Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eca56c5-ef45-39b4-a38e-5d85a435ec01.roa
File:                     3eca56c5-ef45-39b4-a38e-5d85a435ec01.roa (raw, json)
Hash identifier:          ODG5rzAfTFcqZy0KwU8oNxXJ6/FZpua6OLVq0hHJVCw=
Subject key identifier:   4A:66:31:FB:60:EF:CC:99:D2:45:1A:FD:52:DE:FC:E9:74:5F:FB:CC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4980954A7747881E4DDE9E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eca56c5-ef45-39b4-a38e-5d85a435ec01.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     21508
IP address blocks:        74.94.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:80:95:4a:77:47:88:1e:4d:de:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d73d4c56-32ae-45f9-9251-b0621b9ea449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e8:57:0e:47:46:54:ac:0b:e1:55:ca:29:4d:
                    2a:e2:d9:8f:19:a0:36:dd:90:6f:38:4a:9b:85:49:
                    7a:5a:3a:41:d5:72:bf:99:82:16:27:22:af:ab:09:
                    5a:df:d6:f3:df:c3:f2:98:99:2b:a8:5d:f2:9c:4b:
                    ad:d5:82:a2:b1:51:35:6c:c3:c2:64:18:c8:18:0e:
                    fb:14:19:63:77:b2:a3:28:d4:68:59:8d:82:54:81:
                    c0:7b:b2:72:1c:10:e4:9e:f2:fa:13:27:90:fb:ac:
                    3c:b3:40:8a:ef:3e:60:23:93:8a:94:cd:d9:4f:57:
                    b5:0a:0d:8f:36:65:e9:2d:6b:b5:31:a7:0c:5a:91:
                    64:64:d8:01:26:28:81:af:43:aa:54:5e:8c:0d:c9:
                    81:4f:5a:a7:ca:37:30:ac:d6:17:c3:d3:68:bd:a8:
                    64:62:06:6b:4e:ab:23:8c:19:d6:e4:90:54:16:b2:
                    5c:b0:f2:54:a7:06:36:b0:6c:ce:aa:78:31:22:f4:
                    3f:5e:8b:5d:85:c8:1d:64:3f:10:02:1a:33:09:90:
                    a4:5c:80:d6:9a:0c:16:1f:11:93:37:a7:18:d3:b9:
                    b2:1f:73:3a:49:d0:bb:f4:34:c1:98:f8:a5:e2:ae:
                    e2:84:e7:1b:9e:ba:a6:5e:c0:61:16:3a:be:b5:8e:
                    ee:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:66:31:FB:60:EF:CC:99:D2:45:1A:FD:52:DE:FC:E9:74:5F:FB:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eca56c5-ef45-39b4-a38e-5d85a435ec01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.94.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e3:45:f4:24:22:f0:dc:a5:a1:6f:01:d0:9a:d5:64:14:a1:
         e2:22:f0:54:e0:68:b2:30:87:f3:81:8c:f8:58:31:72:42:a9:
         54:c8:91:87:64:1b:d5:73:56:df:29:eb:2b:bd:cd:6f:2b:d6:
         7d:39:22:fa:e5:32:40:7f:34:0c:17:b9:5f:27:53:13:0c:55:
         c0:52:81:1b:a1:20:3f:d3:d8:59:c7:f1:de:d1:89:a3:ba:96:
         f6:46:f4:48:a7:b3:36:40:59:cc:ad:04:a7:71:a8:f8:d7:b6:
         f4:40:f8:f4:88:09:eb:b8:2b:1a:53:53:bd:1a:ce:dd:d8:d5:
         c6:86:ae:92:c4:42:c6:f6:d4:5f:91:3a:6b:cd:2f:71:14:2e:
         a0:3f:26:ae:66:2d:37:39:33:63:f2:a7:ee:89:00:f5:61:c1:
         a5:98:9b:6a:f2:6e:a3:b9:ea:2b:38:a2:d4:58:c6:20:01:9f:
         f1:b1:32:10:ae:96:86:a1:64:f7:55:cc:ec:05:88:6f:4e:f8:
         f5:05:c9:b4:09:92:72:2c:ac:8b:00:ef:45:c5:7d:be:63:f2:
         fe:56:0f:1b:dc:59:b4:64:13:1c:ef:46:c2:f2:9f:dd:6d:94:
         03:f5:2c:7d:d7:b2:21:80:f2:86:7a:dc:1e:b7:f7:c4:fd:4a:
         c9:b9:bc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:17:45 2026 by rpki-client