11:11:47:
                    66:a4:52:5c:be:13:e6:3f:4a:a4:91:76:db:77:13:
                    c2:41:dc:5e:35:49:ac:99:2f:f5:7b:fb:5e:3d:51:
                    b6:aa:b8:6a:35:fc:f7:1a:9e:82:a3:1b:3d:ca:9f:
                    9e:66:e7:cb:7c:5e:00:b1:77:36:75:f4:7a:96:44:
                    55:57:b6:8c:a8:c4:b0:4a:4c:3e:d4:0f:1c:ff:3a:
                    4e:87:2f:91:d4:df:5e:d7:6f:2a:69:c1:9f:77:10:
                    b4:9a:1e:fc:8a:f9:0d:be:1d:7d:45:5d:8d:48:d4:
                    68:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E9:76:01:CE:07:45:C4:79:96:CA:15:48:EC:FA:B9:EB:22:30:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c96598e-60df-3680-a5d8-c75843d67211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.74.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:8c:1c:81:df:35:03:1c:96:92:1d:46:09:72:35:11:5c:6c:
         57:eb:7e:37:9d:78:b7:04:de:08:4e:b7:5b:ff:bf:0f:56:ad:
         79:34:04:7e:ab:1a:f7:2b:81:31:f5:cf:3d:dd:c0:f2:f4:e7:
         44:48:28:c4:dc:62:9e:f9:43:08:ac:07:6b:16:59:06:2f:b9:
         63:81:ba:10:eb:b3:e0:65:91:47:68:f6:af:75:59:d6:f1:87:
         1d:2f:6e:31:6b:cb:6d:76:13:a7:d3:9b:e8:ba:52:cf:99:0a:
         70:a9:dc:b1:3c:4a:8d:03:78:fc:a1:84:e7:ed:d0:a8:83:b1:
         8b:12:81:1e:bf:57:2c:80:b7:b8:47:4d:cc:a1:33:49:df:ef:
         66:67:b7:ac:c1:93:c2:24:80:b7:3b:50:34:07:e1:ec:f9:60:
         d2:68:e4:e7:72:5c:25:77:12:55:66:b4:2a:f4:50:25:b5:70:
         45:d6:6e:b8:27:97:cc:91:f7:4b:af:24:a9:95:a7:af:16:d5:
         1c:ba:2c:90:7e:8e:dc:06:10:da:30:7d:d1:ea:ad:9b:f7:d9:
         f3:01:fa:df:61:f3:d5:1d:9e:01:49:8f:23:af:83:81:53:76:
         e3:d2:2d:ab:95:80:b7:28:34:76:7c:6e:04:73:b8:46:0a:87:
         33:f2:7d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:39:31 2026 by rpki-client