Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d84ada0-e36b-4540-bb2f-7ced49edcbe3/f075f556-374f-33f3-b9b6-9042cbe788a1.roa
File:                     f075f556-374f-33f3-b9b6-9042cbe788a1.roa (raw, json)
Hash identifier:          a9EkqeknIDh8Haf+6AyasZn7ooRF86EinRCrOr8avww=
Subject key identifier:   FB:D5:22:49:03:81:E1:1C:64:A3:37:CC:8A:73:2E:0E:C0:46:68:08
Certificate issuer:       /CN=4d84ada0-e36b-4540-bb2f-7ced49edcbe3
Certificate serial:       010D0C9F4328584ED9C75794E9CF4EB3725E3780
Authority key identifier: 78:C4:1F:20:2A:B3:4F:84:33:EE:F0:21:C9:82:5E:B3:AC:8F:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d84ada0-e36b-4540-bb2f-7ced49edcbe3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d84ada0-e36b-4540-bb2f-7ced49edcbe3/f075f556-374f-33f3-b9b6-9042cbe788a1.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     376
IP address blocks:        74.121.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d84ada0-e36b-4540-bb2f-7ced49edcbe3/4d84ada0-e36b-4540-bb2f-7ced49edcbe3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d84ada0-e36b-4540-bb2f-7ced49edcbe3/4d84ada0-e36b-4540-bb2f-7ced49edcbe3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d84ada0-e36b-4540-bb2f-7ced49edcbe3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:57:94:e9:cf:4e:b3:72:5e:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d84ada0-e36b-4540-bb2f-7ced49edcbe3
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=441d42c8-b2ac-4805-a133-7d0a622f4b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:39:97:95:d8:bd:12:72:95:97:9c:ae:72:b3:
                    a2:4e:2b:83:30:b1:2d:79:58:dd:92:ee:4e:d7:44:
                    8f:7e:03:b0:3b:af:b4:b4:ce:fc:b0:b7:d6:0e:ee:
                    9e:75:1c:f2:94:5c:e7:68:6b:27:ea:60:22:f1:62:
                    3b:67:54:29:33:80:ae:06:60:fe:43:93:60:bb:0c:
                    c9:ff:30:c9:bb:fa:9e:3b:c4:b6:34:d6:18:b3:fc:
                    4c:64:97:d8:f3:4d:a1:fb:93:eb:0a:7e:b8:62:e7:
                    ee:79:42:32:9f:a0:50:c3:82:c5:b6:25:0e:63:64:
                    1a:32:d7:b6:6c:87:df:20:c1:2e:23:b8:11:3d:c3:
                    16:19:c0:26:1d:89:28:52:a7:b0:c9:dd:7c:8d:c8:
                    2e:e0:e9:7a:00:81:c3:71:a1:7a:e8:fd:a7:20:90:
                    22:ff:fc:c7:4e:e5:69:51:03:de:29:67:fe:9e:7b:
                    a8:11:be:0b:80:3d:13:64:71:15:0d:b9:36:f5:75:
                    57:44:49:a6:3e:ee:b9:cf:03:1a:dd:e1:e0:51:fd:
                    a2:61:cf:7c:c0:72:8a:c0:93:3e:52:3b:c2:fe:ae:
                    98:99:53:b6:ce:56:ef:86:d2:4d:29:10:38:af:b3:
                    03:5f:1f:f6:66:79:26:17:ae:90:a4:bc:35:6d:b6:
                    16:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D5:22:49:03:81:E1:1C:64:A3:37:CC:8A:73:2E:0E:C0:46:68:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d84ada0-e36b-4540-bb2f-7ced49edcbe3/f075f556-374f-33f3-b9b6-9042cbe788a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d84ada0-e36b-4540-bb2f-7ced49edcbe3/4d84ada0-e36b-4540-bb2f-7ced49edcbe3.crl

            X509v3 Authority Key Identifier:
                keyid:78:C4:1F:20:2A:B3:4F:84:33:EE:F0:21:C9:82:5E:B3:AC:8F:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d84ada0-e36b-4540-bb2f-7ced49edcbe3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:a8:4f:fa:fb:92:03:00:84:e0:75:dd:1b:67:c1:d4:1b:f5:
         d2:80:68:f6:c7:99:2e:81:b0:1c:2b:c1:51:5c:4c:47:c1:a0:
         66:03:f6:40:32:4b:b0:ac:70:23:27:1e:62:91:ed:e2:e7:f8:
         8a:7a:01:49:76:ef:a4:a3:fc:76:ab:66:60:d3:93:6e:88:b7:
         01:8e:58:d5:fd:2d:3f:1a:2d:be:3d:47:0c:03:66:83:e2:5e:
         64:4c:a8:eb:49:eb:61:e9:5d:41:c6:80:23:05:aa:41:39:ec:
         db:59:b2:08:11:c0:c2:ce:03:13:3b:ac:40:48:d5:49:17:36:
         bd:0c:64:77:e7:d6:da:4e:9d:c3:50:0f:87:13:8f:c5:cb:ff:
         c4:72:ab:75:ef:e9:26:cd:8c:33:40:ff:65:44:fe:f7:a6:02:
         c2:33:73:8d:61:27:f5:6d:ef:80:d3:cd:64:32:20:ee:ef:be:
         bf:8e:45:8e:af:65:19:ec:19:9e:cb:70:ca:df:4e:e6:74:0f:
         8d:44:75:24:fd:98:ef:8a:f7:3f:cb:68:67:e0:02:c7:b1:24:
         01:ea:f6:16:4e:70:6d:b0:1f:d0:89:9b:ac:3f:56:7f:28:95:
         d4:65:2c:30:6d:c4:62:ed:83:a7:d9:9f:b7:14:51:03:22:21:
         8e:e1:ae:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:06:34 2026 by rpki-client