Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/cd0d75eb-f45a-31ff-b78b-475dc6bf5218.roa
File:                     cd0d75eb-f45a-31ff-b78b-475dc6bf5218.roa (raw, json)
Hash identifier:          EOtusl4DI5jcRGKn/vt8V1FiG+W+AYuU2SlA1J/vO5A=
Subject key identifier:   D9:3A:5C:AE:EF:3C:DD:FA:68:4F:06:7C:2A:25:A2:55:BA:C9:DC:AD
Certificate issuer:       /CN=d87bb806-e83b-438e-bf0b-6c487902c669
Certificate serial:       010D0C9F4328584EFCACC45201A3ED6D797B2BC0
Authority key identifier: B6:9D:15:21:E2:67:F3:38:89:29:E3:83:55:12:E1:CD:1A:4C:9F:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/cd0d75eb-f45a-31ff-b78b-475dc6bf5218.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     53361
IP address blocks:        74.121.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/d87bb806-e83b-438e-bf0b-6c487902c669.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/d87bb806-e83b-438e-bf0b-6c487902c669.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:c4:52:01:a3:ed:6d:79:7b:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d87bb806-e83b-438e-bf0b-6c487902c669
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=a1c8902b-069f-4a29-ab79-b97196468410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9a:95:ec:45:67:90:02:fe:30:15:d6:e6:da:
                    10:cd:4c:62:ff:22:29:a9:e0:5c:99:cd:6f:43:ab:
                    88:cd:68:c4:19:ad:04:b1:50:05:76:2d:84:8d:4e:
                    b0:f6:83:be:86:e6:31:09:dc:f3:39:84:6c:9e:c6:
                    6a:b3:00:c4:f1:4c:49:34:17:08:fc:a2:03:88:e7:
                    45:38:49:c2:6c:f1:de:81:68:c5:34:41:44:5c:e1:
                    78:87:3b:0e:44:a7:80:5d:1a:69:ec:e9:c3:77:6f:
                    f1:dd:c4:d7:a3:e5:ad:e1:36:23:2d:c0:3e:73:c8:
                    4a:c9:99:0d:70:64:45:0b:08:a3:95:28:b4:e1:ca:
                    65:aa:4c:0d:5a:53:1a:45:f5:12:0f:4c:17:7d:13:
                    07:b4:26:52:61:8a:63:45:b6:04:7e:9b:f4:7a:40:
                    53:b6:d1:cc:5b:b9:99:98:e1:46:93:ec:b4:33:96:
                    06:fc:25:0b:cd:ee:c4:d2:e3:b6:d6:51:30:ee:fb:
                    9f:da:c5:f9:e6:a4:50:34:30:1b:fe:ac:cb:b2:87:
                    56:69:7f:bf:4c:8f:c7:55:b3:9e:d3:c7:ba:22:82:
                    9f:71:13:51:a1:ed:fe:b0:15:14:20:9f:20:db:ab:
                    4e:50:b6:9c:15:b2:3a:bf:90:66:f7:52:3b:23:12:
                    0b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3A:5C:AE:EF:3C:DD:FA:68:4F:06:7C:2A:25:A2:55:BA:C9:DC:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/cd0d75eb-f45a-31ff-b78b-475dc6bf5218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/d87bb806-e83b-438e-bf0b-6c487902c669.crl

            X509v3 Authority Key Identifier:
                keyid:B6:9D:15:21:E2:67:F3:38:89:29:E3:83:55:12:E1:CD:1A:4C:9F:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:92:83:63:24:c2:75:29:15:7a:92:07:37:d6:9b:06:c7:dd:
         56:e8:4d:6d:e8:f7:30:cd:ba:9a:a8:58:c8:0d:4c:42:15:5a:
         42:44:4f:83:5a:33:c3:2b:49:d9:e9:d5:99:16:ff:8d:98:29:
         f7:66:b4:71:86:43:6f:c0:c1:63:49:46:a7:66:55:30:d1:5e:
         4e:81:5f:22:ee:3c:ca:fd:8f:92:a4:99:38:1f:59:da:2c:1a:
         dd:49:a7:b3:2d:a0:5d:88:ed:98:de:d5:3c:6c:1a:aa:77:b9:
         f1:a3:35:c1:d4:85:15:10:77:d5:57:10:db:36:16:d1:a9:79:
         44:86:45:bd:0c:90:73:cf:b5:6b:e8:85:2d:da:29:5c:d5:0e:
         d8:c8:df:9a:a7:59:af:73:f0:ed:91:02:c6:4d:85:78:64:c0:
         81:8b:5d:41:7a:60:6e:8f:a7:9d:ab:59:04:28:8c:72:00:a5:
         b5:83:29:b9:70:c2:c3:ce:27:63:00:af:79:11:64:47:c0:13:
         0d:b6:25:55:20:6b:7a:57:5b:95:09:2e:8e:35:c3:41:d2:74:
         89:58:34:f5:03:b1:85:fd:48:0d:a7:e3:66:72:8b:09:de:f2:
         83:f6:e9:51:14:ff:87:00:e4:a6:f6:06:37:cd:59:2c:a6:07:
         60:3a:0b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:35:32 2026 by rpki-client