Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/385ad54b-bbe4-3575-8dae-d0027cfa88ee.roa
File:                     385ad54b-bbe4-3575-8dae-d0027cfa88ee.roa (raw, json)
Hash identifier:          tuoCEC5dyKP+fU1b/coXE5ikPQqjochwTusSTc13EXU=
Subject key identifier:   A8:28:89:1E:97:E3:40:DD:92:A1:D1:89:DD:D2:A6:85:B9:3C:A3:79
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584F498A31612D32650E875C5300
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/385ad54b-bbe4-3575-8dae-d0027cfa88ee.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15164
IP address blocks:        74.51.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:31:61:2d:32:65:0e:87:5c:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=77fafccb-9b63-4780-88ad-e812f401752e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:46:b5:f5:bf:a2:81:cf:48:72:34:61:c6:22:
                    a2:99:56:01:7c:c9:48:cb:9c:2d:a9:5f:66:0c:2f:
                    8b:93:5f:36:4d:be:4a:11:59:d7:2c:61:21:23:c4:
                    ab:de:40:a0:02:f6:5a:35:61:a8:83:57:19:2d:36:
                    78:78:56:ab:64:bd:37:c5:40:89:7a:d1:12:ba:01:
                    f0:dc:7c:80:c9:6c:1b:6d:6c:c4:b6:20:cc:9f:87:
                    af:2b:3d:19:98:c3:94:4f:58:f9:44:34:3a:5c:07:
                    34:4d:3d:bd:3f:84:22:19:59:e3:02:9c:73:f4:b6:
                    18:60:db:80:a6:ce:08:1f:db:67:a0:dd:90:33:bd:
                    c9:ee:87:e9:8d:fd:13:cf:fe:b0:9b:0f:6b:b5:5f:
                    b5:2f:15:39:11:ad:ed:15:1b:60:c8:69:0b:17:a0:
                    04:d9:6e:76:49:db:ea:11:7f:18:6d:e0:9f:b6:09:
                    42:b5:48:80:5c:fa:a6:1b:d1:67:7b:97:8f:c8:74:
                    b5:b4:52:b0:92:5e:db:ec:70:f1:c7:a1:73:98:be:
                    91:1a:8d:68:f4:50:5e:b7:38:72:cd:31:36:b2:4e:
                    ca:b8:00:24:f2:08:33:ec:0c:09:fd:57:61:08:dd:
                    51:9c:f4:81:a1:b8:28:02:cf:0f:ca:29:22:b5:80:
                    48:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:28:89:1E:97:E3:40:DD:92:A1:D1:89:DD:D2:A6:85:B9:3C:A3:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/385ad54b-bbe4-3575-8dae-d0027cfa88ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.51.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:fd:ce:40:66:92:cd:68:ea:6b:15:61:51:61:4a:4b:a4:90:
         82:a9:1f:cc:5b:17:30:a5:7e:17:db:4a:d4:fc:f9:e7:08:85:
         4e:db:65:3f:ea:cf:2d:27:56:69:0c:d9:98:19:24:c9:83:a4:
         95:f0:9f:36:61:a1:a8:3d:55:ec:88:ba:57:84:b2:64:bf:83:
         ff:38:a2:c5:f5:24:44:3a:1a:7d:c1:b9:95:ec:c1:75:2a:1f:
         99:3f:37:40:59:34:b4:29:04:f7:ec:81:96:39:57:11:20:07:
         d3:cf:74:23:b3:92:21:54:2d:86:fa:6f:34:1e:5e:de:50:6c:
         13:65:5a:83:d1:b1:c3:61:fd:6c:ee:00:5c:c9:f9:5a:dd:f7:
         e0:f3:4a:f2:e2:af:66:2b:0a:d0:6c:9d:67:b9:fe:9d:96:fd:
         45:bd:c6:b0:dc:60:da:b8:29:6c:98:f7:e9:ab:58:2c:13:ff:
         03:3c:22:66:19:48:85:92:ca:77:c6:f1:0a:e8:b7:7d:ba:6f:
         cc:56:47:b5:25:40:f2:2d:08:96:ff:9f:ce:81:f2:43:a7:83:
         10:ca:38:31:d6:ce:25:e0:1f:90:0a:f4:3a:d1:90:f5:c1:9d:
         cd:c8:d2:71:66:a8:17:7e:bc:46:2b:72:17:67:43:18:25:4f:
         b2:5b:d1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:32:55 2026 by rpki-client