Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/decc79d0-7a73-3fc2-a68f-cb88551c6c64.roa
File:                     decc79d0-7a73-3fc2-a68f-cb88551c6c64.roa (raw, json)
Hash identifier:          Ri8put1C/wN2+g0sQgCY04dZw50vBSUl2rwltoY33Uo=
Subject key identifier:   38:56:55:2B:F8:A2:ED:46:80:96:64:80:EF:31:65:50:B0:A7:80:69
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584D0217BDC1DE8A958FD3B7FB80
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/decc79d0-7a73-3fc2-a68f-cb88551c6c64.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     15164
IP address blocks:        74.51.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:bd:c1:de:8a:95:8f:d3:b7:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=af51c06a-3f18-4cbb-8a13-8e945f519641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:55:4c:79:60:4b:84:c1:0b:6f:b9:ad:1b:
                    6f:99:5d:0a:63:c4:e4:65:bf:3e:52:47:af:8c:1e:
                    e4:88:f5:89:ec:e8:75:2a:13:67:2e:6f:6d:70:f5:
                    ce:36:11:9c:d7:8c:41:e6:d9:03:7c:ee:27:85:5f:
                    44:7d:74:ce:80:64:d9:f6:7b:fd:e6:3e:59:7e:d3:
                    e2:f2:25:77:80:0f:1b:8f:ae:f0:80:27:5b:d9:32:
                    d0:df:d1:44:99:0f:09:a5:3d:5e:31:24:a2:d8:88:
                    ce:04:f7:47:27:8e:ef:1e:b6:d1:df:2c:26:8b:4b:
                    77:0e:bc:25:79:74:03:26:10:cc:20:ac:94:77:71:
                    5a:87:62:43:9c:69:81:46:e9:20:9a:c9:51:16:62:
                    b0:39:b9:fb:a6:13:84:a5:40:04:6d:6e:42:c5:e5:
                    f7:09:df:9a:96:32:39:5b:38:e1:39:5a:eb:39:e7:
                    58:cf:9d:c0:95:af:e7:bc:d4:eb:db:97:eb:15:c0:
                    20:fe:d9:3a:37:d5:c3:96:aa:fc:41:c4:f3:d6:6e:
                    9d:dd:4a:92:76:91:bf:21:96:e9:ee:b0:76:91:ce:
                    29:ae:37:10:66:ed:84:8d:36:05:41:32:57:25:0d:
                    3c:07:e5:ea:57:93:e0:cb:ae:0d:a3:4f:c1:57:c6:
                    b5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:56:55:2B:F8:A2:ED:46:80:96:64:80:EF:31:65:50:B0:A7:80:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/decc79d0-7a73-3fc2-a68f-cb88551c6c64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.51.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c8:36:0d:58:33:85:f8:2d:eb:27:c7:3e:60:6f:e4:41:df:
         22:23:62:08:ff:e7:51:d6:3e:0b:8b:05:00:af:74:f3:82:83:
         5c:18:15:f8:c8:41:e9:5c:27:72:54:d6:8b:0f:b9:7f:51:36:
         74:df:b5:ca:bb:47:50:e9:72:98:63:6a:96:bf:a9:3f:3d:9c:
         12:ed:63:a7:d0:e4:5f:4a:70:b9:11:92:55:29:83:08:b1:4d:
         83:59:ce:ab:68:5c:c0:70:4c:14:9f:2b:a3:89:09:3b:db:03:
         e4:c2:6f:52:03:77:ed:02:bf:af:a8:03:15:9f:92:e0:15:6a:
         95:52:54:78:36:7c:c1:20:e1:0b:b1:9a:ad:99:f8:90:fd:4b:
         de:f9:1b:51:31:12:b6:0a:12:ec:69:16:0d:26:46:53:43:e5:
         a0:61:80:4c:2d:df:2b:dc:b0:bf:a3:f0:84:77:1d:b6:4f:bf:
         46:58:38:77:7f:b3:e2:4b:3b:9c:65:c6:80:9a:d0:5d:2e:c5:
         f3:97:de:01:0c:ca:a8:7b:63:92:34:73:5d:c9:5e:54:03:d8:
         fd:61:90:63:11:3f:9b:4c:18:79:6d:4a:2d:3f:48:ef:d5:d5:
         d2:05:f7:b1:02:b2:60:f5:88:e8:54:61:5b:06:0b:cf:e0:b2:
         83:67:e6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:14 2026 by rpki-client