Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/513be49e-9166-3c79-a9c0-708d7079b383.roa
File:                     513be49e-9166-3c79-a9c0-708d7079b383.roa (raw, json)
Hash identifier:          mssrfmrf2Cj0vBHJoIVbqoe6ROuUYlobWniXNQeONSU=
Subject key identifier:   F0:4F:84:A4:78:65:DF:71:3E:CF:D8:C8:57:49:F5:9E:52:48:DE:E2
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584CC5686D520BB8515F900DD880
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/513be49e-9166-3c79-a9c0-708d7079b383.roa
Signing time:             Fri 06 Feb 2026 08:19:17 +0000
ROA not before:           Fri 06 Feb 2026 08:19:17 +0000
ROA not after:            Thu 07 May 2026 07:19:17 +0000
asID:                     26337
IP address blocks:        74.126.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c5:68:6d:52:0b:b8:51:5f:90:0d:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Feb  6 08:19:17 2026 GMT
            Not After : May  7 07:19:17 2026 GMT
        Subject: CN=01cdff51-ebfd-424b-b3a4-04eb5116f3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:32:dc:f3:c0:3c:29:8b:1a:a5:8b:4a:d0:06:
                    f3:81:26:35:0d:0d:17:2f:1f:60:29:a4:f2:7e:7f:
                    8e:76:77:53:26:56:fd:3f:a2:f7:03:df:2f:d5:9b:
                    66:7d:19:82:92:a9:a5:7e:ed:36:56:9d:6e:bc:6c:
                    9a:a0:96:28:b6:6d:6b:f1:43:76:b6:ff:f7:db:e7:
                    53:41:38:7c:33:81:81:ba:ac:d8:66:04:e8:85:91:
                    b8:1e:02:88:10:0e:b3:6f:24:a3:e6:08:2e:aa:42:
                    b6:56:e1:48:0e:af:ea:41:d7:98:12:c7:b6:6f:ea:
                    d5:bc:34:3f:c2:72:e4:83:19:11:f8:6f:e9:16:5a:
                    eb:17:cd:33:65:9a:1e:92:23:4c:15:e7:ee:b5:36:
                    de:96:73:dd:5c:92:e3:42:eb:94:dd:53:bc:8d:54:
                    af:55:14:3a:e6:00:1b:10:7a:d9:67:30:97:56:50:
                    07:3a:3f:98:04:a4:1e:6b:b6:08:1a:af:60:e0:3c:
                    6e:5f:b9:ab:28:36:e7:22:a1:d7:3b:b4:61:06:cd:
                    d6:0e:47:ab:22:bf:13:cb:9a:48:15:1f:02:54:cf:
                    f6:06:83:25:67:a4:29:87:80:85:ef:9f:c8:0c:b5:
                    85:50:8e:1b:6e:0a:d6:a0:59:41:c4:5d:c9:f7:2a:
                    20:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4F:84:A4:78:65:DF:71:3E:CF:D8:C8:57:49:F5:9E:52:48:DE:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/513be49e-9166-3c79-a9c0-708d7079b383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:05:90:fd:df:fe:23:16:18:d0:23:e2:c0:06:fb:a7:2f:21:
         20:3e:9a:c9:cf:e0:e9:83:a0:66:05:a0:9f:9b:b7:7c:4d:9f:
         e1:de:cc:44:fc:23:f7:a7:c9:e9:40:82:af:d5:8c:ec:be:62:
         1f:36:6b:e1:51:d1:4f:7a:79:e6:68:e8:1f:87:f6:69:cb:f1:
         4f:6f:13:51:6c:04:82:7a:6a:c6:91:05:bf:2c:8d:e4:b9:54:
         e2:e1:e5:04:ea:0f:0e:69:e6:53:ec:40:0f:5b:65:7c:7a:60:
         3a:0c:ef:dd:7a:eb:b9:aa:45:43:5d:a1:e4:95:de:27:c3:f6:
         11:c9:b6:38:01:ae:3a:ad:65:2e:bd:ad:71:d0:95:e9:fe:8d:
         e7:66:ae:96:99:e7:d9:8b:54:f2:75:61:33:8d:39:dd:31:3e:
         8b:40:cf:89:e9:72:a6:c4:ac:ce:73:52:39:a0:3e:95:8e:34:
         d3:96:46:a3:88:b1:8f:4c:a9:0a:9f:d3:6b:13:01:83:12:0d:
         5e:4a:9d:86:6b:5c:41:2a:87:d9:c3:ba:79:da:e4:1b:1f:80:
         c4:bf:66:29:b8:28:10:ce:81:61:89:c3:65:89:0d:89:d5:be:
         7c:4b:46:dd:5d:b0:00:14:36:e5:aa:27:a8:c1:89:89:68:a0:
         6d:ff:ff:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:14:25 2026 by rpki-client