Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98/7d16e70f-e36e-3f21-baae-9ea8d8775fa0.roa
File:                     7d16e70f-e36e-3f21-baae-9ea8d8775fa0.roa (raw, json)
Hash identifier:          qLhcmtcqjeekKaEU0mv9BLJtU9KcVfzXU7Az7oIaTkA=
Subject key identifier:   63:E4:58:BE:2D:33:AE:57:E6:E4:73:A2:18:F2:85:D3:B1:DE:1F:27
Certificate issuer:       /CN=f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98
Certificate serial:       010D0C9F4328584EF1822DD7E8820BE3932FEF80
Authority key identifier: D0:3C:96:E1:0C:B6:6C:11:4A:A8:F4:92:61:4B:1F:28:22:B8:89:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98/7d16e70f-e36e-3f21-baae-9ea8d8775fa0.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     9678
IP address blocks:        74.214.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:2d:d7:e8:82:0b:e3:93:2f:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=bcafead9-94bf-49bb-8a57-e96f8a1d2728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:84:6e:93:55:b0:62:7b:84:d0:11:e5:7b:9b:
                    d1:e6:d0:06:a9:cf:41:d0:3e:1e:e2:d5:f9:a1:b5:
                    68:af:a6:ea:74:4b:d8:05:60:fb:e5:e7:8b:9d:d6:
                    51:4f:35:68:9d:ce:84:f2:b0:04:4d:e6:58:78:8f:
                    83:8b:10:4a:f5:b1:09:c5:9b:e2:85:65:d4:73:54:
                    06:c6:f8:5a:07:90:73:4a:ec:8f:ed:e4:8c:de:e9:
                    c6:b5:21:71:9b:4f:c5:95:27:8a:9d:88:4b:8a:96:
                    d4:1b:47:17:4a:f6:1c:db:b3:5b:97:30:cf:d9:27:
                    26:71:a3:9c:54:27:50:8c:ca:6a:76:c8:5a:a5:b5:
                    f9:65:70:1c:d4:54:ed:d2:e6:6f:cb:dd:3c:38:5f:
                    d5:20:32:0b:d1:d7:5f:92:2a:80:82:16:40:76:b2:
                    6e:06:65:e6:38:d7:29:70:1b:96:3b:83:5f:30:45:
                    83:5c:9a:5e:24:73:53:11:4e:b2:65:f7:52:a1:89:
                    df:69:98:ce:89:b6:1a:b5:83:e8:f1:b2:25:63:ff:
                    67:e1:34:6b:ca:db:0f:ab:8d:f0:af:4c:11:7c:6c:
                    54:10:7f:aa:2a:8f:0b:3a:89:68:b1:b8:ab:fa:3b:
                    12:a7:c8:b0:72:61:45:7e:8c:03:ce:17:2b:48:db:
                    fa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E4:58:BE:2D:33:AE:57:E6:E4:73:A2:18:F2:85:D3:B1:DE:1F:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98/7d16e70f-e36e-3f21-baae-9ea8d8775fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98.crl

            X509v3 Authority Key Identifier:
                keyid:D0:3C:96:E1:0C:B6:6C:11:4A:A8:F4:92:61:4B:1F:28:22:B8:89:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f56fd9ea-3b03-4aa4-a1fb-0e626e17fe98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.214.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:5d:dd:1e:1f:ec:74:50:93:23:ab:96:0f:c3:df:e2:93:13:
         80:86:1f:6f:fd:e9:9b:c1:c7:8f:ed:75:fa:f2:e5:4f:99:46:
         13:c7:a9:56:d8:54:3a:34:6d:c0:92:f9:d3:8d:84:b1:d6:1e:
         58:9d:ef:bf:81:b4:8d:2d:63:ca:da:4f:cc:9f:2b:19:f2:7e:
         26:d2:76:03:f1:5f:65:d2:38:6e:24:f9:e7:5b:0e:ed:77:4b:
         d5:ba:01:27:44:bd:41:05:24:37:e1:df:23:e3:25:85:a7:14:
         0a:c9:cb:99:44:fb:db:5a:26:de:14:9b:20:66:4d:4e:37:da:
         f0:a1:e4:0a:be:cc:34:cf:c8:f7:25:d2:85:a7:68:9a:7a:9c:
         bd:38:f8:08:4e:bb:ae:93:ec:cf:7d:c2:c4:07:bf:5a:9a:a3:
         0c:18:d6:07:04:d5:f1:b5:da:16:e7:9b:4b:5b:27:2a:dc:43:
         1b:db:bc:2a:b9:8c:68:23:9b:89:91:c1:6d:07:f3:5a:ce:4b:
         c3:2b:cd:5c:c7:89:b3:20:16:2f:04:5c:24:43:20:c0:91:ea:
         c0:03:8a:bd:cf:f6:c9:8b:9a:fb:3b:ef:99:94:c0:31:a6:61:
         63:13:73:cb:a0:ff:a6:b4:77:c4:25:7b:da:38:38:ef:42:f0:
         68:ee:af:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:35:27 2026 by rpki-client