Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa
File:                     43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa (raw, json)
Hash identifier:          MBRU+djNpnsqPF/M2UL1DYTvyl/swhEPn1fr76zzx6Y=
Subject key identifier:   1C:24:1D:0E:21:25:FA:05:74:B3:85:67:E1:9B:4C:E8:C6:29:C4:D3
Certificate issuer:       /CN=44dfb2c2-6b0e-4f2c-956d-497df0881015
Certificate serial:       010D0C9F4328584D571FA4B42D9EDE70555B88C0
Authority key identifier: AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        74.123.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:a4:b4:2d:9e:de:70:55:5b:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44dfb2c2-6b0e-4f2c-956d-497df0881015
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=2c594cb3-7cc6-4c3e-95fc-c72b7318a3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:93:fa:07:53:21:c4:d9:9b:f3:e5:8b:3a:5b:
                    8b:42:ee:7c:8c:b5:d2:ad:28:5a:b5:72:90:bc:69:
                    18:dc:a7:01:0a:ff:5f:76:50:e5:b9:8a:6e:52:e3:
                    a2:5b:6d:06:00:83:53:ce:31:ad:38:76:30:ea:81:
                    cd:86:7a:7d:17:dd:15:cc:f5:55:1d:c1:c9:9f:dc:
                    ca:5a:c8:b7:72:b5:97:03:99:29:5a:c4:09:d7:30:
                    1c:cd:84:fe:4e:37:f7:8b:b3:09:70:e3:cd:e1:e2:
                    f8:81:9b:ed:6e:37:30:74:85:e1:36:0c:7c:79:fe:
                    34:87:f5:ea:ee:64:9d:f1:60:df:da:1e:89:ef:fd:
                    ba:ee:2a:5f:b0:90:28:ae:dc:b7:c2:80:b9:32:78:
                    97:74:46:fa:3d:a7:02:44:2c:fa:37:1f:b8:a9:75:
                    15:2a:7e:ab:8a:5b:7f:0a:09:9f:22:13:58:7c:0d:
                    45:a8:a8:32:b3:9b:08:c1:67:0e:77:fd:31:d8:0b:
                    1f:c8:93:18:27:a8:36:86:6a:65:3b:98:46:e9:62:
                    1f:1e:ef:0d:97:3d:da:ac:e3:e2:d6:9e:72:2b:2b:
                    51:e7:05:04:b1:cf:52:81:07:93:12:5e:b9:9f:21:
                    a5:5a:65:18:75:1d:09:7d:95:70:52:36:63:99:eb:
                    2e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:24:1D:0E:21:25:FA:05:74:B3:85:67:E1:9B:4C:E8:C6:29:C4:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/43e7b53f-d5a9-3d29-ab73-ad0d6a377820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015/44dfb2c2-6b0e-4f2c-956d-497df0881015.crl

            X509v3 Authority Key Identifier:
                keyid:AC:A8:C2:A7:76:8D:C6:BC:D8:B5:7F:0C:F0:FA:BA:89:43:A8:D8:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/44dfb2c2-6b0e-4f2c-956d-497df0881015.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:04:f5:e1:4d:cb:99:01:5c:67:14:e1:71:e2:51:df:ed:4b:
         c6:48:9c:dd:10:b1:b9:92:9a:44:a9:87:ab:10:97:01:27:f3:
         66:cb:5c:bd:10:18:a3:4a:c1:96:8b:73:2d:8c:e8:36:ac:52:
         a2:6e:cf:e3:fe:1b:6e:1c:4d:4f:e0:e4:0e:93:27:67:9d:01:
         a7:24:ba:ea:bb:23:9a:3f:ed:b9:c4:c7:51:ab:65:a9:0f:55:
         9c:c6:bd:37:21:6b:c3:f5:85:93:00:73:96:39:5e:2e:74:8c:
         1d:7a:2a:fc:9c:46:09:fb:fb:76:cb:c8:bf:b6:42:f7:51:8e:
         23:f2:85:f5:9e:d3:7a:23:1f:12:9f:54:37:f4:a1:5f:c8:68:
         13:ab:c8:0a:72:80:fd:cd:93:1a:ab:72:d7:ef:d4:eb:5e:34:
         3e:25:b7:8c:82:b9:7c:b3:3a:d3:8e:6e:95:06:23:d0:9b:58:
         b9:08:e4:28:24:a3:4a:75:74:fd:9a:aa:a3:8c:0f:a3:07:a8:
         dd:5c:de:71:4b:0e:01:de:6d:4f:2f:66:67:c4:fd:d4:d6:a5:
         ef:2a:3b:2a:76:ad:dd:63:1b:84:9a:74:d3:e0:85:44:1a:c7:
         42:bf:59:5a:f9:41:6b:10:e8:16:c4:f3:52:f5:46:7b:ce:c5:
         09:44:99:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:49:11 2026 by rpki-client