Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0a18e11b-eb11-43e4-a2cf-385b30d85609/8b00d9c8-0891-386e-b348-714d00250bd0.roa
File:                     8b00d9c8-0891-386e-b348-714d00250bd0.roa (raw, json)
Hash identifier:          nppIPRrXPv38xgZj7Entx7mOfvyLnJdWO2C8D0dUcMg=
Subject key identifier:   44:51:5C:DA:52:3D:EA:E4:4A:F8:4F:CB:2F:86:3A:0D:68:78:82:81
Certificate issuer:       /CN=0a18e11b-eb11-43e4-a2cf-385b30d85609
Certificate serial:       010D0C9F4328584F30527C511BA76DD024484AC0
Authority key identifier: 42:F4:E1:3C:91:5F:08:7E:3D:BA:FD:2A:5F:32:51:93:F5:33:BF:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0a18e11b-eb11-43e4-a2cf-385b30d85609.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0a18e11b-eb11-43e4-a2cf-385b30d85609/8b00d9c8-0891-386e-b348-714d00250bd0.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     32987
IP address blocks:        74.114.148.0/24 maxlen: 24
                          74.114.149.0/24 maxlen: 24
                          74.114.150.0/24 maxlen: 24
                          74.114.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0a18e11b-eb11-43e4-a2cf-385b30d85609/0a18e11b-eb11-43e4-a2cf-385b30d85609.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0a18e11b-eb11-43e4-a2cf-385b30d85609/0a18e11b-eb11-43e4-a2cf-385b30d85609.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0a18e11b-eb11-43e4-a2cf-385b30d85609.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:7c:51:1b:a7:6d:d0:24:48:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a18e11b-eb11-43e4-a2cf-385b30d85609
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=f0e98dc9-ee84-4fed-b341-b35e6705ef20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2c:63:47:97:e0:00:03:bd:7b:33:f6:c8:5f:
                    0c:e7:72:51:78:91:77:9e:36:78:a8:35:83:00:0b:
                    82:eb:2c:8f:6f:81:6f:39:1f:e0:71:7d:11:1e:7a:
                    e9:ee:6e:d1:d5:61:25:3b:b1:3a:d2:e9:d3:fa:c0:
                    4d:66:c7:e9:69:eb:35:0c:a3:0f:e3:d9:6f:3e:1c:
                    91:cf:87:2d:29:de:2f:73:10:05:96:ee:90:04:3a:
                    5b:c2:69:bd:34:c6:78:74:b1:99:80:24:5a:df:87:
                    97:91:e4:9a:5c:f0:b2:23:cf:18:50:45:18:5c:d1:
                    0e:e6:dd:f1:62:7d:6f:99:3f:85:29:5a:66:53:53:
                    d3:57:98:22:d4:23:1f:be:83:da:a0:74:bd:3c:30:
                    05:d2:09:7e:10:ee:b4:71:78:e7:aa:a9:b0:4f:b5:
                    2e:c7:d3:59:b7:b1:b1:ef:21:d6:e4:bd:ce:3b:2a:
                    02:1a:ce:d6:ba:ba:57:bc:82:00:44:9b:6b:20:78:
                    69:9e:cf:fe:68:b7:98:c4:ac:06:d7:7e:d0:50:01:
                    6b:8e:45:3a:0c:1a:96:12:fd:cf:86:aa:bc:26:7b:
                    11:ec:41:c8:91:e5:94:9a:1d:7c:be:a6:0a:b5:bb:
                    42:35:5d:46:9c:57:6d:37:86:fd:06:82:12:1c:59:
                    bf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:51:5C:DA:52:3D:EA:E4:4A:F8:4F:CB:2F:86:3A:0D:68:78:82:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0a18e11b-eb11-43e4-a2cf-385b30d85609/8b00d9c8-0891-386e-b348-714d00250bd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0a18e11b-eb11-43e4-a2cf-385b30d85609/0a18e11b-eb11-43e4-a2cf-385b30d85609.crl

            X509v3 Authority Key Identifier:
                keyid:42:F4:E1:3C:91:5F:08:7E:3D:BA:FD:2A:5F:32:51:93:F5:33:BF:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0a18e11b-eb11-43e4-a2cf-385b30d85609.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:e8:ea:28:de:24:aa:3c:24:60:89:13:04:37:49:2f:68:cf:
         a3:b4:c8:62:62:c2:f7:8d:3d:bb:1c:25:d8:a9:2e:71:2c:c4:
         54:84:5b:80:a5:1c:62:20:6b:58:9a:eb:c6:68:fc:7f:f1:78:
         68:9d:ed:e8:a8:86:c4:4b:60:e6:6a:bc:55:19:d9:e8:9f:57:
         92:a9:b3:aa:0a:48:7c:1d:da:8e:0f:f9:1f:4b:c8:d0:26:6c:
         7e:7c:58:07:69:66:57:81:14:45:5e:48:c2:43:50:dd:e0:ac:
         dc:15:29:5c:1a:20:6c:29:ae:6b:42:7b:9a:8d:f1:96:3f:ee:
         bc:d5:3d:52:d9:2f:56:41:65:91:dd:a6:b3:9b:d5:04:14:62:
         24:45:ee:4b:81:07:54:d4:c3:df:b9:46:67:d7:af:27:ea:33:
         50:cf:54:29:4e:cf:5e:f1:de:a5:dc:61:d1:86:37:2d:73:cf:
         a5:65:0a:3f:ac:31:9b:61:2e:25:72:f6:9c:55:67:f2:e2:ca:
         53:42:67:78:1f:f3:98:94:03:f0:6b:84:f6:94:54:ef:78:24:
         41:ad:91:40:9a:ad:55:b9:75:5a:61:c8:90:ce:f2:36:af:c5:
         ef:e0:df:da:82:8d:89:54:47:73:80:58:42:d2:c4:79:25:2f:
         d1:51:e9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:51:37 2026 by rpki-client