Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/6d7bc450-e52f-3fd5-996b-04b20aceb511.roa
File:                     6d7bc450-e52f-3fd5-996b-04b20aceb511.roa (raw, json)
Hash identifier:          zB4ZSmIWUXzf+0EN6RsYJN8+aYOLD1jTdBAIr4+Nqj0=
Subject key identifier:   0A:A7:21:FD:EF:FC:99:CB:AB:CE:D3:65:19:BA:3A:6D:08:71:F6:7A
Certificate issuer:       /CN=82d37175-c3df-41ac-ae2b-7c2c2572c7ab
Certificate serial:       010D0C9F4328584ED9C754B3B272D669A7960C00
Authority key identifier: 72:1C:8D:40:BB:71:B0:E8:A8:E1:2A:32:03:61:1A:03:58:38:30:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/6d7bc450-e52f-3fd5-996b-04b20aceb511.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     14618
IP address blocks:        74.117.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:54:b3:b2:72:d6:69:a7:96:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82d37175-c3df-41ac-ae2b-7c2c2572c7ab
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=516396bc-f136-4bd7-aaa3-1a976fd6e076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:f9:6c:e3:e5:6f:b8:59:3f:7f:bc:27:e5:
                    d4:77:06:d6:4f:ef:ad:42:91:0a:bb:ce:6f:b4:92:
                    fb:da:b5:b0:5d:9e:1c:bd:9e:a5:56:b7:df:6d:bd:
                    b0:54:3c:ee:f1:7e:05:89:57:6c:f8:0e:6a:69:02:
                    7d:c7:b9:ae:52:c6:92:a1:e7:39:3c:68:43:17:3c:
                    e9:5c:d9:24:09:a8:60:52:fe:4f:63:0a:9e:01:3c:
                    59:20:fc:0f:38:f5:99:49:20:8a:c9:58:da:71:b3:
                    5a:40:90:30:e6:10:6a:98:3e:bf:61:3a:42:b4:d0:
                    52:94:f7:e3:ac:bb:ed:02:09:ed:1f:89:56:78:16:
                    b8:3f:0e:92:d8:59:c8:2b:17:1b:02:15:f5:6a:15:
                    2c:2d:6a:c3:a8:f3:59:d7:11:4a:49:dd:9c:b7:32:
                    56:b7:d4:4d:76:2d:95:b8:fe:f5:e3:d4:84:30:f5:
                    06:ca:1a:26:f8:bb:17:c4:d9:39:70:25:1c:00:34:
                    a6:8e:41:b2:17:82:fb:78:1d:2e:a2:d5:c6:b4:c8:
                    72:8c:d8:85:e5:ab:6c:bb:40:10:9f:34:dc:3d:ad:
                    be:22:fd:55:ad:f8:e4:21:e6:69:51:a7:f8:44:55:
                    fe:e2:79:ab:c7:4b:d8:ab:a3:81:0a:8b:c6:c7:8e:
                    09:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A7:21:FD:EF:FC:99:CB:AB:CE:D3:65:19:BA:3A:6D:08:71:F6:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/6d7bc450-e52f-3fd5-996b-04b20aceb511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.crl

            X509v3 Authority Key Identifier:
                keyid:72:1C:8D:40:BB:71:B0:E8:A8:E1:2A:32:03:61:1A:03:58:38:30:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:57:3f:df:af:09:fe:43:b1:ce:ed:f6:fc:3e:f2:90:48:ea:
         c2:76:d4:f6:4f:29:1a:b3:90:25:10:c9:9e:ee:5e:59:56:96:
         ad:60:77:9a:c8:3f:2b:c5:e3:b4:d5:97:45:8b:1c:97:76:bd:
         2b:57:dc:8e:94:2a:2a:82:6e:bd:b5:31:29:99:34:7c:21:a7:
         72:15:1e:89:01:22:1e:d2:c1:1f:ae:b8:f1:83:03:c2:14:71:
         91:f8:82:bc:36:3c:c1:46:53:4a:4c:76:6a:56:8a:95:2f:1d:
         99:bb:b2:cb:94:37:07:63:a4:ae:b9:ee:23:fc:87:11:82:32:
         94:20:0f:db:ad:cd:2e:19:8b:1d:43:bc:86:14:42:f3:bf:db:
         18:c5:b0:ad:ac:98:0e:13:5f:ba:1c:69:15:8f:57:f0:72:f5:
         be:b6:4d:32:ea:fc:37:b7:8a:cc:73:f0:62:cc:d2:9b:86:ae:
         df:f0:b8:e5:ca:6c:ee:98:e7:7b:2a:b0:e1:cc:4e:e1:1d:a5:
         9e:f7:80:b4:29:55:3e:34:0e:5f:6e:1d:cf:fa:cf:6a:60:d1:
         fb:3a:0a:63:d9:72:4e:27:a7:85:7d:92:e8:bb:8e:5f:16:cd:
         d7:e0:f9:73:9b:60:4e:da:23:96:eb:e9:7a:44:a7:66:a7:4a:
         3c:68:73:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:39:30 2026 by rpki-client