Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/74643a59-339d-31eb-989b-007a513d5754.roa
File:                     74643a59-339d-31eb-989b-007a513d5754.roa (raw, json)
Hash identifier:          SNEXx1Vv2ow7viFF+d+BAlvcJvZXj03kMQzEAxr9l/k=
Subject key identifier:   EF:4B:26:E2:C0:45:27:5A:1F:30:14:20:CA:ED:18:8D:C6:CA:4A:E8
Certificate issuer:       /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
Certificate serial:       010D0C9F4328584E9D4A760C8210F4CA93A9BB80
Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/74643a59-339d-31eb-989b-007a513d5754.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        204.79.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:76:0c:82:10:f4:ca:93:a9:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=9ec9381d-8b7f-4778-8a65-ef4bb27e7be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3d:13:c5:2b:b8:e7:18:35:8b:72:1b:15:3d:
                    67:af:2c:ca:c8:5f:a1:4d:ae:26:e8:6c:65:e7:43:
                    0b:64:1a:d9:2e:64:cd:b9:07:e4:ab:48:31:bd:3c:
                    d9:3c:ea:86:01:70:37:f3:ef:0e:45:8b:39:e6:81:
                    95:f2:17:ab:d1:e5:63:39:b6:19:92:7b:9f:56:06:
                    be:37:47:5b:72:6f:1f:7d:cd:e5:e2:40:8f:f6:d4:
                    63:b8:5e:af:6c:3f:97:aa:53:1d:32:f6:c9:65:03:
                    9a:41:1d:b5:5b:c6:78:c2:64:7b:ad:b1:5c:4d:67:
                    2b:02:37:4c:42:63:6d:b7:2b:a0:0e:ab:dd:44:3b:
                    c0:85:ed:1d:7e:a8:7e:b9:bc:55:f2:33:b2:50:32:
                    4d:69:dc:d9:4c:93:67:1a:ab:2b:f3:bd:32:6a:c5:
                    e3:1b:d1:05:59:69:4d:41:d6:57:92:85:57:33:fb:
                    b8:ec:60:c7:c3:0d:b9:df:1e:ec:2c:17:42:f6:ac:
                    67:fa:ff:70:d5:98:9f:0e:d9:fc:85:3a:0d:dd:6d:
                    45:bc:b8:56:d9:73:d3:dc:59:85:d6:6e:9d:af:f8:
                    56:10:a7:e9:f6:23:99:00:0e:08:76:81:6a:da:ff:
                    fc:1e:d7:36:4f:07:64:4d:31:32:dd:69:e0:86:15:
                    eb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4B:26:E2:C0:45:27:5A:1F:30:14:20:CA:ED:18:8D:C6:CA:4A:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/74643a59-339d-31eb-989b-007a513d5754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl

            X509v3 Authority Key Identifier:
                keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.79.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:da:6c:ef:5b:24:6d:4a:66:94:73:b3:12:23:67:d9:27:04:
         9b:f2:a1:2c:fa:9c:bf:b1:b1:33:92:41:cc:2d:47:40:f5:3f:
         d5:da:7b:8a:f2:ee:7e:9a:b9:26:a7:03:17:c8:31:44:e2:72:
         3c:3a:fd:9d:1a:2e:a8:14:53:b7:65:5c:dd:cb:76:82:47:79:
         c1:6c:4d:d5:f7:19:ad:41:d7:aa:f6:b9:23:2a:dd:92:21:22:
         9c:5d:4a:07:c7:34:02:96:7d:3d:73:61:ef:08:26:04:b8:16:
         03:57:3c:9a:6e:3f:52:e7:5f:d6:54:e8:e7:19:88:eb:d6:44:
         c7:94:1f:21:06:c7:7b:fc:90:1f:90:68:f3:5e:22:e1:c4:ec:
         a8:96:2f:ed:b4:0a:6f:c2:30:7f:fc:6b:10:5e:e2:64:cd:58:
         a6:0f:0e:5a:8c:4d:4e:e9:34:f3:1d:b2:de:33:ed:6f:35:84:
         8e:65:f4:e9:e7:a4:6f:ce:f4:ca:86:4a:aa:32:10:46:0d:aa:
         76:8c:7d:ab:38:b0:33:91:71:23:b2:ab:3f:4e:a2:b2:28:44:
         01:f0:c9:4e:ed:f1:cf:dc:2f:64:e5:f4:2a:14:24:ea:ca:a7:
         ac:2f:69:28:8a:c9:a3:9d:5e:ef:9e:24:8f:ac:79:b1:7a:d3:
         28:6e:5c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:44:24 2026 by rpki-client