Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/461aabaf-95c0-3092-b23c-127e90c3f101.roa
File:                     461aabaf-95c0-3092-b23c-127e90c3f101.roa (raw, json)
Hash identifier:          91hvGCOA2Tc0LUmZKGpphPDMHvWqadXMTMDMlk9xcFU=
Subject key identifier:   85:46:F3:14:5B:95:14:75:48:66:38:9B:59:6C:22:AA:AB:7D:8C:F5
Certificate issuer:       /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial:       010D0C9F4328584DDA55CAD6D824816694A5D300
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/461aabaf-95c0-3092-b23c-127e90c3f101.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     398420
IP address blocks:        74.126.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:ca:d6:d8:24:81:66:94:a5:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=069315f3-4ae4-49e0-a72b-3ec48ef2bcc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:a8:8a:df:8e:73:6e:98:61:59:c7:55:aa:
                    4a:75:82:be:72:39:f7:bc:68:5b:c5:e4:aa:77:98:
                    40:ab:eb:20:fa:b9:05:94:f9:e2:df:44:cf:90:26:
                    e8:0b:00:ef:09:27:1f:27:65:99:f7:70:76:46:63:
                    50:2c:1b:06:75:6e:27:c5:b7:a2:24:f1:6e:9a:2f:
                    8f:9b:3b:4c:82:dd:31:5d:1c:b2:2d:65:2b:0a:1f:
                    ff:ad:4a:e1:6e:11:d7:91:2b:95:c2:c2:6d:a9:bf:
                    cd:a0:2b:6b:1e:9d:4d:e7:42:11:41:1a:7b:44:6f:
                    67:6a:92:95:b5:10:2d:9b:b8:59:83:57:81:e8:9b:
                    5c:ff:b1:e2:a3:41:5f:57:86:3f:f6:a5:af:e1:e6:
                    db:44:70:85:ce:1d:e1:4a:72:28:87:92:d4:5f:ed:
                    a7:ae:a9:b5:27:3b:fb:46:a3:10:35:b8:f7:15:b9:
                    42:a5:27:a3:f4:e0:d8:d6:46:3f:23:2c:d1:fa:d7:
                    cb:e7:fd:e5:a7:e3:15:6c:d0:4f:2b:02:b9:27:8b:
                    b8:fe:d5:17:16:c7:7d:91:3a:e1:75:eb:ba:12:4f:
                    a9:00:98:c7:d3:57:70:74:36:98:27:b6:a7:cc:f1:
                    7b:50:bd:d2:85:a4:50:ae:f7:7c:f6:19:99:42:a0:
                    19:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:46:F3:14:5B:95:14:75:48:66:38:9B:59:6C:22:AA:AB:7D:8C:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/461aabaf-95c0-3092-b23c-127e90c3f101.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl

            X509v3 Authority Key Identifier:
                keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:0a:a4:40:04:be:ea:35:ec:ea:3a:ca:d6:9e:46:21:e8:5c:
         1f:f8:bd:fa:73:8f:2f:44:0e:a1:7c:83:e2:88:38:51:5c:f1:
         b3:7b:2b:39:99:cc:2e:de:8c:91:1e:ed:54:d2:5b:29:8b:65:
         11:97:ff:54:1a:7e:44:ef:15:d9:8d:fd:ff:15:89:b7:a2:1c:
         75:b3:5b:f4:ed:49:5c:94:e8:b3:a9:73:b2:b3:ba:80:c5:2f:
         2d:96:2d:db:c8:b3:27:a3:8a:1f:d8:c9:d8:e7:4a:92:78:f3:
         6e:57:e3:1d:aa:4d:f9:8b:0f:b7:24:67:76:a7:4d:98:79:ed:
         8b:bd:8c:20:59:57:51:df:3c:21:4b:30:3d:bb:78:a0:c0:66:
         42:20:8c:9b:30:eb:06:44:a1:bf:70:06:3a:ab:dc:4f:87:8e:
         73:8e:dd:86:b4:75:8b:87:29:0a:12:b3:96:cc:f0:1c:e0:b3:
         a5:50:96:96:a3:5b:5f:96:80:ee:19:ec:bc:01:3c:b0:0e:f2:
         21:fc:20:47:fa:aa:0f:d5:40:39:e5:b1:9d:6b:7a:bb:c5:e5:
         a3:bb:d4:65:8d:96:dc:d9:68:37:4e:5d:2a:ce:fe:f1:26:98:
         a6:22:0a:c7:de:d3:0e:b8:0a:ca:4c:13:f7:7f:a6:93:f3:81:
         40:74:7b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:00:44 2026 by rpki-client