Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/1a5c1871-08d5-32c6-b27c-f0ef66438ab9.roa
File:                     1a5c1871-08d5-32c6-b27c-f0ef66438ab9.roa (raw, json)
Hash identifier:          ZUfGEicmGSTRE896kEDZiBbfD2q3KZShgPtxIWQzENM=
Subject key identifier:   A0:AC:1C:55:83:51:00:16:0A:6D:C2:8B:92:93:F1:59:A6:B0:5D:9E
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F4328584F49872963AE9DE5B8AE380800
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/1a5c1871-08d5-32c6-b27c-f0ef66438ab9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396185
IP address blocks:        74.127.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:29:63:ae:9d:e5:b8:ae:38:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d471d94a-982f-40cc-b6cc-dd2ce671205f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:58:4a:fc:0c:59:f3:ca:8f:5c:62:a7:2b:11:
                    15:9b:c1:f4:24:20:fb:4e:96:30:75:84:fe:43:ec:
                    e9:fa:34:89:7b:f3:09:55:e6:97:c8:34:f9:c2:41:
                    91:79:e5:2a:d3:52:22:79:7a:53:9d:37:bb:81:36:
                    30:00:25:ee:d7:37:af:d6:a7:82:c4:27:76:51:60:
                    ae:87:00:3b:90:7f:91:6b:6a:00:ac:f0:f8:29:eb:
                    dd:c5:3e:37:8d:ed:0e:81:bb:07:f7:9e:5f:39:b3:
                    89:4e:ca:f8:e2:df:42:39:af:fd:75:5e:cf:46:dc:
                    4c:af:15:92:53:c5:3f:85:6f:c6:33:19:b6:06:07:
                    42:62:c6:da:e8:d0:44:e0:c3:74:14:c7:25:bc:0e:
                    26:05:15:bd:58:8f:b7:4d:ec:af:6c:d7:3e:f7:e2:
                    2e:d2:27:28:06:cd:93:f6:0d:90:1f:47:7a:93:5a:
                    34:52:d4:7d:a7:bf:05:9b:d4:c8:24:d7:75:92:c6:
                    d0:d0:57:35:95:2d:b3:e5:1c:50:e3:59:c7:26:0f:
                    fc:fd:54:80:17:2e:98:25:89:93:60:85:7e:df:c8:
                    85:a1:cf:d0:ef:47:9d:b5:86:2a:00:dc:d4:79:e6:
                    c2:b6:5c:a5:7d:8f:f5:58:7a:da:05:3b:17:77:d4:
                    9b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AC:1C:55:83:51:00:16:0A:6D:C2:8B:92:93:F1:59:A6:B0:5D:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/1a5c1871-08d5-32c6-b27c-f0ef66438ab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.127.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ee:d9:56:18:32:db:9e:b5:9c:2c:76:70:1a:11:a8:e5:6a:
         fa:b5:86:42:15:70:9a:cc:60:25:8c:c0:2f:30:9a:f1:16:b6:
         d3:b5:69:21:8c:e6:e8:86:3b:32:2e:cf:04:dd:bd:ce:1a:83:
         bb:1d:e8:40:08:3f:9f:aa:31:99:5a:22:73:a8:0a:78:98:0b:
         02:89:f2:86:4d:aa:af:32:65:28:87:47:c5:3a:d7:14:a3:e7:
         79:21:c2:56:2c:50:46:c1:f8:dc:e4:6b:b0:9b:86:7d:0c:90:
         cb:a3:a9:50:71:2e:9e:99:62:c6:8c:ca:6f:85:4d:9c:19:1d:
         3f:de:03:25:9d:55:fd:26:b9:a5:b8:63:f1:e8:5e:e5:dc:79:
         ed:f7:d4:8f:e3:df:77:58:12:52:be:ca:89:05:da:9c:fd:be:
         7c:50:18:da:51:57:dc:fe:02:cd:df:42:9c:30:1a:49:ad:5c:
         57:00:98:e7:b3:b6:ed:de:81:4e:59:e8:a6:e7:40:59:15:6e:
         3e:f7:02:a1:81:e8:3c:59:28:ee:4c:66:17:98:e8:b1:c8:71:
         5a:da:ad:4f:63:39:80:fa:e6:39:b5:d5:89:9c:55:3b:62:62:
         4e:d0:9b:20:44:c0:93:bb:cc:ef:69:68:07:a3:fe:bd:64:36:
         bd:fd:d6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:07:24 2026 by rpki-client