Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/ab2b63c5-34e1-3aec-9dc2-77a6965736cc.roa
File:                     ab2b63c5-34e1-3aec-9dc2-77a6965736cc.roa (raw, json)
Hash identifier:          fgVTMteiOW5/R5TYB5cVxz9NUuaz1msdmqoaBYvkbpM=
Subject key identifier:   4A:A1:DB:E7:1C:6F:5F:C3:AE:6C:74:C3:F8:B7:6E:54:F0:5F:BE:E4
Certificate issuer:       /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial:       010D0C9F4328584E296F1E70E72D08BEA96EF840
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/ab2b63c5-34e1-3aec-9dc2-77a6965736cc.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     812
IP address blocks:        74.198.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:1e:70:e7:2d:08:be:a9:6e:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=f93f2ec8-2159-4203-85d9-f387adb57b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:b1:60:c6:14:df:42:c9:8b:3f:61:61:d3:
                    4d:6d:f9:12:45:72:a0:4b:9e:64:54:5b:30:28:b2:
                    67:69:be:ea:1b:cb:fc:8f:27:90:ee:05:21:da:48:
                    35:28:70:54:a4:13:33:ee:c2:95:0e:28:9b:97:b2:
                    db:25:4d:1c:44:db:1e:10:9b:1d:29:8b:5f:c1:f9:
                    da:f0:f4:d4:00:17:45:87:3f:a8:ad:71:f9:07:2c:
                    a3:ce:7b:19:36:d7:34:f0:e3:be:53:fc:9d:f3:18:
                    4f:62:03:2b:d9:42:6f:d9:25:ed:bc:fb:45:27:81:
                    5a:c1:5d:30:8e:bf:ce:c0:44:4a:8a:c6:20:b2:44:
                    2b:79:ef:65:fc:66:f9:02:2a:0d:18:53:34:60:52:
                    a9:99:11:3b:44:13:a0:ed:b1:17:00:ba:e8:3e:e2:
                    3a:b7:6e:88:fc:f6:ce:a8:cf:2c:7e:7d:6a:2e:19:
                    b6:5f:aa:5d:2e:21:69:d2:bb:ba:3e:8b:e5:d9:aa:
                    ac:8b:d0:4a:95:2b:44:45:16:f9:eb:3f:c0:ea:5b:
                    58:dc:4e:ed:1c:50:42:83:59:1a:90:ee:99:bf:67:
                    a9:bc:96:9c:30:05:81:25:74:e1:a5:93:5e:30:60:
                    ad:ea:ea:91:aa:2e:b0:4b:13:4d:d1:82:2f:80:e6:
                    73:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A1:DB:E7:1C:6F:5F:C3:AE:6C:74:C3:F8:B7:6E:54:F0:5F:BE:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/ab2b63c5-34e1-3aec-9dc2-77a6965736cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl

            X509v3 Authority Key Identifier:
                keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.198.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:c3:d6:7a:a8:20:2b:3f:7b:6b:04:9d:51:af:3e:21:24:50:
         db:99:14:9d:6c:7a:96:d3:fa:82:aa:ac:3b:0a:5d:3d:eb:95:
         b5:99:3f:46:51:4b:35:09:0d:f8:1b:43:86:b4:3c:b1:7c:47:
         21:27:e3:4f:81:2f:0a:58:4e:2e:6b:9b:3d:f6:5f:fa:62:07:
         1f:21:02:d7:71:0d:65:4c:2f:a6:95:78:93:39:54:1f:e0:32:
         2c:e8:dd:dd:1b:14:57:1a:9d:a8:4d:20:30:73:59:0d:b9:ff:
         09:6e:1c:e0:0d:c8:9b:be:88:60:11:44:71:5d:43:c2:86:29:
         58:be:c3:64:cc:a7:e4:1b:e5:4d:4e:94:5c:3f:19:32:a3:c9:
         11:ff:3f:59:e9:c6:b8:ea:7f:f7:5f:24:5a:39:ec:02:79:2d:
         96:88:26:39:73:e5:c0:d1:cf:4e:ef:d8:a5:b0:fc:60:67:30:
         e2:20:6f:e4:d8:c5:2f:56:9c:9f:ce:4c:39:5a:d7:38:a0:78:
         24:b4:0c:fc:03:bd:e1:e8:17:3a:61:ec:5a:f8:6c:5f:cc:42:
         83:25:6f:25:a8:a2:91:ef:e8:71:4a:30:56:58:80:db:f0:c8:
         5c:80:fd:2e:20:16:41:dc:dd:4f:62:81:4f:11:1e:b1:4e:9e:
         87:64:18:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:14:46 2026 by rpki-client