Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/066680ee-72ba-3422-bafb-9ddd0260ce85.roa
File:                     066680ee-72ba-3422-bafb-9ddd0260ce85.roa (raw, json)
Hash identifier:          n2GgopNtuTaxRm66xww+Hle+iC+3q0ZoP6D+dPWXECY=
Subject key identifier:   D3:80:BB:1A:67:D9:C4:F4:76:4D:17:44:42:87:F8:B6:0C:37:EF:92
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584DA3E7085A1BCA4C37DD1F6370
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/066680ee-72ba-3422-bafb-9ddd0260ce85.roa
Signing time:             Mon 27 Apr 2026 01:03:50 +0000
ROA not before:           Mon 27 Apr 2026 01:03:50 +0000
ROA not after:            Sun 26 Jul 2026 01:03:50 +0000
asID:                     9009
IP address blocks:        74.91.62.0/23 maxlen: 23
                          172.85.101.0/24 maxlen: 24
                          172.85.103.0/24 maxlen: 24
                          172.85.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e7:08:5a:1b:ca:4c:37:dd:1f:63:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Apr 27 01:03:50 2026 GMT
            Not After : Jul 26 01:03:50 2026 GMT
        Subject: CN=ec01d6a5-65fe-4fc0-a424-1457d61dbd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c4:53:43:cb:10:ae:fb:8d:62:7a:00:a6:6a:
                    c9:60:7e:a2:11:47:71:16:c3:d1:6e:01:d0:72:71:
                    ce:7d:06:42:58:d4:a3:cd:25:54:be:7d:d2:e4:13:
                    8f:c3:ce:59:e8:80:8d:07:54:05:79:75:95:d0:e0:
                    14:66:5f:70:92:e6:a2:f8:46:8d:62:b8:f3:eb:50:
                    60:4d:fd:41:08:43:66:a9:42:ab:80:81:09:58:a7:
                    49:f7:62:7e:0c:64:ac:31:5b:c0:b6:f7:b7:00:f7:
                    b4:38:81:d5:e2:69:31:1e:4a:45:14:e4:6d:4b:f7:
                    90:3b:38:a7:a0:b3:c2:00:f3:dd:8b:a2:f6:71:02:
                    15:61:42:76:ee:70:dd:df:41:7d:32:ac:48:7a:39:
                    9b:bd:aa:25:d6:5c:fa:49:cb:4c:a1:25:ad:fe:ca:
                    bc:a7:83:84:ed:40:3f:91:a3:8e:db:6e:ed:bd:a1:
                    5f:97:42:a8:e5:fd:48:dd:33:01:1c:16:a1:bd:bc:
                    0c:bf:cb:15:d6:d1:d8:0a:51:34:44:f4:19:b8:b0:
                    37:91:29:58:d8:9d:91:17:c7:6b:d0:14:3c:e5:77:
                    bc:af:56:07:fa:1e:f1:ed:89:66:62:c1:92:54:74:
                    d1:1d:4f:26:d7:f1:9d:da:ff:71:1e:ef:27:05:c5:
                    8d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:80:BB:1A:67:D9:C4:F4:76:4D:17:44:42:87:F8:B6:0C:37:EF:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/066680ee-72ba-3422-bafb-9ddd0260ce85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.62.0/23
                  172.85.101.0/24
                  172.85.103.0/24
                  172.85.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:7b:ec:96:66:12:cb:58:1d:41:dc:f1:e2:5a:e9:ba:c7:1d:
         fe:e6:28:c8:f2:2c:f3:13:66:6b:60:1a:6e:6b:4f:31:b0:a2:
         97:05:2d:6a:7b:b7:3e:09:12:e5:8f:f6:8a:c7:bb:28:9c:ed:
         af:e1:f3:0c:77:a3:b9:4c:aa:a9:68:93:1b:6d:f2:e0:34:77:
         63:26:fc:80:cf:29:54:49:f1:21:60:36:d6:ff:e1:9e:80:30:
         1c:22:30:cf:b0:26:50:8e:64:05:b0:71:0f:3b:97:3d:65:30:
         9f:90:2c:f3:e6:df:6b:08:f5:d2:fc:60:5d:eb:ee:31:38:f5:
         3b:d3:de:50:60:a1:35:03:e9:9e:ff:76:c4:5f:f7:50:6f:ce:
         f2:8c:fa:64:0f:96:54:78:70:9d:45:01:38:b4:c3:82:5c:ad:
         72:72:95:52:cb:61:cc:09:53:09:16:fb:23:d9:5e:3e:b9:1a:
         0f:dd:67:d4:15:5a:e7:a1:aa:56:9e:87:65:b5:c7:f0:d3:aa:
         ab:ef:d1:a8:46:27:6f:c2:b6:2b:18:28:3d:ce:d5:50:60:d9:
         9e:ea:dd:05:db:41:14:98:3c:4f:f2:22:8c:84:60:be:73:b5:
         20:bc:b1:6b:08:88:53:da:cc:35:b6:f1:18:b6:20:7b:72:57:
         69:ab:f9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:45 2026 by rpki-client