Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bca6eedb-e25c-3d30-a562-4ee94c5202c8.roa
File:                     bca6eedb-e25c-3d30-a562-4ee94c5202c8.roa (raw, json)
Hash identifier:          8ejEg/qxDjd38g7KRK+Vs9jg53smT8LoOg+0zIwY3P4=
Subject key identifier:   1F:FA:93:37:45:68:FF:D6:11:1A:8E:99:25:5F:93:F7:F8:E4:2E:3C
Certificate issuer:       /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
Certificate serial:       010D0C9F4328584E253F05B6BF0E7EF40749ED80
Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bca6eedb-e25c-3d30-a562-4ee94c5202c8.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     19528
IP address blocks:        74.209.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:05:b6:bf:0e:7e:f4:07:49:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=4aa5a024-128a-4cf8-bc63-b4783564a9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fb:59:dc:5a:1a:86:9c:1c:97:c1:5f:30:32:
                    8c:12:09:02:f5:90:f7:2e:ab:75:cf:a6:6b:70:70:
                    af:44:62:6a:21:ee:5f:12:eb:47:70:98:00:92:ca:
                    70:c4:3f:30:6a:4f:25:bc:4c:e5:a9:49:b7:19:cb:
                    ba:47:22:08:f5:2d:c0:d2:9d:a3:bc:28:0b:8a:33:
                    9d:3d:b0:a0:cf:e7:bc:2c:f4:ab:f2:fd:11:a8:b5:
                    1f:49:b7:ac:a8:6f:7d:6e:36:69:65:f2:94:9f:35:
                    f2:26:aa:b9:72:be:28:8b:c0:6b:bc:3c:e0:4f:b6:
                    05:47:98:3e:f2:c8:27:c1:c4:9a:b5:6f:6e:0a:bb:
                    ba:9e:83:6d:a2:9c:5e:cb:66:95:31:fe:14:4f:ef:
                    f0:2e:cd:d9:1f:b9:0c:78:b0:ad:4a:32:f9:c2:fb:
                    b5:d7:26:ee:f1:be:fe:e1:51:16:7b:d4:b2:5d:a6:
                    f7:00:30:3e:6c:99:45:d3:fe:e3:94:1b:f5:78:8c:
                    c2:30:d1:6f:a0:7e:46:4f:7a:dc:5c:9e:54:7e:fc:
                    5e:ac:e0:d1:61:de:47:3e:cc:34:7d:b0:86:12:58:
                    8e:b2:82:3f:3a:fc:bd:1a:d3:16:cd:54:b1:d3:7a:
                    51:8e:59:ec:c7:74:9d:02:a2:9e:b0:da:6a:15:3d:
                    86:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FA:93:37:45:68:FF:D6:11:1A:8E:99:25:5F:93:F7:F8:E4:2E:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bca6eedb-e25c-3d30-a562-4ee94c5202c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl

            X509v3 Authority Key Identifier:
                keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.209.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:71:91:75:86:b6:31:c2:6a:c2:57:60:5d:20:f7:14:be:71:
         46:b9:e5:fb:27:67:ec:1e:ee:90:c2:13:3d:4b:42:47:2c:5b:
         9d:a1:81:3c:06:fb:08:c1:b1:5b:68:89:3d:d4:0a:64:1e:d4:
         36:31:a2:fb:64:a5:11:f6:f0:83:be:e5:cb:68:74:a9:a1:59:
         2b:ee:16:c4:f3:5c:5c:b6:d3:c8:4f:d3:14:f7:fb:a1:08:fe:
         f9:fa:36:d4:d7:24:53:f2:5e:7a:79:f6:ac:b1:bd:9f:d6:0e:
         c5:0a:43:1a:30:84:85:82:64:17:fb:94:55:d8:ae:8e:e5:70:
         60:d1:93:11:e9:fd:8a:9a:ec:ec:76:ca:88:4f:39:d0:bc:52:
         e5:f8:fa:bb:47:22:ef:e2:a8:a8:f0:7d:7f:38:ed:67:26:0b:
         f6:fc:16:62:c6:b2:95:3e:e7:d1:b6:7a:30:85:03:99:4f:b3:
         8f:17:a2:89:02:ee:2c:5c:2e:31:5d:e4:8e:2d:8e:6c:26:71:
         31:82:b0:38:e9:57:f2:33:5f:a8:9b:f0:3a:91:e4:10:3a:a0:
         3d:12:26:0a:54:d2:d3:46:72:01:63:a7:2d:2a:95:d7:64:c9:
         0b:39:d1:56:1e:e1:57:bb:2b:80:a5:f8:8a:77:97:9e:a1:10:
         77:15:92:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:30 2026 by rpki-client