Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/3a92cd84-af85-3568-b08e-19814c859ad8.roa
File:                     3a92cd84-af85-3568-b08e-19814c859ad8.roa (raw, json)
Hash identifier:          VTKY88VqxU5z6arMvQqcCWAEwjcBwES7S3DId2q+PeM=
Subject key identifier:   C9:EE:AE:7A:9C:C5:66:67:24:0C:2B:CC:21:4C:BC:36:AA:57:A2:DC
Certificate issuer:       /CN=58eef8b8-39c9-495c-b889-44faff13a8aa
Certificate serial:       010D0C9F4328584EA5AA6D25AB32B34CA6FD6B00
Authority key identifier: DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/3a92cd84-af85-3568-b08e-19814c859ad8.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     397016
IP address blocks:        74.81.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:6d:25:ab:32:b3:4c:a6:fd:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58eef8b8-39c9-495c-b889-44faff13a8aa
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=f7903e11-b682-4e13-828b-9d4758f24b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6a:14:8f:92:e1:25:8e:b1:20:fc:b6:e7:48:
                    71:e2:1e:b0:ee:e3:23:14:8a:13:28:cf:f3:7d:d4:
                    51:44:df:86:a6:90:b7:c6:d8:28:85:34:f9:88:e2:
                    d2:6f:d2:0e:d8:0c:bc:df:44:ae:67:16:6b:50:bd:
                    7b:25:e6:47:7a:a5:9d:d8:6d:be:6c:d6:08:c6:dd:
                    8a:b6:86:d2:ca:68:75:c0:ae:81:a7:95:bb:36:6c:
                    f7:ba:7a:91:ad:43:a1:6e:12:63:b6:56:71:3c:da:
                    48:38:85:13:71:5e:9d:97:7b:a9:0a:66:41:d8:93:
                    47:e0:21:f7:f5:d4:6d:07:5b:a4:2b:76:86:49:99:
                    92:3e:cc:e5:da:48:71:8e:63:e1:54:5d:e3:2b:88:
                    5d:d7:77:01:00:aa:3a:64:21:15:fb:6d:e5:38:25:
                    6e:bf:91:9e:cb:41:d5:38:49:29:63:76:21:f8:17:
                    23:6c:4f:f7:cb:65:47:a0:cb:79:f2:8b:60:6c:eb:
                    0b:17:1a:17:bf:95:3f:3b:18:9c:bf:68:47:85:ef:
                    40:d7:1a:35:ab:12:06:96:49:bc:ab:31:72:52:46:
                    f3:ed:f8:c3:4f:da:e5:ea:03:6b:bb:c9:5f:91:44:
                    f3:80:d2:42:77:eb:fe:e8:24:9b:79:7c:d8:0c:38:
                    37:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EE:AE:7A:9C:C5:66:67:24:0C:2B:CC:21:4C:BC:36:AA:57:A2:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/3a92cd84-af85-3568-b08e-19814c859ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl

            X509v3 Authority Key Identifier:
                keyid:DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.81.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:10:c9:9d:20:f4:63:5b:db:61:49:7a:1e:8a:52:61:e3:15:
         ee:15:1f:b1:a7:10:bd:a6:57:a2:bd:5f:53:39:fe:5e:68:40:
         fc:57:6a:e9:ad:1d:10:b5:e1:e1:d0:93:00:91:33:5c:8c:dd:
         49:c5:73:aa:f6:79:44:34:17:cd:57:d1:ae:5a:19:f9:86:6d:
         b0:71:75:47:1c:08:e4:7f:2c:44:35:6f:d2:85:61:71:2b:62:
         69:da:7a:79:2c:f0:90:a4:35:84:51:15:91:bc:49:45:bb:e0:
         75:0c:5e:67:c7:cc:14:b1:9a:6d:7f:3c:bc:18:17:0b:46:90:
         c8:d6:53:be:8b:c9:3d:97:85:6d:58:75:b9:e2:a6:ce:fc:c0:
         97:a8:83:41:a2:b5:2f:1e:60:89:e5:a8:16:38:ad:82:29:18:
         1e:39:99:7b:b2:7a:81:e1:a0:d9:d7:f2:42:ec:bf:c1:07:e1:
         3e:3d:ac:0a:36:cd:9b:16:84:c0:bf:25:f1:01:0d:ae:6a:63:
         13:21:c5:f4:db:55:43:66:2b:ae:5b:9f:3c:b3:7d:f9:0e:27:
         ce:3f:65:eb:d0:c9:d8:59:1b:aa:f7:f4:e5:25:66:68:d7:f3:
         93:0b:e9:b3:d8:0e:9c:e4:c8:ab:99:8a:a3:8f:b8:c5:c7:8e:
         53:53:6d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 06:57:36 2026 by rpki-client