Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa
File:                     43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa (raw, json)
Hash identifier:          N/dLeI2MpajWzQ5IiSJeaBiLdUeRifY8mdUnw0zuvNI=
Subject key identifier:   99:B4:80:9C:14:89:D0:79:19:12:E3:48:E7:1E:F3:08:A5:DD:06:9B
Certificate issuer:       /CN=44dfb2c2-6b0e-4f2c-956d-497df0881015
Certificate serial:       010D0C9F4328584C768162548DA2710B0F50D100
Authority key identifier: AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa
Signing time:             Fri 09 Jan 2026 02:00:31 +0000
ROA not before:           Fri 09 Jan 2026 02:00:31 +0000
ROA not after:            Thu 09 Apr 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        74.123.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:76:81:62:54:8d:a2:71:0b:0f:50:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44dfb2c2-6b0e-4f2c-956d-497df0881015
        Validity
            Not Before: Jan  9 02:00:31 2026 GMT
            Not After : Apr  9 01:00:31 2026 GMT
        Subject: CN=57f8782d-7225-4b93-a8f3-553b0eebde2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:96:e8:8d:e5:1d:e7:5f:7a:3e:dd:2f:37:
                    cd:73:08:93:85:dd:20:a7:dc:37:a2:cf:2d:78:3e:
                    9d:e8:8e:45:4b:dc:4d:80:fa:ab:4a:ec:08:cb:9c:
                    c5:23:c1:a9:9e:dc:61:54:d7:8a:a4:b2:23:f2:c7:
                    55:b6:4a:ec:40:9b:3a:0c:d3:6c:36:a2:bf:20:45:
                    ef:b8:cf:8d:2d:d3:9d:ca:c7:d1:4c:d6:dc:70:9c:
                    77:e2:87:c8:11:d6:6d:63:29:89:73:58:7a:4a:e1:
                    13:61:90:a2:78:d1:5d:e6:48:e3:5c:81:1f:dd:04:
                    a3:d5:6c:0f:e5:98:3e:b8:83:84:1e:ba:ff:8f:2d:
                    a6:4e:75:32:b9:bd:54:05:eb:65:b6:07:a6:49:86:
                    0d:b3:e2:bd:6d:1b:a5:bd:e9:6b:b5:d8:a3:f9:e1:
                    b2:02:04:94:95:b0:cc:fb:74:95:37:37:2e:62:49:
                    a0:e8:ce:0d:97:63:e5:9b:72:4c:2f:2f:0d:b9:c6:
                    22:6d:55:b1:d8:cb:4f:61:33:63:b5:4f:d5:7b:a8:
                    f3:06:c7:b2:a9:2f:7f:cd:cf:f7:a2:7b:11:a1:8d:
                    1d:d0:68:d7:2a:6e:30:2e:e3:77:43:0b:d2:ae:37:
                    ca:49:bb:2e:5f:20:a7:21:07:34:72:1d:fb:dc:e7:
                    42:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B4:80:9C:14:89:D0:79:19:12:E3:48:E7:1E:F3:08:A5:DD:06:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.crl

            X509v3 Authority Key Identifier:
                keyid:AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:51:29:5f:86:50:ef:10:06:d1:1a:07:ef:bd:9b:4e:88:92:
         d9:af:b2:10:45:4f:bd:4a:f5:f7:21:a9:da:6b:8b:c9:60:f3:
         74:ec:39:eb:70:d7:b2:f2:aa:a0:c6:ce:f5:d9:86:dd:55:77:
         4a:a5:4f:f6:24:d4:6e:30:9d:b0:23:1c:80:92:89:f1:06:10:
         68:a6:ae:04:26:50:50:15:6c:95:88:68:3e:81:8c:71:b9:f1:
         e9:ea:ec:8f:37:f4:96:a8:1d:38:6e:ba:f1:11:af:d7:bc:bd:
         fc:3b:0b:ad:c3:19:a7:5e:d8:e5:07:c0:6a:94:5f:d4:c1:ba:
         04:a0:7a:1c:89:97:40:66:6c:cf:b9:6c:9a:10:0f:31:93:8c:
         a2:52:de:a3:bd:2f:ea:c0:8a:ab:82:9e:4d:70:0c:cb:00:d8:
         7e:40:17:57:f7:57:21:76:8c:0f:52:ac:8c:a2:cf:f6:f7:50:
         04:e7:6b:6b:79:af:74:95:70:4b:e1:80:7c:28:64:df:d8:43:
         0f:d0:bb:e0:af:f7:92:2f:98:bc:55:c5:2a:45:03:38:37:f9:
         e9:07:5c:24:03:46:7b:6e:e6:a6:df:b6:96:fe:c4:b5:ff:58:
         ed:7f:5f:ef:ef:71:7c:44:95:f9:a8:2f:40:bb:ad:c7:bf:23:
         f5:a6:f1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:54 2026 by rpki-client