Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/3ea9051b-7975-35bc-9f2f-e61d3077ba65.roa
File:                     3ea9051b-7975-35bc-9f2f-e61d3077ba65.roa (raw, json)
Hash identifier:          EqRHE2rGyelHAlki1KipLRhZe/MPGj2YV5jII37LmUs=
Subject key identifier:   9F:F4:0E:1F:4B:A3:AC:D6:69:41:81:70:EC:67:9E:92:A3:27:0A:E5
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584F3A17CF72A67042A00F3485C0
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/3ea9051b-7975-35bc-9f2f-e61d3077ba65.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     4540
IP address blocks:        74.50.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:cf:72:a6:70:42:a0:0f:34:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=be0140d2-e07a-4c00-bb32-7626a960c592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6c:5c:ec:71:8d:f5:03:bf:35:10:7b:b9:e7:
                    30:6e:d7:06:c9:f0:7c:c9:3a:3c:16:38:be:3a:b5:
                    23:f0:28:90:b8:6f:e0:9a:93:a7:ea:73:e3:89:52:
                    9c:28:0f:83:96:05:e7:36:b4:09:48:4d:da:17:1a:
                    e5:b7:c9:af:3f:53:14:ec:f0:e1:33:87:4c:ab:e9:
                    29:06:ab:64:02:51:11:d3:14:c4:e4:4a:5d:2b:ef:
                    f5:1a:47:87:74:19:8d:d3:78:eb:ac:07:10:2b:88:
                    ec:b2:3a:2f:67:79:27:3d:fd:29:3c:02:be:2f:f9:
                    30:c4:f3:b5:c9:74:c5:34:f7:7a:b0:e8:a3:ba:f9:
                    24:e1:06:59:a9:c7:70:1c:7b:c9:df:93:f2:6e:ac:
                    ab:7a:e1:b8:99:91:48:b2:4f:1b:98:69:7d:75:89:
                    20:c6:ec:a8:e4:92:ae:96:6e:df:69:e4:04:a7:ff:
                    df:14:5a:3d:41:b1:7d:d7:fd:0c:c3:d7:fc:05:1b:
                    02:7f:80:2c:5b:55:d1:8b:95:e6:3b:5d:8f:51:48:
                    57:72:2c:80:38:76:5a:a6:52:ce:88:ec:b1:6f:63:
                    97:fc:96:2e:98:df:1c:37:28:dd:9e:a2:8c:55:01:
                    26:24:75:49:75:1c:10:51:43:8d:d8:ee:35:80:1a:
                    66:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F4:0E:1F:4B:A3:AC:D6:69:41:81:70:EC:67:9E:92:A3:27:0A:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/3ea9051b-7975-35bc-9f2f-e61d3077ba65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:f2:12:53:c9:41:1e:1f:44:4b:aa:a7:0c:ca:d2:2a:1a:71:
         f4:03:de:dd:f4:da:c4:6c:8f:fb:24:8f:86:89:1e:e7:ab:85:
         58:3b:2a:02:ca:e4:f1:1d:c3:9b:c7:0c:3b:fc:1b:bc:4b:0f:
         3a:4a:e3:4f:a2:c6:b5:c2:27:8c:bb:1d:25:f5:6c:a0:69:8f:
         ca:36:65:2d:90:41:7a:2d:f8:0f:d6:44:51:db:36:10:aa:a0:
         e4:bd:3f:e7:4e:d5:7c:69:07:61:70:d9:1a:07:cf:bf:be:86:
         5a:01:f1:b9:d6:f5:e4:84:46:cb:e3:c6:90:75:d6:5e:70:5a:
         1b:e4:29:1e:98:fd:28:b2:02:88:1f:a2:f9:2a:54:92:44:d2:
         a8:11:93:78:2b:30:43:94:3a:b8:32:9c:75:cc:0b:3e:6b:cf:
         18:21:f7:68:e1:bc:22:7f:cd:af:82:77:e2:3c:dc:ee:c2:ca:
         68:a0:6a:7a:6e:57:04:05:b3:03:df:5d:6b:12:dc:e0:17:f7:
         60:3a:09:26:1b:2e:50:ab:21:37:de:f0:0f:a2:b6:4c:d9:de:
         5b:e0:2d:2b:be:ef:68:b9:7f:e4:82:2a:33:bc:d0:7a:95:33:
         27:65:af:09:6f:95:7b:f8:28:6c:4c:b4:f7:0d:bc:e3:01:e4:
         14:cb:17:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:20:43 2026 by rpki-client