Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/b236c1d5-c527-3f4f-a337-aab9a45eda0e.roa
File:                     b236c1d5-c527-3f4f-a337-aab9a45eda0e.roa (raw, json)
Hash identifier:          e8bTzFh0opyt9BiBt/zS8hFHZOEkIU4gb+38LiURfK4=
Subject key identifier:   FD:4F:F5:55:C1:DF:92:5F:06:F7:47:38:99:90:C0:94:38:29:EE:20
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584EBC770AD1C5BE9CB1049AD0E0
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/b236c1d5-c527-3f4f-a337-aab9a45eda0e.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     1239
IP address blocks:        74.91.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:0a:d1:c5:be:9c:b1:04:9a:d0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=f0e885fa-682b-4212-b7e2-e2099bfaabc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b6:4a:15:d6:a9:d4:8b:7a:f2:3a:c6:5c:78:
                    0f:81:96:71:58:8d:17:8b:26:e7:8f:d9:62:f3:71:
                    65:75:e7:22:78:dc:bf:c9:d9:e1:7e:44:ad:bb:a2:
                    83:88:b2:f0:75:4c:05:8b:d9:ca:0f:d3:7c:aa:e7:
                    15:c1:f5:db:d4:85:2d:da:57:d9:5b:50:f9:28:2b:
                    2a:c7:f4:69:81:13:38:7c:4a:70:4a:d0:4c:9f:ba:
                    7e:1e:95:ab:67:5f:71:cd:62:b5:e4:8d:62:3c:a9:
                    77:6c:2e:01:0c:78:1d:78:7a:58:85:d5:39:89:46:
                    10:c2:ce:30:4d:0d:0b:61:54:40:82:e5:48:a1:b3:
                    99:5f:b3:a4:f9:7d:8a:93:9d:aa:97:f0:93:84:b1:
                    4a:6e:ee:71:81:e9:5a:52:dc:91:be:23:18:29:06:
                    8e:53:f4:36:58:db:f2:f3:7b:10:09:f1:c6:79:9c:
                    fd:dd:97:65:15:02:85:64:49:38:20:ef:3b:cf:5b:
                    4d:8b:bc:07:fe:f1:f0:90:5a:36:62:0f:23:49:75:
                    89:75:41:c1:77:17:5c:f2:fa:f3:4f:21:6f:ab:1a:
                    83:30:3a:3c:f9:5f:90:04:6b:b5:3c:52:9d:af:cf:
                    76:d5:70:f3:bb:26:5a:1d:dd:22:0a:5c:b3:eb:e0:
                    83:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4F:F5:55:C1:DF:92:5F:06:F7:47:38:99:90:C0:94:38:29:EE:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/b236c1d5-c527-3f4f-a337-aab9a45eda0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:97:a6:70:2d:b3:ba:5c:9e:ba:cf:78:fb:30:2e:aa:4c:99:
         cf:2f:ef:0d:e1:a1:20:51:37:47:ca:2f:f5:65:b6:a7:99:4e:
         24:a6:e0:fe:67:27:23:cf:17:b8:f3:68:87:5d:68:48:7c:37:
         56:69:f7:ad:a5:9e:99:e6:b6:7d:68:50:25:77:7e:c3:7c:77:
         73:df:ea:4b:00:cb:0c:d8:a7:5b:ca:5c:58:b4:a6:47:79:57:
         45:93:55:73:87:d6:90:66:92:53:b5:a2:41:91:c6:75:bb:9c:
         21:c7:16:53:5a:58:24:42:3b:10:3e:72:e8:26:d8:83:01:fc:
         39:e6:97:9e:70:35:60:d9:00:22:b0:85:a0:ed:9c:18:c8:30:
         a0:56:ab:68:95:de:86:89:d3:f1:a2:c8:72:fc:40:d8:8d:1e:
         26:31:3e:c8:0d:1f:18:5f:6b:3a:b1:3e:30:1d:df:1e:4c:cb:
         5a:52:37:49:2b:e4:b5:b7:d5:a3:b1:b9:9c:68:71:73:5f:39:
         6f:b1:9c:51:60:9c:5e:c9:2c:33:d5:a8:23:b2:cb:b8:ae:ba:
         58:73:02:78:23:22:81:cd:f2:f0:23:83:f0:87:a0:55:be:47:
         ed:19:9f:05:1d:ee:64:0c:1e:62:72:ef:99:6f:8f:d9:ca:dd:
         0f:f7:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:12:10 2026 by rpki-client