Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/db0488e3-95ed-323c-9b97-147429b7c044.roa
File:                     db0488e3-95ed-323c-9b97-147429b7c044.roa (raw, json)
Hash identifier:          8CgF5/lEu0lXyrA4lUL8OcPTIkXCMR5fRxBbDuoSUXY=
Subject key identifier:   E4:4F:CC:B4:4C:71:B9:E8:14:39:E2:2B:7C:22:23:30:72:D2:28:BA
Certificate issuer:       /CN=35da68f2-165e-4898-bf59-8aa1e523eba7
Certificate serial:       010D0C9F4328584E51EA006F661B28A61DF3CEE0
Authority key identifier: 3F:89:5F:7D:C6:6A:66:03:06:06:37:08:8B:9E:AE:53:F7:D9:72:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/db0488e3-95ed-323c-9b97-147429b7c044.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        74.113.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/35da68f2-165e-4898-bf59-8aa1e523eba7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/35da68f2-165e-4898-bf59-8aa1e523eba7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:ea:00:6f:66:1b:28:a6:1d:f3:ce:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35da68f2-165e-4898-bf59-8aa1e523eba7
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=974f2620-df28-4f06-bdc7-e3fc0044dd60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:7d:bc:12:c1:52:05:df:3b:88:ff:74:6b:
                    3f:db:08:3e:d9:b4:68:d5:83:24:3f:c4:42:4a:00:
                    1b:40:fe:32:3b:b3:0c:6c:2f:cd:86:64:8c:a6:e1:
                    70:47:77:39:b1:45:58:6f:74:ea:4c:5a:e1:ea:8f:
                    26:7b:fa:36:e6:31:7e:53:66:d4:a0:4b:4e:7f:65:
                    2a:e8:cb:c5:04:33:ed:5f:49:dc:4a:37:9d:8e:48:
                    12:7e:86:af:ed:19:ff:50:fb:54:5f:30:bb:c5:83:
                    4b:f4:f2:1d:0e:e3:b8:57:6c:7f:12:15:27:a8:50:
                    58:27:fa:61:db:54:af:b5:70:b1:6c:18:23:5b:75:
                    61:34:ff:7d:2e:ae:e3:30:c4:79:80:96:e1:8f:3f:
                    ae:03:1d:41:1d:01:8e:bd:87:2c:66:46:b1:e9:fa:
                    27:68:d3:8e:cd:87:8d:7a:e1:2f:f8:ea:14:f7:f1:
                    ab:b6:4f:86:bd:b7:ce:19:18:b7:59:20:9f:cd:57:
                    18:cd:31:9a:5b:20:df:ea:55:1d:7c:89:b0:6c:ac:
                    a0:89:d1:57:f0:7f:04:1e:d9:8a:a9:1f:73:0f:11:
                    69:e4:b4:84:91:a8:d1:76:a4:a3:7b:ae:b0:7c:a7:
                    51:1f:a4:f5:57:09:d9:c7:44:d8:91:79:be:a7:8e:
                    e4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4F:CC:B4:4C:71:B9:E8:14:39:E2:2B:7C:22:23:30:72:D2:28:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/db0488e3-95ed-323c-9b97-147429b7c044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/35da68f2-165e-4898-bf59-8aa1e523eba7.crl

            X509v3 Authority Key Identifier:
                keyid:3F:89:5F:7D:C6:6A:66:03:06:06:37:08:8B:9E:AE:53:F7:D9:72:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c8:f8:63:5c:eb:87:e5:b5:73:bd:24:a0:35:45:a5:b8:3c:
         3e:66:7f:82:45:f8:91:b5:61:78:21:9c:19:95:12:32:0e:97:
         ea:8e:a0:9d:6c:1b:67:39:37:bf:d8:ae:fa:8e:3c:cc:76:a1:
         71:43:54:66:f8:d4:8d:08:a9:ac:51:2b:57:c9:8c:18:4a:82:
         cc:c1:28:60:da:27:7c:d0:bc:7c:07:4a:e4:4b:61:1b:d5:73:
         4b:06:9e:0d:86:6d:73:cc:dd:23:db:a3:66:3f:1e:c7:e7:07:
         8c:bd:28:36:63:3b:f0:0e:2e:a0:41:5f:74:29:ce:cf:37:95:
         e8:0d:7b:fb:19:0e:38:b8:fb:31:88:c4:71:31:79:71:cd:cc:
         5a:ad:a5:28:68:29:2f:2c:d5:a4:f4:39:b0:8f:c3:0c:62:58:
         bf:38:14:17:ca:8b:29:1d:ec:13:4c:d2:27:f9:71:af:79:44:
         9e:f8:0e:b0:c4:4d:f8:98:5f:f7:f2:a9:b4:82:ba:1a:94:13:
         d5:6b:44:3a:75:78:c3:1e:45:c2:da:3e:85:42:1b:45:d2:b7:
         66:b4:f0:99:38:3e:d6:71:1b:2d:86:94:29:af:c0:1c:57:7a:
         8c:f7:eb:d2:e7:0e:6c:04:6a:17:94:f0:04:34:d7:15:3a:eb:
         ec:5d:90:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:36:29 2026 by rpki-client