Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f5a69b88-2f63-3932-878a-4bf4cdc67472.roa
File:                     f5a69b88-2f63-3932-878a-4bf4cdc67472.roa (raw, json)
Hash identifier:          nbkdw5vdVPiAlpVOagc1BD/lEAWzoUVeX8fFddwkYYE=
Subject key identifier:   43:9C:E5:D0:41:92:B1:31:4C:8D:70:EF:41:7E:18:96:F2:F8:C1:55
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F4328584DEC7B49EF15A8800F0A686940
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f5a69b88-2f63-3932-878a-4bf4cdc67472.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     53959
IP address blocks:        74.127.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:49:ef:15:a8:80:0f:0a:68:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=36f4d7fb-9d96-4c8c-afed-1a31bf380569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cc:f3:2a:46:fa:3d:26:9f:6e:f8:3f:cd:43:
                    39:6d:67:e0:e2:18:a3:15:b0:61:6e:94:e3:a0:69:
                    c0:44:9e:ff:18:fd:21:18:62:8d:d9:f6:7b:e8:46:
                    f1:98:ed:8d:f9:e1:3a:bf:a5:01:c2:87:f8:fd:b1:
                    03:a4:76:47:3e:b4:91:3c:82:2d:a1:59:9e:b4:37:
                    8c:79:ab:d5:b8:fd:28:98:5f:bd:7f:c2:b6:32:60:
                    bc:24:ea:53:7f:22:b5:c1:64:9a:2f:15:f0:83:60:
                    61:fa:0e:33:81:dc:fb:2e:2a:1e:87:f8:44:7c:13:
                    17:f0:a2:bc:75:aa:bc:28:29:de:e9:d2:6c:e6:30:
                    5f:17:04:c4:4d:32:12:76:05:06:1b:6e:b1:db:79:
                    7c:b7:4e:e0:1c:4f:24:49:36:68:64:4d:03:61:57:
                    ed:2e:93:a5:39:60:3a:fc:7a:b1:c5:f1:16:77:93:
                    ab:91:a5:b7:d5:71:2a:52:d3:8b:8b:04:e8:f4:ca:
                    df:09:e6:d9:10:3c:47:e6:54:07:1e:9a:e6:7e:7a:
                    0a:a9:aa:b2:6c:3c:6d:55:21:4f:d5:8c:09:b6:1e:
                    91:39:63:7f:b2:38:ca:2f:1b:5a:8f:77:5f:4d:35:
                    e5:c7:bc:0e:de:29:5e:eb:2e:9a:f1:f0:4b:db:ee:
                    46:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9C:E5:D0:41:92:B1:31:4C:8D:70:EF:41:7E:18:96:F2:F8:C1:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f5a69b88-2f63-3932-878a-4bf4cdc67472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.127.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:d0:72:ac:2a:35:10:ae:8e:fe:72:d8:87:03:18:e8:da:53:
         f1:f4:7a:4c:7d:93:e7:62:0b:70:45:4d:01:61:f8:24:78:6d:
         69:8a:8b:51:2e:83:a3:c2:ea:a7:8d:4b:ff:16:b4:b6:07:34:
         7c:aa:fd:86:a0:5d:b4:f3:89:85:41:64:40:b0:8d:25:e4:4e:
         db:86:42:bb:7c:f2:99:7d:a4:47:35:42:59:67:2c:c1:62:2c:
         be:15:31:ab:56:40:8d:33:6f:d8:02:9d:c2:b1:77:5d:fd:56:
         38:4c:e3:32:88:33:68:fe:09:5c:5e:5a:bf:fe:ee:8e:55:02:
         63:81:04:ae:8c:0e:b8:73:3b:d3:8c:24:7c:c5:0b:31:69:56:
         3f:99:ae:bf:41:fc:a6:e7:40:eb:fc:ec:ef:57:91:ea:28:2f:
         2c:d6:5b:77:95:05:b5:f6:9c:c8:7f:41:1c:e0:66:0e:95:26:
         10:1b:88:2f:f7:ab:fe:9a:2d:94:d6:05:18:21:16:7e:d5:e9:
         1c:ab:c2:16:a4:b7:90:62:d5:37:c6:ca:e0:7d:0e:27:79:88:
         94:2d:2a:52:5f:88:b9:4f:1a:5b:a5:66:9a:2e:2b:92:49:d6:
         8d:81:38:76:46:77:3e:d9:da:bb:d1:ef:0d:56:33:24:df:18:
         a9:f7:94:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:22:46 2026 by rpki-client