Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/99232ea5-21ef-3167-b990-59126d3e2b30.roa
File:                     99232ea5-21ef-3167-b990-59126d3e2b30.roa (raw, json)
Hash identifier:          x4Ce4n2qswfKzUKkjMtei1jbr2uJcZRJSdaSk3xtz8k=
Subject key identifier:   A4:75:AA:8B:B0:9D:62:FA:E7:DA:E4:9A:97:E6:FF:9F:64:56:9E:81
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584CC611F1E6CB66430855EF4000
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/99232ea5-21ef-3167-b990-59126d3e2b30.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     36103
IP address blocks:        74.50.217.0/24 maxlen: 24
                          74.50.219.0/24 maxlen: 24
                          74.50.220.0/24 maxlen: 24
                          74.50.221.0/24 maxlen: 24
                          74.50.222.0/24 maxlen: 24
                          74.50.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:f1:e6:cb:66:43:08:55:ef:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=cbb7e465-9420-4d28-83ac-8f21f135e14c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:38:d1:29:b0:73:12:ee:d7:29:cb:e8:5a:fe:
                    2b:6b:99:b5:95:53:ad:3d:5a:bb:ee:34:bf:a0:04:
                    56:87:55:51:0a:7a:51:74:d2:b6:4f:9b:67:f1:90:
                    1a:aa:77:dd:a9:07:15:69:79:40:26:98:b1:40:cd:
                    53:e7:6b:f4:0b:c0:10:f2:c3:f7:45:0e:32:2b:be:
                    bc:b3:14:57:1b:4d:a5:c0:fd:d3:b6:0a:96:45:e9:
                    b6:a9:4d:36:fa:51:d9:93:2c:22:f2:8c:41:1f:82:
                    ba:43:ad:9f:6f:a5:9c:a7:cb:b6:79:f3:7a:04:39:
                    e7:05:55:4b:aa:f3:38:7c:7c:4b:0d:12:67:2c:6d:
                    ec:0a:f8:61:45:66:ad:5f:7b:4d:9a:98:b7:d2:52:
                    a7:9a:32:45:0d:ab:c0:f3:af:32:21:99:fb:07:fb:
                    d4:f4:5c:bb:20:df:2b:71:8d:aa:a8:75:52:d2:75:
                    50:f4:2b:42:7b:14:1c:2d:88:f4:9c:47:0f:4d:61:
                    db:b3:17:ab:26:7f:13:f5:b0:d4:16:58:b6:4a:b5:
                    dc:f4:d4:f2:45:95:15:3a:7c:2e:1b:84:8d:cc:6a:
                    d1:ea:5b:c6:b1:d0:b1:0c:23:35:52:f1:f5:de:1f:
                    30:39:73:55:04:83:22:64:7d:a3:8e:f9:fa:64:1f:
                    29:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:75:AA:8B:B0:9D:62:FA:E7:DA:E4:9A:97:E6:FF:9F:64:56:9E:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/99232ea5-21ef-3167-b990-59126d3e2b30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.217.0/24
                  74.50.219.0-74.50.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:3b:a1:fa:e2:37:77:c6:2c:93:cd:e7:9c:38:41:fa:30:13:
         26:db:53:1a:7e:56:7b:ae:05:97:87:9d:2b:91:c8:0d:a1:5a:
         b5:ec:61:55:7b:16:ec:3f:9d:85:b8:76:f9:ea:a1:4f:1c:d6:
         d8:a9:86:b1:2f:21:45:1c:09:cd:e5:69:8c:50:de:68:24:29:
         2c:ea:33:b7:a2:bb:f7:3d:38:54:02:92:d5:39:62:d2:a1:ab:
         0c:1f:b8:dd:54:78:d2:d2:0d:91:fb:8e:7a:c1:c5:92:49:a0:
         70:59:48:dd:74:fd:fd:91:e7:d6:4f:86:a4:7b:7b:ce:7c:41:
         a9:76:b1:53:72:af:18:19:0f:12:25:ab:ce:a3:e0:b9:5f:73:
         a2:18:09:7e:d2:64:96:5a:15:60:a7:de:31:10:5d:fd:a1:3d:
         c3:6f:01:88:c9:35:50:9a:1b:96:ae:05:b9:08:6d:a2:06:b3:
         5d:9c:c7:82:a0:27:1a:aa:ab:37:62:22:b9:c5:ae:02:44:03:
         c5:44:98:ea:7c:b0:d6:ff:b8:bd:38:28:2b:cb:e0:74:3e:06:
         8f:75:42:be:cf:4a:ee:43:e3:06:92:77:f2:14:b2:fb:cf:7f:
         97:1f:34:19:f2:50:7b:04:33:05:6a:b3:32:63:e8:5d:f5:f9:
         93:1a:fb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:30 2026 by rpki-client