Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5c92df99-40bb-3ae1-89d7-70dd88c49bb9.roa
File:                     5c92df99-40bb-3ae1-89d7-70dd88c49bb9.roa (raw, json)
Hash identifier:          tJiOJS1vIibEj9qXIZNv352hRQyv6jc4R05pUSMTMd4=
Subject key identifier:   79:B8:C1:34:22:79:D3:E5:7B:6F:07:6B:F6:D0:7D:E3:D9:E3:5C:5E
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584F3A17CF0CB57F1439CBA264B0
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5c92df99-40bb-3ae1-89d7-70dd88c49bb9.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     4540
IP address blocks:        74.126.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:cf:0c:b5:7f:14:39:cb:a2:64:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=92816e25-ae11-4bcf-a470-d5acc84baefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:05:a2:13:bc:bc:50:1a:3a:7c:6e:ab:7e:7c:
                    bd:3c:37:c6:62:63:e3:05:10:b7:ab:0f:58:31:35:
                    93:8c:b4:08:a2:5f:ee:74:b9:cf:ea:54:6e:3b:19:
                    90:bb:c8:0f:ef:d7:f5:88:4c:4d:85:7b:37:43:be:
                    d8:2b:82:89:a3:f4:79:6d:6a:ff:5f:4d:67:37:44:
                    c7:d6:ea:95:84:7c:a2:d6:d7:c0:78:2d:fe:10:5b:
                    2d:35:60:c6:48:32:c9:04:82:90:5b:5d:b1:48:c8:
                    55:0f:26:7c:41:a6:e4:bc:99:18:7e:a0:fd:62:ef:
                    9d:ef:19:fb:18:36:85:4c:fb:29:88:a0:b5:d1:42:
                    4e:ac:41:9a:c2:b2:8c:a4:bf:e4:17:5f:90:eb:68:
                    1b:74:0a:f1:b9:70:6e:16:b8:89:c3:99:fa:4f:30:
                    66:4e:94:68:8f:3d:69:53:01:c5:c3:5a:12:d4:31:
                    e6:97:99:b5:e7:b1:47:f1:29:a2:8c:52:bd:db:03:
                    29:db:cc:85:44:94:3e:bf:5a:1f:71:78:aa:11:e5:
                    c0:68:6a:32:34:1a:52:1a:95:9f:a9:52:11:41:85:
                    93:82:b4:56:5a:08:9a:76:21:81:66:d1:d4:79:a9:
                    b0:9d:1e:03:1b:ba:67:db:8e:c5:f9:d9:1a:41:17:
                    86:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B8:C1:34:22:79:D3:E5:7B:6F:07:6B:F6:D0:7D:E3:D9:E3:5C:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5c92df99-40bb-3ae1-89d7-70dd88c49bb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:17:f1:78:69:50:9d:fe:22:70:d6:e9:09:4b:c8:76:d8:5e:
         ae:35:0e:fc:e4:74:de:e1:5c:4e:78:a6:24:67:aa:cf:58:40:
         b3:44:ec:08:8f:26:f3:ea:37:4e:dc:e0:0c:6e:f0:5a:61:4b:
         9e:dd:34:36:b8:c8:a9:1f:03:0b:a5:52:52:c6:20:b2:9a:3f:
         6a:8d:66:15:c0:21:37:81:46:d2:40:2a:17:56:2e:ee:27:39:
         a1:68:2e:f7:ec:49:ac:2c:ed:4a:2e:39:5b:e7:b2:30:9b:8c:
         56:53:4a:c0:bd:a3:15:bc:97:0e:dc:a1:eb:ee:0e:52:cd:06:
         31:66:a1:c8:94:a2:7b:9d:3b:82:a2:5f:66:23:29:21:9c:d6:
         2d:68:39:b1:12:02:3e:ff:5c:20:c2:3e:6a:d1:95:7e:17:04:
         5e:7b:8c:60:c5:7a:48:f2:01:75:aa:2b:c5:87:42:07:d1:a0:
         a6:41:ff:83:54:62:20:cb:f3:7d:b2:74:5a:90:c6:64:bc:45:
         c8:45:32:e3:5e:f4:46:26:02:0b:64:49:92:34:69:4d:8d:b3:
         59:56:6b:ef:43:27:68:90:48:d3:fe:71:f6:de:fe:a5:6c:c7:
         16:b2:44:fb:b2:cd:28:7a:18:4f:88:f5:cf:e4:06:53:c3:f0:
         d4:ea:55:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:37:20 2026 by rpki-client