Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/3ea9051b-7975-35bc-9f2f-e61d3077ba65.roa
File:                     3ea9051b-7975-35bc-9f2f-e61d3077ba65.roa (raw, json)
Hash identifier:          +ViyexuYHLljTcMMiaGtjIfd3rjNwz1l7cU+3sV8ApM=
Subject key identifier:   29:F0:4E:E0:5C:7D:2A:4D:4F:02:C9:C5:5D:2E:57:87:67:01:3E:1F
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584E97B502471091F0C00F9488EC
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/3ea9051b-7975-35bc-9f2f-e61d3077ba65.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     4540
IP address blocks:        74.50.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:02:47:10:91:f0:c0:0f:94:88:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=8f142c71-58e7-4678-ba2d-3f1eb09fb7a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a3:0d:05:b3:51:09:d9:31:0b:55:46:cd:e0:
                    42:84:c3:88:d4:07:42:70:46:ab:01:e8:84:e9:c5:
                    3e:e2:0e:5f:88:db:18:71:a7:33:e5:fa:c9:c2:82:
                    94:d6:41:00:c1:12:f9:17:e3:fb:53:86:ec:f6:e6:
                    08:6b:b9:ca:91:c1:f9:a3:81:05:6d:a0:68:12:91:
                    aa:a9:e4:59:a0:a9:b5:ac:3f:84:43:27:c6:8a:9d:
                    14:f4:c3:98:ae:29:4e:c3:e7:c1:66:be:a4:15:85:
                    b3:50:ee:e1:49:16:4b:4d:81:2e:04:07:a7:c5:04:
                    62:50:58:d4:13:51:f7:82:e4:fb:3b:61:5c:ca:d6:
                    f5:a5:20:26:9d:f5:f4:37:a6:16:45:12:21:06:96:
                    24:e4:d9:fa:9a:d2:86:a2:c0:c6:df:88:55:cb:07:
                    67:bb:f3:de:a9:50:f1:52:46:18:69:cb:ba:83:a1:
                    17:f0:ce:b5:93:77:1f:22:2a:3e:8a:80:5f:a5:5a:
                    19:76:a9:41:6d:a9:33:1d:14:70:2b:31:23:10:cc:
                    46:9c:c9:7b:1a:3f:db:e6:75:4c:45:5b:2b:a0:6d:
                    23:8d:f7:70:c3:1f:0d:95:35:24:47:32:59:94:fd:
                    a5:0a:40:ed:53:56:af:6b:54:06:6d:cd:14:46:03:
                    36:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F0:4E:E0:5C:7D:2A:4D:4F:02:C9:C5:5D:2E:57:87:67:01:3E:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/3ea9051b-7975-35bc-9f2f-e61d3077ba65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:07:38:c4:94:31:8a:1d:c5:b4:fc:ae:fd:c9:0b:d4:b6:b7:
         b1:5c:ac:1a:7e:13:d8:aa:d3:ce:0b:f4:05:4f:a2:6f:92:5c:
         2f:d4:d8:a2:4f:25:2b:fe:b5:67:20:dc:93:64:ca:1a:b0:61:
         3c:5b:74:7a:17:3b:20:c6:e4:e4:90:03:fa:b6:b0:25:24:96:
         55:82:90:84:d0:07:87:08:23:38:58:34:20:1b:52:9d:d4:f7:
         36:a2:5c:9f:f2:09:60:3c:6d:f9:6c:d5:14:c6:7d:7d:d4:1b:
         dd:2c:5f:93:3f:cd:d5:db:22:12:5d:30:ed:87:d4:4e:4a:43:
         53:ed:e8:24:e9:03:a8:d0:79:0a:24:26:7d:8b:81:54:84:c1:
         13:60:72:2e:9c:d2:3d:f4:5e:15:4a:31:5c:f8:09:4e:0f:1d:
         c9:a7:9c:d8:75:e9:00:51:7e:ba:22:b7:c5:49:9d:ef:7f:8a:
         21:c7:58:ef:19:96:fd:4e:6c:a3:4c:e0:20:12:14:4f:eb:ee:
         f5:b1:fb:1f:99:ae:51:a2:de:9a:5c:81:6b:61:6a:69:51:c6:
         fc:34:dc:f6:98:54:bd:fa:ea:85:86:a6:a5:49:3e:3d:6d:e6:
         4c:80:4d:01:a7:36:3e:cd:67:8f:3a:f8:36:cc:71:ba:f1:f5:
         20:f1:6b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:09:13 2026 by rpki-client