Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a2e11951-68bf-3d1c-96bc-f81c26525cfc.roa
File:                     a2e11951-68bf-3d1c-96bc-f81c26525cfc.roa (raw, json)
Hash identifier:          /6n2i88+nHHiZMKef/W1rObqM0ql9oS6JYSKHakmpe8=
Subject key identifier:   F2:17:12:2D:D3:48:53:5D:F8:3D:87:0A:E1:BD:59:AE:97:3E:09:30
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584E9A7FBC64A2ABA82ADA17D000
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a2e11951-68bf-3d1c-96bc-f81c26525cfc.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        74.112.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:bc:64:a2:ab:a8:2a:da:17:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=7d94bff2-9d00-4b5d-a584-1bc19f31cee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f7:04:b3:05:a9:3a:58:d6:a1:6e:0b:11:8b:
                    a3:b5:34:45:21:8e:89:ed:7f:a4:24:98:30:e4:c9:
                    37:01:05:67:87:7a:e1:22:e7:54:97:07:a5:7f:c5:
                    8c:55:70:e6:86:17:93:d5:09:3d:d9:e8:ad:8c:ed:
                    e8:f4:5c:ce:47:3f:cd:51:b8:a9:8f:69:6d:32:48:
                    90:06:8c:60:90:b6:14:a5:24:78:7b:36:a6:31:cd:
                    a4:c7:27:e5:b3:b7:85:8a:01:0e:d3:b8:18:2f:87:
                    94:ee:6f:c4:27:b3:22:f1:c3:f9:81:6d:47:84:55:
                    ff:ff:08:30:36:a1:45:f5:fa:db:c2:81:4f:92:30:
                    a7:19:74:b4:47:50:6b:a6:ec:df:13:ec:5c:0e:94:
                    ef:cb:2d:1c:dc:2c:54:dd:42:b9:fa:b3:a7:56:c9:
                    89:a3:c1:30:da:d1:7a:eb:a3:44:c9:1d:47:ca:66:
                    85:46:e6:de:46:78:d1:c2:be:ae:d8:d6:e8:d1:8a:
                    ea:13:62:84:45:2b:73:ab:bf:82:94:75:50:7d:14:
                    a7:44:5c:3c:be:30:b1:58:d3:66:df:a6:6f:85:53:
                    e3:53:ed:d9:b0:69:17:64:cb:dc:60:42:54:77:1f:
                    a7:1b:b9:a6:26:38:77:8d:12:c6:76:c7:bd:d2:c5:
                    cb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:17:12:2D:D3:48:53:5D:F8:3D:87:0A:E1:BD:59:AE:97:3E:09:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a2e11951-68bf-3d1c-96bc-f81c26525cfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:22:c7:bf:f9:e8:8e:f8:32:01:07:37:b2:3a:ec:2f:39:75:
         67:ac:2d:c7:46:99:e7:d2:51:26:3f:19:14:1b:44:b2:a5:09:
         20:6a:f3:fd:73:d1:fe:bb:4b:84:a3:f8:68:11:cf:4c:9a:e3:
         25:7d:54:67:15:2d:29:43:6e:dd:d9:f6:f5:44:6f:d0:9b:e9:
         29:c8:c5:61:dc:7f:2b:76:82:d0:19:d7:29:a3:1a:70:8b:f1:
         4a:b5:04:45:29:16:73:ed:74:42:f6:8b:48:39:7d:bf:5f:14:
         58:9e:c4:e8:11:2c:14:2b:95:6a:0a:e1:c0:18:c1:62:00:92:
         76:03:47:39:98:71:67:81:d0:b9:31:a9:61:c8:26:70:77:c6:
         69:e4:43:e9:c9:b0:55:d9:20:cc:b6:18:e0:a0:fb:f0:47:af:
         87:6a:5b:1a:79:69:ca:3e:b7:25:78:28:89:8b:31:69:7b:67:
         8e:e7:f5:cc:7e:b6:04:42:4b:1f:66:d7:27:8e:12:af:cf:12:
         94:55:a0:29:0d:05:83:55:b5:21:bf:14:5b:32:9c:1c:5d:40:
         60:6a:94:5b:00:4d:3d:79:cf:e2:64:fa:3f:73:87:1b:e5:d0:
         74:f1:fa:b2:8f:34:a8:fd:85:28:19:86:eb:2a:fd:28:2c:4b:
         3e:1a:79:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:10:33 2026 by rpki-client