Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/7df37a2d-b9f3-3c41-84b3-4a04b4565d81.roa
File:                     7df37a2d-b9f3-3c41-84b3-4a04b4565d81.roa (raw, json)
Hash identifier:          8pDJBxnX+nmYJ4OfMsSnxWrQtS3M5hwodZX+UMyveew=
Subject key identifier:   3D:5B:28:76:69:7E:99:86:F8:39:B0:11:23:13:8D:FB:00:30:79:B4
Certificate issuer:       /CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Certificate serial:       010D0C9F4328584CED27821DC02A086B72621BC0
Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/7df37a2d-b9f3-3c41-84b3-4a04b4565d81.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     14766
IP address blocks:        74.113.148.0/24 maxlen: 24
                          2620:7d:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:82:1d:c0:2a:08:6b:72:62:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=be549449-0845-44a0-9f3c-96511087f2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:58:9e:9d:39:de:88:37:b5:c3:ae:6e:cc:43:
                    55:29:5a:df:4a:e0:29:cf:82:11:98:f8:1b:3d:20:
                    9b:79:72:f4:06:e6:84:2e:46:e4:e7:e7:dc:ad:69:
                    58:f0:61:d1:71:75:e9:71:68:47:31:d8:fa:b1:f8:
                    95:d1:81:61:d7:1f:a7:c6:6b:33:d6:b7:66:13:b3:
                    b0:a3:4e:48:f5:9a:de:55:76:72:7e:5a:b5:44:0a:
                    c5:c4:7d:70:c3:47:7d:a8:bf:37:e7:3b:ed:61:f7:
                    ef:22:7d:93:4d:6a:e7:29:08:86:31:bc:19:48:0a:
                    df:0c:c9:d8:a0:85:4c:06:a4:89:f4:4e:0c:97:ea:
                    c5:5c:14:0b:93:e9:02:85:1b:c2:75:23:a9:ea:05:
                    02:a3:64:ed:aa:1f:f1:b7:27:df:9c:39:83:d4:cd:
                    d3:88:b3:cc:f7:ef:ec:6e:de:41:c5:b4:1e:b7:8e:
                    4d:1f:4f:ff:dc:e1:12:f3:3b:34:93:c1:57:12:92:
                    c8:12:11:8c:f3:5a:a6:cd:78:ec:db:e9:54:d0:7d:
                    8b:ae:bf:cc:44:e6:78:c3:62:1e:05:5d:20:dc:8c:
                    1b:f9:b5:25:0e:6d:2d:1e:23:74:8a:aa:96:a1:58:
                    7d:0a:4f:d9:92:b9:8d:03:26:00:71:d2:ad:ca:68:
                    6d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5B:28:76:69:7E:99:86:F8:39:B0:11:23:13:8D:FB:00:30:79:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/7df37a2d-b9f3-3c41-84b3-4a04b4565d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl

            X509v3 Authority Key Identifier:
                keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.148.0/24
                IPv6:
                  2620:7d:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:29:f1:d4:53:b7:64:20:de:6c:a6:c0:2d:0f:57:83:d8:90:
         7c:7c:5a:37:22:4d:2d:23:e4:b3:da:7a:b3:08:0f:60:ae:a0:
         5d:07:d0:84:f7:3e:cc:87:d8:69:f4:d9:23:02:ea:34:a4:8f:
         47:e9:d8:60:5a:c3:37:a4:77:ca:29:f0:87:74:24:82:da:7d:
         ca:d5:11:87:c8:bd:71:ee:2e:e3:02:42:ee:1f:cf:58:08:b9:
         a2:ed:c8:a3:6f:aa:eb:b7:c2:69:fc:78:f0:f7:98:86:2d:82:
         12:b3:87:0a:4a:74:81:41:ba:c1:41:e0:c4:9e:04:1d:1a:82:
         12:92:1f:4c:b5:a3:08:e3:f8:57:b0:50:13:7d:03:e7:c2:0f:
         17:3d:f5:d1:d9:dc:62:89:a8:3d:bb:fd:4d:10:d2:a5:f7:cb:
         b7:14:39:79:90:c2:06:44:56:7f:53:a6:14:38:1f:ea:c4:a7:
         3c:94:91:33:a6:52:94:44:51:56:2c:43:5b:e9:be:b8:40:ad:
         a6:a0:cc:a2:b0:65:0e:08:98:7f:93:07:ed:97:8d:87:77:d6:
         8f:cb:1f:0a:90:2f:a8:6a:89:ca:b1:8c:3a:59:12:f0:61:2a:
         4a:db:29:a9:1d:37:fc:39:f6:c8:ce:18:35:3b:ed:96:d7:8a:
         43:df:4a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:12:16 2026 by rpki-client