Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ac3fba6e-34d0-3467-9a92-b8b2f0ecd7e9.roa
File:                     ac3fba6e-34d0-3467-9a92-b8b2f0ecd7e9.roa (raw, json)
Hash identifier:          z+3MPJhavEDONFg1n91Fx7Tnxp5EKXhWvSmf5kFAQIw=
Subject key identifier:   1A:99:F1:61:01:28:D4:4C:6E:57:15:1A:D9:CB:A9:C4:FF:E2:0D:D8
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584F3A17CEFF2F942BE4AFD05580
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ac3fba6e-34d0-3467-9a92-b8b2f0ecd7e9.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     4540
IP address blocks:        74.126.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:ce:ff:2f:94:2b:e4:af:d0:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=610c76a7-7043-4998-a332-4392a56524c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:80:1d:ec:c4:7e:3e:d3:d0:21:1d:26:60:4a:
                    35:59:9e:f0:e6:0b:39:68:36:da:70:f9:50:28:5d:
                    16:12:26:d6:7d:ba:d3:d5:2d:54:64:3e:dc:36:85:
                    b7:17:ab:15:82:59:37:81:38:d8:c6:81:8c:39:2a:
                    19:f7:7e:dd:36:40:a4:c8:36:29:27:cb:d6:71:b5:
                    98:3f:a3:8d:28:77:7c:e7:bb:b1:5c:05:b4:17:ed:
                    17:81:2e:36:0b:9f:38:63:e0:a2:e4:19:c2:29:45:
                    7c:25:a1:d4:f6:a7:4b:7f:6a:01:e5:be:4c:96:ac:
                    47:43:95:cb:9e:14:24:4b:05:83:a3:7f:88:ad:f9:
                    a7:02:56:54:b4:ac:f2:14:16:20:d6:72:ed:9a:32:
                    42:65:a8:32:43:44:da:da:76:ec:1c:fa:8b:92:1e:
                    9e:62:11:9c:2a:58:46:88:5d:ab:93:6d:91:9f:76:
                    6a:37:6e:99:e2:7f:94:80:68:75:81:ba:d5:89:e3:
                    52:8c:ef:97:6c:fd:61:7c:92:e6:15:c9:a7:7f:e8:
                    5a:af:4a:d9:25:5e:74:b8:40:5b:72:fb:e3:b4:8e:
                    45:30:99:9f:14:f6:05:dc:fa:e0:fe:6e:dd:a7:fc:
                    1c:16:d4:6b:44:32:02:8d:3d:2a:b7:ec:67:74:78:
                    41:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:99:F1:61:01:28:D4:4C:6E:57:15:1A:D9:CB:A9:C4:FF:E2:0D:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ac3fba6e-34d0-3467-9a92-b8b2f0ecd7e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:98:1a:6d:bf:3c:32:25:d3:83:d1:27:ee:38:0a:7a:cc:88:
         71:2f:70:88:66:08:63:ac:ae:d3:c6:0c:89:e2:a8:bc:9d:ae:
         94:0d:ba:6f:61:fd:24:f7:77:2f:11:d3:e3:35:4d:4f:6a:12:
         aa:4e:34:3e:f7:60:d0:fd:09:32:7a:d7:9f:13:8f:cb:5a:45:
         fb:f5:61:31:18:cc:73:64:c6:28:3d:cf:35:9d:f8:02:de:03:
         7e:bb:0a:ee:2c:2d:3a:0d:63:1b:d7:e5:28:48:ab:fc:d9:c7:
         8e:c5:b0:02:de:4a:91:8f:50:a9:6c:be:af:79:d5:ea:8a:24:
         2b:41:ed:d1:62:c5:bf:db:a8:b5:da:ca:09:b8:6e:01:19:f2:
         28:25:8c:21:3c:01:5d:fd:73:9e:a4:0e:e9:36:0d:0a:49:a2:
         eb:c0:17:46:7d:e2:bf:60:a2:da:20:bd:54:fa:fa:71:c5:7c:
         60:e5:bb:08:70:55:91:e7:07:18:b3:7d:ec:6e:55:35:37:cd:
         de:01:11:f5:cf:c8:ca:81:7d:bb:04:83:4f:b7:f2:21:7e:eb:
         67:70:a2:21:d3:a2:32:15:a8:b1:e7:f1:b6:47:b5:9c:fa:f6:
         3f:1a:60:f1:e1:fb:0c:db:31:55:a4:23:f8:a8:02:c8:4b:7d:
         7a:de:3a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:38:55 2026 by rpki-client