Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/971963f9-d7d0-3de4-9fd9-4157e4c677c8.roa
File:                     971963f9-d7d0-3de4-9fd9-4157e4c677c8.roa (raw, json)
Hash identifier:          88Dl2/F5oB3aVKlTYfdBrlE0I3ZkZRElC9Bn1Ujy3yk=
Subject key identifier:   BE:32:4C:E1:48:25:68:65:31:7A:23:C3:E2:59:B3:F1:14:DE:23:E8
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584EC20C6C47226B00CD2A48F800
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/971963f9-d7d0-3de4-9fd9-4157e4c677c8.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     715
IP address blocks:        74.63.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:6c:47:22:6b:00:cd:2a:48:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=32e018f8-645d-4535-a394-fa4c44b445cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:57:f4:bb:bd:dd:bf:f3:15:c6:fe:ce:70:5d:
                    ba:b3:6d:80:b1:c7:9b:d8:a6:02:66:43:a0:c9:8f:
                    44:78:ee:fd:cd:70:5f:32:07:fd:64:34:c6:17:50:
                    87:38:b8:e8:86:cd:a5:2a:2a:68:ef:c9:4d:e3:05:
                    71:a3:5f:46:b8:e0:02:46:e9:d2:53:12:9d:fb:07:
                    9f:f8:a4:ab:6d:f1:44:cf:38:3d:69:b3:8f:88:1a:
                    a2:53:25:bc:86:ef:d2:d1:ed:01:50:a0:91:f2:2a:
                    08:cc:96:b3:ce:7b:84:29:89:e6:1e:f0:95:3f:d4:
                    54:51:0f:9d:b3:5f:67:6d:69:a8:e2:8d:20:db:83:
                    98:0d:69:e1:1a:13:f4:b5:39:9a:90:03:2e:0c:12:
                    62:88:28:29:58:0a:b2:5e:be:d3:be:e5:25:f2:d6:
                    24:12:f7:1a:2e:8d:df:2b:d1:9e:e2:03:36:41:fc:
                    31:24:0e:9c:4c:01:38:56:82:23:76:4b:3e:3b:47:
                    da:b2:0e:30:0c:29:c7:df:21:22:ef:a8:b1:c2:ea:
                    cb:f0:03:3c:81:b7:34:13:4b:23:6d:99:c5:89:bd:
                    45:16:8c:17:6b:d1:27:31:cf:f8:1c:ce:1a:76:1b:
                    cc:c0:1d:a6:97:85:7e:7e:ea:07:fc:67:f9:3d:d7:
                    50:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:32:4C:E1:48:25:68:65:31:7A:23:C3:E2:59:B3:F1:14:DE:23:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/971963f9-d7d0-3de4-9fd9-4157e4c677c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.63.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ee:34:55:6c:60:94:ea:3f:22:19:58:59:2b:b2:2c:ab:ff:
         12:8c:e6:54:ea:21:9a:22:a8:a5:5f:5f:30:54:cc:c5:e1:37:
         6d:b4:0f:9f:72:21:1f:41:19:c7:d1:72:25:eb:dd:a4:52:77:
         b4:d9:0d:ed:ae:ca:2b:a9:b6:1e:e8:3b:24:30:e2:bd:d9:5a:
         7e:a7:74:d0:5f:84:42:f0:a0:c0:7d:23:a9:4b:16:84:3c:92:
         93:16:3f:e0:c3:a8:dd:72:7f:18:59:f5:eb:bf:b8:40:30:0b:
         25:b9:6d:93:04:3a:79:40:8a:97:88:95:45:5a:e2:75:0c:85:
         0f:a9:77:cb:47:f3:a1:0c:ff:10:eb:8c:1f:f5:11:cf:43:c4:
         ee:76:7f:96:6e:80:bf:75:62:54:b3:91:bd:2e:90:10:a1:3b:
         b8:7c:bf:cb:1a:64:cc:5e:06:14:50:c0:29:69:d1:14:1f:4c:
         ac:07:d6:36:26:c4:60:27:0d:63:ee:26:88:51:65:8b:f0:0c:
         95:ae:e0:18:6f:3c:f2:3d:58:81:ab:e2:d9:0f:58:46:a1:79:
         74:e1:42:19:6d:8f:ac:29:f6:4d:21:1f:86:d9:27:b5:8e:5c:
         b7:69:2b:c4:a3:5d:ae:a4:42:0b:b2:c7:16:76:d8:2a:8c:ee:
         62:24:83:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:21:29 2026 by rpki-client