Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/61d8257e-99c5-37ab-8479-9e24510b2be2.roa
File:                     61d8257e-99c5-37ab-8479-9e24510b2be2.roa (raw, json)
Hash identifier:          PFIN0Vr7kgsfvBPad642HzpulXh9J+a2+V8cHoEVwmM=
Subject key identifier:   4C:A0:6A:82:BF:12:97:FF:FE:4A:D1:26:2C:13:E9:31:29:BD:BB:07
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584E1FA99E7C2FF823C38A5E3180
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/61d8257e-99c5-37ab-8479-9e24510b2be2.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     42
IP address blocks:        74.63.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:9e:7c:2f:f8:23:c3:8a:5e:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=c28f1fc5-b341-4f64-ad3b-58d68a024d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:29:bc:e9:f9:9b:39:d4:50:f0:60:88:f1:3c:
                    0f:e7:74:86:f2:c7:bd:7c:0b:1d:0d:78:2b:28:d5:
                    d6:a7:45:34:49:47:d7:b9:a4:65:a0:6e:e1:ea:79:
                    73:e9:19:58:6f:56:0a:e6:7e:d0:3a:30:09:ad:0f:
                    06:12:bd:8d:ea:30:e8:71:8f:cc:02:ad:57:bc:d7:
                    ec:b0:bd:a8:02:39:7e:0b:64:5f:af:fd:74:20:57:
                    65:1a:a4:c2:ef:42:08:c9:ff:b9:81:81:cd:a7:ea:
                    39:bc:33:0d:10:71:2a:da:88:14:47:a8:3e:53:9f:
                    7f:cf:0c:2e:28:db:21:af:1f:9f:d6:41:35:ef:85:
                    40:e1:2a:d9:b5:ce:74:45:07:65:f6:1d:06:02:24:
                    fb:ad:a9:bd:b1:b5:73:3c:49:9e:11:af:96:68:bb:
                    1e:94:39:e7:45:97:86:3e:22:2e:e3:53:57:50:a0:
                    64:1b:38:79:d3:82:56:3f:f9:c1:d4:3d:6d:de:ff:
                    f5:a3:a0:89:a0:cc:b9:75:ea:18:24:51:6f:52:23:
                    fa:ec:95:90:7d:f9:b6:13:79:e8:fe:f3:f1:e7:8c:
                    ec:f5:61:20:e1:3d:02:a7:b5:f6:1a:cb:43:57:be:
                    1a:d5:ec:37:93:4a:35:28:fe:92:53:6f:a8:a0:c4:
                    78:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A0:6A:82:BF:12:97:FF:FE:4A:D1:26:2C:13:E9:31:29:BD:BB:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/61d8257e-99c5-37ab-8479-9e24510b2be2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.63.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:88:78:18:ae:ce:db:b1:21:e3:08:3e:03:30:f2:a4:6f:63:
         8a:f7:60:c9:c2:73:b3:61:d0:42:6f:f4:d7:57:ec:09:5f:e6:
         61:b7:8c:52:9f:e9:37:d7:c4:a7:84:de:8e:62:b5:6e:4f:61:
         8c:ef:64:48:d4:7b:0b:2f:a7:0b:3f:49:3e:3f:00:fb:d9:48:
         2f:6a:b1:49:08:11:2e:60:87:52:c8:f7:49:e5:34:79:4a:f5:
         00:8a:6b:0c:7e:45:d1:eb:2f:1b:8d:33:b6:bc:a5:9f:8f:50:
         ed:4b:d3:00:e4:b8:07:bc:19:3a:7a:5f:d4:de:8a:21:c6:c1:
         41:8f:51:e7:fc:2b:99:f0:ca:08:b6:24:ff:a2:a1:f5:fe:6a:
         c3:ab:79:dd:2a:62:db:3d:9b:24:26:7d:3b:1b:17:ff:eb:21:
         21:07:d1:e8:ea:bd:bd:83:64:eb:51:97:1e:ca:16:f9:fc:e5:
         92:a0:b0:a8:75:34:12:04:ce:c9:15:5f:5a:b5:02:7f:64:7e:
         b4:01:e4:82:67:5d:80:dc:d0:29:0c:70:be:21:dc:43:01:9a:
         37:46:7f:0b:1a:a4:3b:92:64:3e:56:a0:53:59:3b:59:d4:6c:
         0e:6e:e7:38:0a:20:ed:83:36:cc:78:da:66:96:8e:50:44:83:
         53:19:d7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:59:15 2026 by rpki-client