Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa
File:                     bdf6a7d1-a324-35af-8414-d2ae101242c2.roa (raw, json)
Hash identifier:          LRtCKgkQaMWMhr8K2bjKCN5j3bbsrgnu8Yoss5HyLOM=
Subject key identifier:   27:75:BA:D2:90:27:A3:6A:E2:D8:06:90:F8:52:8D:21:FD:AF:16:94
Certificate issuer:       /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
Certificate serial:       010D0C9F4328584E253F05940961CC3172807B80
Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     19528
IP address blocks:        74.209.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:05:94:09:61:cc:31:72:80:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=351efed6-dd41-43c9-a79f-0a7354263cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:18:b5:d2:d7:68:5e:16:83:66:9f:cf:9b:
                    24:59:90:03:54:38:9c:a9:86:2c:22:b6:79:20:f5:
                    72:3e:f1:6d:43:b1:31:86:cd:00:bb:ad:91:99:c0:
                    e1:d5:7d:f2:dc:38:a7:94:dc:1c:a0:e3:f7:76:31:
                    f5:eb:b8:de:3e:56:fd:8d:e1:d4:75:35:cd:6f:4e:
                    93:9e:46:e9:28:08:6e:85:ca:33:0d:a5:10:61:f5:
                    6a:62:52:e8:2d:74:1c:d7:04:41:cc:df:55:33:56:
                    37:4d:59:b6:e4:0c:75:60:a8:67:e1:71:c2:b0:f3:
                    0d:2b:bd:f1:52:24:90:f6:4e:52:00:af:e0:a8:00:
                    35:eb:b5:b6:6e:6f:b1:20:ef:e2:b1:db:c6:f8:64:
                    8f:c2:51:57:52:df:61:0d:03:93:11:aa:96:eb:94:
                    da:6f:ea:50:0e:10:71:42:4e:73:e8:fc:a0:44:db:
                    69:d2:25:eb:83:10:08:32:73:59:6e:17:e8:0c:28:
                    d0:84:9f:83:2d:f3:f1:50:fc:6d:fc:96:55:34:7e:
                    10:83:c2:fd:60:2b:45:df:d2:63:df:ad:02:83:24:
                    a8:40:10:04:07:20:58:68:c4:7b:de:50:06:05:f8:
                    1d:8e:1c:d1:8f:9b:d3:7d:cc:0c:51:22:d7:7e:bb:
                    1e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:75:BA:D2:90:27:A3:6A:E2:D8:06:90:F8:52:8D:21:FD:AF:16:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl

            X509v3 Authority Key Identifier:
                keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.209.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:aa:11:92:d0:dd:b5:33:d5:aa:47:28:94:84:4b:0a:33:8b:
         fd:7f:9e:e5:af:87:db:54:9a:a2:be:b6:94:ee:ea:bc:7b:67:
         d2:8b:f8:c6:bb:6e:67:62:21:99:c4:87:c8:78:28:5b:d3:bf:
         3a:9f:ef:f9:bb:e5:16:97:a3:fb:99:33:7a:63:bf:43:ef:60:
         14:98:b2:d4:71:aa:7c:df:3e:69:2d:cb:58:a5:95:64:6e:77:
         d7:89:2c:db:cf:1d:5f:a3:8d:22:83:28:35:7e:82:a4:5a:4d:
         a4:02:e5:80:1a:82:9d:5a:d0:69:62:86:61:63:7c:9c:67:e5:
         71:a1:75:8c:27:42:d5:49:f5:f1:e1:a3:d2:7d:7f:67:90:b7:
         2d:14:5a:af:7b:15:6d:3b:a9:71:3b:ab:b9:94:64:de:e5:82:
         32:0e:02:8b:ae:94:96:f9:16:2a:5b:d7:ca:d7:1e:94:01:6c:
         cd:b9:45:eb:7b:a1:bb:c9:96:15:3d:db:63:2c:a6:ee:8b:89:
         bc:58:88:20:ba:a4:91:28:c7:c8:cd:22:43:25:1d:5f:7f:f7:
         a6:f3:40:80:6f:99:7d:cf:3b:e0:fe:e0:3c:f1:15:b3:13:0d:
         79:6f:3d:4e:eb:af:b8:08:a8:34:06:cd:f2:02:41:c9:51:72:
         c3:5d:78:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:01:18 2026 by rpki-client