Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/fe87d53e-d268-37b4-b4ef-d6318b6ded87.roa
File:                     fe87d53e-d268-37b4-b4ef-d6318b6ded87.roa (raw, json)
Hash identifier:          2Lb1cHteCukV+MciUqYquphso8UnnYasyn4Y1Pshc6s=
Subject key identifier:   7A:C1:E8:4B:97:88:9F:96:0C:56:15:E8:C1:79:1F:A3:1E:89:07:F5
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584D0217BF6F2CCAFE90D6B19A88
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/fe87d53e-d268-37b4-b4ef-d6318b6ded87.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     15164
IP address blocks:        74.51.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:bf:6f:2c:ca:fe:90:d6:b1:9a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=ffed1914-e7e1-40aa-b0ad-76bc4eba0e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b4:b1:68:15:a1:25:1a:61:6d:d7:f9:5f:34:
                    81:4b:21:9d:49:ac:c1:56:f5:d8:6e:34:be:34:f0:
                    0b:ee:d9:cd:11:10:b3:aa:6d:6c:17:cc:a3:b8:9b:
                    3a:ee:33:39:ac:2a:3e:aa:14:22:4a:78:fc:5c:8b:
                    1f:0b:ce:4b:b8:92:80:3c:bb:a0:d9:83:a8:92:46:
                    0a:50:59:0a:1f:44:95:d1:c0:c6:aa:19:2a:e5:1d:
                    f6:7c:42:ec:23:ed:ac:32:db:82:5f:44:29:1f:7d:
                    77:f3:d2:b5:bf:68:8e:d9:de:f4:d3:76:99:ab:34:
                    85:fd:f5:60:46:de:4d:6e:6d:62:10:7e:39:04:e9:
                    6b:20:6c:5c:b5:77:5d:2b:03:ed:24:79:a1:b9:4e:
                    b6:3e:63:08:4e:08:95:9d:a4:e0:6d:f7:33:81:dd:
                    b0:33:6a:bc:fe:95:6e:40:b2:19:2d:af:ed:87:2d:
                    53:b2:e0:39:16:c7:ce:a2:31:b0:eb:6d:fd:4a:14:
                    69:d5:7e:fa:4d:7a:dd:37:db:a3:cf:73:c7:a1:20:
                    23:35:aa:cd:92:d1:91:21:66:e9:c1:62:97:1b:0d:
                    44:17:61:4c:b0:83:c7:4a:68:81:46:96:9c:dd:32:
                    75:1a:ac:b1:11:03:04:57:43:4a:6b:63:37:85:f4:
                    86:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C1:E8:4B:97:88:9F:96:0C:56:15:E8:C1:79:1F:A3:1E:89:07:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/fe87d53e-d268-37b4-b4ef-d6318b6ded87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.51.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:45:aa:4b:c7:4e:7a:cc:7b:3c:4a:52:e1:ae:ee:1e:5f:f0:
         20:f3:87:cc:22:cb:14:35:88:f3:c0:74:ec:84:5a:ea:d5:2a:
         0f:c3:eb:a1:f8:d5:16:35:56:c2:95:05:2f:72:8d:28:51:93:
         14:24:f5:46:e6:06:a5:bd:9c:55:1f:95:61:f1:70:ad:43:14:
         f2:8f:fc:f7:e5:3b:21:f6:93:d6:49:2b:95:62:52:44:3a:9d:
         65:a8:65:af:ac:69:6c:6d:97:96:c9:e2:4a:b0:05:3d:7e:de:
         89:42:fd:8f:26:23:ee:55:88:a5:4a:31:c6:29:a2:3c:74:db:
         af:78:58:5d:94:77:94:fe:3f:a1:06:e7:fa:cf:b2:cd:24:e6:
         56:47:1d:ab:7e:8d:ca:b7:3e:59:b9:fb:a5:e1:8a:96:9c:1e:
         b9:22:60:fd:b9:ff:49:ea:ff:b4:78:4e:bc:46:34:48:fd:c2:
         02:87:5e:11:4d:29:2f:2e:db:8c:ac:d4:94:cb:49:20:eb:17:
         41:ee:a6:78:aa:03:d5:ce:02:45:bc:95:ff:37:db:26:b1:e1:
         a2:71:4b:3f:3b:ba:3d:67:39:08:b4:c7:06:6c:ad:85:37:a5:
         ed:6d:ca:ca:5d:6d:ec:a0:51:70:5e:41:0b:45:f7:00:1f:92:
         eb:a5:9e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:50:27 2026 by rpki-client