Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5f88540-1c3e-4b5d-8e18-fe6f5b81e61e/b5943e3d-6bc5-304c-9693-5433c3bca960.roa
File:                     b5943e3d-6bc5-304c-9693-5433c3bca960.roa (raw, json)
Hash identifier:          pegAuY0EnP1ipEcVzTZTlQujhj8b6t7k1zQLEHtEXsU=
Subject key identifier:   DC:58:1D:EC:4C:96:19:F6:28:95:9A:CB:42:F1:8D:C7:81:CB:F3:A7
Certificate issuer:       /CN=e5f88540-1c3e-4b5d-8e18-fe6f5b81e61e
Certificate serial:       010D0C9F4328584F0D6CD805728A5776ED4E2E40
Authority key identifier: DE:6F:68:87:69:F1:6F:6A:89:B9:2B:61:2A:89:2B:C4:99:06:F6:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5f88540-1c3e-4b5d-8e18-fe6f5b81e61e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5f88540-1c3e-4b5d-8e18-fe6f5b81e61e/b5943e3d-6bc5-304c-9693-5433c3bca960.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     22088
IP address blocks:        74.112.48.0/22 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5f88540-1c3e-4b5d-8e18-fe6f5b81e61e/e5f88540-1c3e-4b5d-8e18-fe6f5b81e61e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5f88540-1c3e-4b5d-8e18-fe6f5b81e61e/e5f88540-1c3e-4b5d-8e18-fe6f5b81e61e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5f88540-1c3e-4b5d-8e18-fe6f5b81e61e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:d8:05:72:8a:57:76:ed:4e:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f88540-1c3e-4b5d-8e18-fe6f5b81e61e
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=bf60c478-b508-48fe-a49b-9e418b8ba0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b8:22:64:36:33:03:1e:78:d9:d8:b8:a1:9a:
                    7b:cd:30:91:3f:d5:98:f3:76:46:ee:ec:51:99:2c:
                    3d:a7:ab:20:0e:71:6b:53:7e:39:4e:5f:63:98:de:
                    9a:cc:c1:1d:d1:98:78:c9:70:7c:f3:09:2c:1f:44:
                    3c:bf:3b:62:e8:fb:81:37:8c:ec:7d:a4:89:ec:14:
                    8c:27:01:ba:73:4e:03:fd:79:cc:9a:8d:00:26:dd:
                    08:59:bc:37:68:c3:1f:e6:ee:72:bb:e1:c8:0c:97:
                    80:78:8d:77:c8:7d:df:c9:00:39:2b:1e:42:ed:67:
                    c4:9d:5c:c9:7b:b0:6b:b0:47:e1:95:43:77:35:f5:
                    1a:51:01:48:77:5a:02:05:33:fa:bb:1f:ac:cd:2f:
                    98:1c:21:f5:66:e5:df:6c:f9:6b:7a:4d:05:a4:77:
                    be:bd:83:53:e8:a8:07:86:a9:a2:05:8e:46:c8:18:
                    bf:16:a7:f3:54:37:52:c3:f7:5c:c9:f2:df:51:c6:
                    f6:df:8a:c6:e5:e2:f1:27:68:fc:e2:b1:41:26:b2:
                    04:5e:69:85:71:2b:59:0d:de:08:c1:0a:e5:99:90:
                    40:6d:a2:3d:32:fd:ac:92:51:85:05:ec:94:8e:ad:
                    13:f8:bb:df:1d:65:34:90:76:be:db:bc:69:b5:ba:
                    ea:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:58:1D:EC:4C:96:19:F6:28:95:9A:CB:42:F1:8D:C7:81:CB:F3:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5f88540-1c3e-4b5d-8e18-fe6f5b81e61e/b5943e3d-6bc5-304c-9693-5433c3bca960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5f88540-1c3e-4b5d-8e18-fe6f5b81e61e/e5f88540-1c3e-4b5d-8e18-fe6f5b81e61e.crl

            X509v3 Authority Key Identifier:
                keyid:DE:6F:68:87:69:F1:6F:6A:89:B9:2B:61:2A:89:2B:C4:99:06:F6:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5f88540-1c3e-4b5d-8e18-fe6f5b81e61e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:33:40:92:86:4a:19:15:f2:e6:f1:f6:bf:63:24:9c:6f:48:
         8f:0d:48:62:1d:79:23:4a:6f:09:cc:2d:b6:86:95:25:d2:b3:
         db:62:7b:84:0b:e8:3b:30:35:8f:eb:1b:42:85:b0:92:ad:73:
         88:be:98:cd:ad:92:4d:fd:70:7f:1b:5a:95:d7:2c:47:db:f4:
         eb:0b:c8:f2:bd:e7:6e:af:9d:f4:1d:ab:22:82:5d:7d:1d:c6:
         b0:9d:a3:b7:f1:77:35:ce:ec:08:3f:bb:83:35:25:dc:4e:d9:
         1a:db:75:db:8a:97:14:f8:9b:fc:c0:24:21:b1:88:ec:f3:ad:
         7a:97:2a:3a:91:c6:2a:c5:6c:1f:3e:13:04:1a:88:75:96:20:
         a0:e4:da:2c:a1:88:e2:ec:b2:2a:1d:66:66:89:17:fd:d9:6e:
         41:30:1a:a0:80:f0:31:bc:ec:30:8a:45:05:68:31:e3:7c:97:
         77:35:70:cf:a1:30:ae:f2:70:83:c8:00:d6:76:10:b8:ab:c7:
         07:23:d4:1d:88:00:73:dc:fb:fb:f8:4d:a8:9c:c2:95:3b:18:
         93:dc:47:9f:7e:c1:07:7c:48:c9:67:66:3e:e9:31:93:d9:09:
         bf:03:9e:d7:80:da:6d:62:2d:4f:52:29:5c:81:20:57:29:04:
         4e:c9:9d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:20:07 2026 by rpki-client