Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/cd7c5f90-361d-3228-8f11-6c8a2b66e89a.roa
File:                     cd7c5f90-361d-3228-8f11-6c8a2b66e89a.roa (raw, json)
Hash identifier:          90VrnVCcGCApemmhvMenLiRwV8e7e1auXRDcIgy9wYE=
Subject key identifier:   0A:13:0F:97:A3:15:B2:4F:69:4C:4C:5D:94:8B:4C:8B:80:42:9E:D4
Certificate issuer:       /CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
Certificate serial:       010D0C9F4328584F2ABD05296F486B2BD7F43180
Authority key identifier: 40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/cd7c5f90-361d-3228-8f11-6c8a2b66e89a.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     395165
IP address blocks:        74.91.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:05:29:6f:48:6b:2b:d7:f4:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=357b1d4d-cedb-479b-a28d-73ec029f590b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1c:cc:bb:6a:5f:80:63:8b:b7:48:2c:3b:40:
                    c2:ef:58:b5:04:2b:3e:dd:a3:0a:09:fa:c7:d9:01:
                    09:7a:95:e7:65:47:61:da:f1:c2:d8:e6:0b:54:a4:
                    3d:42:83:5a:fc:d3:9a:a9:1a:45:2e:4e:ac:95:c2:
                    24:17:76:bc:e6:93:04:de:0f:23:b7:10:a7:b3:a9:
                    f8:64:cb:65:a0:58:60:8b:2e:07:fb:96:bd:30:cd:
                    35:ac:be:dd:8d:8b:13:3f:c5:92:80:67:83:58:57:
                    c9:5b:46:f3:46:5e:95:5c:d8:21:b1:48:99:92:9a:
                    a5:a0:f8:bc:8c:8c:bb:71:7e:6f:72:c7:d9:68:ec:
                    fa:3f:d8:54:07:a6:1e:7e:6a:df:2c:6c:6d:ef:be:
                    84:26:f5:b4:06:4d:0d:73:12:88:d0:7a:b3:8a:16:
                    86:e1:01:bb:91:a4:b2:f5:2f:b2:82:66:7c:59:06:
                    91:e4:2b:7c:72:de:0c:52:45:96:05:9c:76:a8:16:
                    ce:53:38:74:c8:f3:b5:37:e6:39:1e:a8:17:91:83:
                    d9:58:70:f0:ba:65:e6:3a:cf:2b:f0:dd:e7:c0:81:
                    ad:74:4e:fe:16:76:70:2e:47:61:6e:ed:e4:4a:8e:
                    c1:5e:8e:42:8a:a2:3c:d7:d1:03:e4:e2:46:26:26:
                    5b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:13:0F:97:A3:15:B2:4F:69:4C:4C:5D:94:8B:4C:8B:80:42:9E:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/cd7c5f90-361d-3228-8f11-6c8a2b66e89a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.crl

            X509v3 Authority Key Identifier:
                keyid:40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:b6:45:f8:a9:0f:ea:0d:44:a6:ec:86:5e:31:2c:5d:e2:97:
         cf:e7:62:48:c4:da:de:c3:a2:c7:55:f9:ad:9e:b1:4b:63:8a:
         e8:b9:55:74:a0:f3:d7:1a:41:78:4f:aa:35:59:ab:09:de:80:
         39:92:f0:7b:b8:ab:65:c6:47:5b:d2:07:84:4e:66:14:56:27:
         1b:60:da:20:18:11:a2:57:75:b4:1f:7b:db:4e:e3:62:9d:19:
         ac:d4:ec:8e:fb:a0:e5:15:04:eb:47:78:96:b7:3d:e2:f2:09:
         e4:f8:20:f2:b8:2f:7a:3e:b2:a8:51:5e:54:54:37:d3:0f:c6:
         6c:31:af:99:42:5f:55:12:d6:04:97:41:fc:e2:c3:b6:ea:53:
         ce:88:af:71:9a:d5:7b:84:37:30:91:0c:33:df:d7:3b:40:f6:
         d7:32:b2:de:29:46:28:49:86:e2:d0:7f:4a:12:15:88:1c:f2:
         1a:1a:4b:32:3e:49:d8:fc:e0:05:ba:c6:7a:7f:50:52:19:b2:
         2a:89:56:bd:05:ae:64:be:34:89:2d:0c:16:bc:07:29:88:97:
         bc:eb:78:2c:9c:bf:5d:24:91:b3:33:9b:f5:16:b2:49:a6:20:
         9d:f5:5d:20:a0:ed:83:d4:92:f4:59:9f:13:34:f5:a7:a7:0d:
         5c:c0:a1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:02:27 2026 by rpki-client