Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/7e9b6fcc-0a7c-3ddf-993f-3e78fead8739.roa
File:                     7e9b6fcc-0a7c-3ddf-993f-3e78fead8739.roa (raw, json)
Hash identifier:          E0LaECyxcARn+GHk3cgPjoAix1eaj3bQv3n+i1kNhZs=
Subject key identifier:   A3:48:36:EC:C2:BE:83:9C:47:92:2C:AF:B3:CE:00:26:66:67:A8:76
Certificate issuer:       /CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
Certificate serial:       010D0C9F4328584CE62CC781DC66B3F69C362D00
Authority key identifier: 9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/7e9b6fcc-0a7c-3ddf-993f-3e78fead8739.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     396982
IP address blocks:        74.112.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:c7:81:dc:66:b3:f6:9c:36:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=49456c6a-158e-4ad3-bf55-cf6ea49319ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ff:9e:87:be:4a:92:6b:7f:77:c4:24:b1:68:
                    f3:1b:19:0a:14:07:b4:d8:04:0e:71:05:12:31:5f:
                    ea:9e:8d:47:57:72:e2:a8:88:3a:d1:e8:9f:f2:e9:
                    44:f7:14:b7:23:9b:0d:e2:17:ad:8d:a3:79:d6:c2:
                    02:22:b2:4a:d7:4e:ee:5f:74:ea:93:79:e3:60:e6:
                    ad:de:7c:ae:1a:3b:4a:1b:03:d5:f1:44:27:f3:a0:
                    8f:73:27:d0:cf:f7:14:e9:14:89:5b:cc:47:2c:e6:
                    f5:18:1f:17:95:6a:53:5a:96:90:90:83:43:6c:b9:
                    19:b2:4d:a4:36:d0:f8:b0:f0:88:e3:d3:c5:92:fe:
                    e7:de:bb:7b:24:02:5b:46:3c:3c:84:4f:96:42:d5:
                    03:ae:e5:09:93:cd:ff:4c:35:b7:02:78:1e:c2:6f:
                    82:cb:53:ca:eb:ad:fe:0b:00:a2:3e:4b:f7:e7:6c:
                    cb:e5:82:5f:37:c0:ca:58:f4:2c:bd:c6:73:f8:1e:
                    bb:00:29:b0:f1:93:37:40:7b:9c:1d:f2:d2:ab:80:
                    66:c6:52:63:a6:67:4f:00:28:68:8f:ff:1a:ea:0e:
                    28:8a:97:89:cd:c3:46:a9:a5:d5:c7:68:ff:b7:a7:
                    bb:a9:a8:46:d5:77:f3:fb:0c:6e:9a:9f:04:35:08:
                    6d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:48:36:EC:C2:BE:83:9C:47:92:2C:AF:B3:CE:00:26:66:67:A8:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/7e9b6fcc-0a7c-3ddf-993f-3e78fead8739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl

            X509v3 Authority Key Identifier:
                keyid:9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e0:46:af:6a:06:19:69:72:8c:39:37:73:7c:46:e4:2c:65:
         77:f7:9f:e9:a7:00:eb:83:ec:13:63:33:1e:d3:20:4c:24:ea:
         17:c0:1b:c1:b8:47:90:a5:c4:b4:bc:5f:15:83:68:fc:60:b3:
         15:73:e2:70:0c:e2:e8:45:6c:9a:6d:29:f8:fd:7e:3b:ee:2c:
         6f:88:c5:45:a0:3f:12:7a:03:7d:46:97:d4:9d:37:94:2d:ec:
         1e:cc:30:33:7e:c3:2e:f9:c4:db:4c:ea:81:40:65:e6:6f:c6:
         fe:6e:f3:f8:54:62:48:0a:66:03:2a:74:44:8f:62:36:86:56:
         0d:c6:9b:fe:e5:22:e3:aa:26:a6:79:ac:eb:f1:8f:75:8b:74:
         13:41:70:c2:99:96:5f:e4:6a:c0:eb:0a:02:37:55:de:dd:ee:
         1e:1b:33:44:cf:55:07:a7:0c:ae:31:28:61:17:4f:03:e8:ff:
         ac:b8:95:55:4c:90:5c:26:b8:80:0b:88:d6:8f:36:24:a1:fb:
         b8:58:3b:ad:01:dd:4f:da:44:24:0c:fc:b7:6c:4a:17:96:33:
         c0:7d:17:b8:99:de:72:e8:27:f9:7f:30:2a:05:8a:2e:ab:3d:
         3a:b7:8c:a5:74:b8:7a:8d:03:b1:fa:b5:f3:e4:68:97:e1:0f:
         c2:85:f1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:28:48 2026 by rpki-client