Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5be95a1-2ace-3d70-8c21-18d0513e18b1.roa
File:                     c5be95a1-2ace-3d70-8c21-18d0513e18b1.roa (raw, json)
Hash identifier:          hvoQNlYLBJimJ2HyLKAH9beEgQr7qwRH6f3RDbBJeog=
Subject key identifier:   3C:0C:79:A9:84:70:54:3E:17:96:5B:78:76:A9:9F:82:B4:DC:9F:DE
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA160F56A41F9E0D2A5426100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5be95a1-2ace-3d70-8c21-18d0513e18b1.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     10796
IP address blocks:        74.87.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:f5:6a:41:f9:e0:d2:a5:42:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=57088686-13bb-4d43-adf7-64f320f77e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ac:23:21:1a:41:74:4c:cd:4a:cf:75:cf:25:
                    bc:7c:08:37:91:22:4e:ac:e0:29:23:37:85:47:6f:
                    ea:98:78:69:35:cd:1f:37:a9:88:94:b3:02:a7:d3:
                    b5:8b:88:76:c3:18:93:77:11:4e:e2:0a:e1:6c:00:
                    a1:09:7c:75:84:bd:1f:d9:c1:71:ba:2c:1d:b2:5e:
                    c2:70:03:cd:ab:28:84:dc:87:5e:f7:ff:ce:b2:34:
                    91:17:0e:e6:80:4a:a2:9b:ed:04:4a:91:7e:6e:52:
                    6c:59:d1:d9:f1:9c:82:a4:09:04:dd:b6:fc:eb:26:
                    a5:77:7e:9c:6d:5e:09:ff:83:a1:e6:c1:59:f7:bc:
                    54:0d:87:94:17:ae:c5:b0:05:d4:72:30:4d:b3:41:
                    f4:68:df:87:50:c7:2a:4c:82:25:d0:04:09:06:e8:
                    18:e8:66:b0:cd:b6:80:e4:14:43:54:ed:38:64:d1:
                    30:2e:d7:1a:04:7c:f8:52:7b:ae:74:56:de:3e:d0:
                    b9:85:35:45:9f:f3:b6:d0:98:90:0b:0a:96:31:c1:
                    06:1a:f8:a9:78:c9:ba:64:c5:53:d1:39:62:2f:be:
                    74:b4:4f:ae:9b:fc:59:d9:49:1a:13:9e:d5:21:bb:
                    fe:49:a7:a7:8e:e7:8a:b0:f2:70:ad:68:a8:ff:84:
                    37:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0C:79:A9:84:70:54:3E:17:96:5B:78:76:A9:9F:82:B4:DC:9F:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5be95a1-2ace-3d70-8c21-18d0513e18b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:98:72:fb:71:ab:f3:e3:16:1b:39:82:cf:26:d6:b7:86:3b:
         ff:3b:9e:0d:8b:57:49:eb:72:27:12:8c:87:99:99:a9:32:1f:
         ca:60:a6:2d:30:d3:10:31:dd:b9:01:8b:ab:9a:cc:23:59:da:
         d4:dd:4d:cb:e5:ca:e5:53:ed:ed:ed:a8:2b:ea:db:16:bc:d6:
         f5:bb:04:21:17:93:e2:4f:a9:3f:bd:82:57:be:12:2a:ba:66:
         0a:f0:cf:54:84:ce:bc:a7:90:e1:22:d5:4e:2d:ee:a9:7b:cf:
         b5:d0:72:30:18:b6:49:b5:aa:ef:cf:cc:d6:15:80:d1:68:58:
         12:89:c8:fc:2d:3a:a9:02:49:8f:93:fe:d9:a9:97:53:6e:75:
         16:9d:fa:10:7e:c9:06:74:42:9c:0f:2f:a2:ff:78:92:d7:dd:
         4b:ad:ec:46:1a:b7:8b:66:7c:23:26:17:33:f8:9a:ba:ea:d1:
         42:b5:8d:53:ec:08:5f:b8:38:42:ad:97:e3:ab:7e:b9:f3:40:
         52:51:0a:00:f4:b3:63:77:c6:48:a0:58:2f:59:9f:35:44:8a:
         7d:5c:b0:ad:63:1b:16:52:84:16:46:ee:40:c4:4f:e2:e5:84:
         12:e7:f1:9e:ce:f9:a4:75:ae:d0:f3:f6:6c:be:c9:90:8f:22:
         6f:ba:99:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:23:42 2025 by rpki-client