Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/53c3dbdd-0c59-3fd9-a126-eed617f551ba.roa
File:                     53c3dbdd-0c59-3fd9-a126-eed617f551ba.roa (raw, json)
Hash identifier:          UXUSgY5OIgVC4zMhZ7ICq5znf7rV/qSNKF4e/2X/ZE0=
Subject key identifier:   BB:8F:AF:5F:F3:49:FF:D7:44:DA:3C:26:48:54:CC:A5:2F:5F:65:87
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655D9007CD7CCCB63EB25EE0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/53c3dbdd-0c59-3fd9-a126-eed617f551ba.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     10796
IP address blocks:        74.87.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:90:07:cd:7c:cc:b6:3e:b2:5e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=4ebb0d2f-4cc0-41ea-af38-e3170301ebaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:ef:8b:6f:ff:cc:c2:6f:f7:b9:96:49:51:
                    b9:c8:74:ba:88:5a:7b:8b:c5:f2:0f:05:f5:5d:a8:
                    39:85:fa:0c:9f:7b:18:42:0b:46:25:50:a1:f2:6a:
                    b6:48:26:64:f0:02:21:f9:a4:f5:90:da:72:c2:ab:
                    89:72:92:16:e7:0d:53:81:2d:6c:c0:ba:7e:97:47:
                    cb:11:2b:31:be:c4:7c:00:e2:e3:a2:88:ab:8e:fd:
                    27:86:8e:2e:08:d8:95:c1:59:e8:69:9e:41:30:b9:
                    1b:00:44:af:4f:dd:11:3b:0b:88:98:87:56:da:35:
                    b5:b8:43:f3:37:f4:e0:3c:f4:fd:71:af:13:fb:83:
                    07:10:33:fa:85:d6:83:de:7b:57:66:75:fe:b6:cb:
                    4d:45:2e:66:f7:69:d2:c9:75:d5:14:15:06:42:37:
                    49:62:22:1d:e6:f4:81:01:2f:c4:d0:6c:77:cf:19:
                    63:f7:7d:15:f8:05:57:61:39:47:cd:7f:dc:67:9d:
                    86:b1:2b:97:22:6c:73:9a:37:9a:98:15:31:b8:a1:
                    09:d1:c0:9d:2d:fc:68:a7:21:30:f4:c9:a4:94:f2:
                    fa:c8:e8:84:9c:bd:91:64:04:9b:09:54:ea:ab:ed:
                    d4:b6:28:8c:b4:b6:8e:2d:54:d6:ec:75:0e:f6:3f:
                    0c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8F:AF:5F:F3:49:FF:D7:44:DA:3C:26:48:54:CC:A5:2F:5F:65:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/53c3dbdd-0c59-3fd9-a126-eed617f551ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:a1:39:eb:f8:99:7a:89:c6:2d:22:02:3a:7c:d9:be:77:2f:
         8f:7d:77:fd:94:86:ee:08:0d:9f:b4:c1:31:f2:97:6d:5f:fa:
         86:df:c5:d0:8d:c4:e2:4d:8d:ee:d2:ff:38:08:c3:e2:95:33:
         43:31:56:d1:25:e7:fd:5a:8c:5e:49:86:c0:f4:93:a0:31:cf:
         9d:65:3e:de:cd:ab:d2:d1:6c:70:7e:3f:eb:c8:d8:41:3e:07:
         41:e7:ba:94:13:fa:6b:14:8a:d7:a0:ba:9a:72:11:c3:2a:3c:
         10:06:f5:ac:e0:4f:03:b8:20:84:4b:08:07:d2:e4:73:cf:6f:
         d7:94:b4:04:0c:18:66:8f:94:0e:46:e3:2a:7f:83:c6:2b:9d:
         eb:12:07:ae:6e:62:79:db:78:bc:1f:37:4d:bd:5e:2b:e7:74:
         ea:2a:29:ee:3f:55:c2:65:b3:6b:7d:e8:d5:27:fe:35:e5:e0:
         71:db:06:28:a8:7b:12:8b:37:57:2b:37:bf:94:61:d9:a9:d8:
         25:ea:7b:b3:c2:0f:d4:f7:86:7e:db:27:e3:a3:87:83:5b:96:
         54:b5:1e:84:6b:ce:ef:9b:3f:93:4f:8e:e7:e4:7b:c3:47:e2:
         96:e3:2f:f4:0a:5d:17:7e:f1:4a:6d:72:25:9d:cd:27:39:a3:
         40:d9:08:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:10:59 2026 by rpki-client