Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/385ad54b-bbe4-3575-8dae-d0027cfa88ee.roa
File:                     385ad54b-bbe4-3575-8dae-d0027cfa88ee.roa (raw, json)
Hash identifier:          2/ZjHW+pzpJE/FUCW3yjJid3kOvL9pGPDyiUdbMHC0s=
Subject key identifier:   8A:7D:53:29:94:71:DE:B0:76:C8:72:11:8C:80:5F:DD:26:04:E8:0C
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584D0217BC899AB2DF11F75DAAC0
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/385ad54b-bbe4-3575-8dae-d0027cfa88ee.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     15164
IP address blocks:        74.51.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:bc:89:9a:b2:df:11:f7:5d:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=4827029d-bb95-48b8-a514-d916044c2548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a8:73:38:4e:15:5c:fb:63:51:96:f2:80:ae:
                    85:ac:1a:34:d8:f4:f6:7c:ea:52:fe:22:97:dc:9e:
                    5c:46:71:00:ad:6e:80:79:e8:83:d3:57:f4:39:95:
                    7e:a5:75:9c:4c:89:3a:ac:34:13:15:fc:63:42:a2:
                    62:9c:fd:ec:ad:74:d2:64:32:74:3d:0d:96:1c:a9:
                    39:b9:e9:b0:cb:e7:62:67:3d:78:96:13:8d:1b:ba:
                    35:f1:8c:5f:50:81:22:4a:93:50:e7:a5:dc:eb:11:
                    91:76:d8:bc:b4:ee:75:46:88:d2:ac:93:bf:0b:f0:
                    47:42:b2:f2:4f:80:f2:7a:36:d6:76:e2:9a:95:e2:
                    75:af:71:d9:b6:7a:6a:3a:e0:b6:39:1b:fe:35:99:
                    25:9e:0a:b4:fe:57:57:8b:0a:01:ba:52:b2:34:64:
                    5a:24:54:7a:84:86:de:df:6d:ec:8f:be:08:4b:88:
                    85:34:4f:50:23:37:25:28:0d:e4:1d:04:14:e7:63:
                    27:01:7d:2c:19:b6:f1:ea:01:b6:ea:1f:9b:97:6f:
                    ce:fe:d9:f8:6a:61:92:86:3b:96:32:59:a7:b9:62:
                    5c:2b:e1:89:9b:8f:a9:63:c4:7c:31:85:68:1e:0c:
                    f6:07:1c:72:16:ab:39:05:6e:ec:12:fd:6a:cb:3f:
                    a9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7D:53:29:94:71:DE:B0:76:C8:72:11:8C:80:5F:DD:26:04:E8:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/385ad54b-bbe4-3575-8dae-d0027cfa88ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.51.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:93:5a:ee:32:1a:5f:39:89:96:47:97:fa:72:95:e3:47:52:
         6f:7a:27:4d:af:65:8c:e5:82:e5:98:11:59:19:0f:98:71:61:
         6f:06:17:2e:af:70:5e:da:29:9f:43:df:4c:e3:49:f2:78:23:
         bf:c3:a8:70:50:b9:c3:35:68:d3:d1:77:1a:b3:3c:10:18:bd:
         9d:3b:22:33:5e:5d:f3:3c:ae:70:f4:f7:79:86:d4:58:27:77:
         7c:e4:59:9e:ec:8e:62:6a:39:b5:16:d3:ae:2a:39:a4:55:16:
         f1:84:01:49:48:c7:b4:b3:b6:6d:4f:90:d5:b4:82:de:fe:25:
         af:d2:f0:54:b8:60:d8:8c:02:01:b3:b9:0a:7b:03:c6:53:6f:
         96:52:f2:aa:2d:1d:91:e7:4f:4f:39:9d:8c:f6:ee:10:1c:cd:
         82:14:5e:88:a0:91:49:3f:87:64:44:43:ae:3d:c9:4f:c2:02:
         7d:fd:6f:23:6e:90:5c:95:1c:e8:7c:5f:34:53:65:c2:66:c2:
         ae:13:75:ec:69:a2:45:6b:1a:73:39:ab:42:69:34:48:d2:37:
         dc:88:a2:d1:03:51:67:e3:b9:f9:a8:d9:d3:40:4e:6f:56:b8:
         58:85:1f:cb:59:9e:b0:81:b8:fd:34:aa:b9:9c:ae:8e:fa:f7:
         2c:38:85:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:37:47 2026 by rpki-client