Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc/578e196c-ff53-35e4-8aa6-6c009eb0e1b6.roa
File:                     578e196c-ff53-35e4-8aa6-6c009eb0e1b6.roa (raw, json)
Hash identifier:          rA9K6UG+xuzYi1783OmkXTbY4spKUNJiS3hHTbJ9o54=
Subject key identifier:   8C:41:A1:16:99:BD:65:32:B8:BC:98:8E:F1:5D:B6:AD:35:B6:4D:22
Certificate issuer:       /CN=8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc
Certificate serial:       010D0C9F4328584F331D110E0765E001EFC2F700
Authority key identifier: 17:B5:EE:65:E7:60:36:0D:F2:B1:7B:CF:42:A0:2F:C1:B5:17:01:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc/578e196c-ff53-35e4-8aa6-6c009eb0e1b6.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     18606
IP address blocks:        74.121.249.0/24 maxlen: 24
                          74.121.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:11:0e:07:65:e0:01:ef:c2:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=d58aa5e9-e216-499d-b54b-87b38b5f07e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:73:bf:f1:82:36:ae:b7:38:70:78:69:46:74:
                    7e:b5:98:6b:2b:e0:5a:8a:9d:de:88:15:b3:17:4d:
                    1e:8c:11:10:66:26:b1:87:ad:28:bc:60:7c:8a:90:
                    be:67:f6:98:02:86:ab:6e:92:73:24:dd:eb:9b:39:
                    4b:3b:fd:3a:62:b0:30:d6:78:71:4a:aa:ee:63:da:
                    b3:e7:38:ae:01:bd:3c:c5:fb:09:76:0a:56:44:11:
                    82:da:0e:3c:4a:c1:da:11:f5:46:89:bb:27:eb:50:
                    72:58:52:fc:90:bc:1b:0c:9c:db:2d:53:89:92:de:
                    07:73:15:ad:e9:8a:d3:61:4e:74:b0:f0:ca:53:74:
                    e9:41:61:3d:42:b8:7e:0b:2e:55:89:32:ad:f4:63:
                    23:de:0f:86:69:ee:d0:f5:b6:a5:32:7c:19:f9:53:
                    88:9c:6d:af:55:ff:d5:4d:e7:8c:65:ff:21:4f:bb:
                    f3:b8:75:3c:72:b9:3f:a2:e5:5a:a6:43:7b:11:82:
                    ac:0a:05:43:10:44:1f:af:74:41:9f:d1:ba:b5:bc:
                    81:35:0f:12:c6:8a:6f:b0:9d:98:f9:38:e8:15:3c:
                    25:66:5e:91:70:1d:5e:3f:e4:8f:e3:5c:e1:98:6a:
                    bc:0e:36:83:48:82:5b:e2:e3:96:da:89:3c:99:54:
                    ca:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:41:A1:16:99:BD:65:32:B8:BC:98:8E:F1:5D:B6:AD:35:B6:4D:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc/578e196c-ff53-35e4-8aa6-6c009eb0e1b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc.crl

            X509v3 Authority Key Identifier:
                keyid:17:B5:EE:65:E7:60:36:0D:F2:B1:7B:CF:42:A0:2F:C1:B5:17:01:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.249.0-74.121.250.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:54:50:28:f5:81:b3:46:bc:b4:8c:a2:49:d4:5e:69:59:c8:
         a1:3c:2d:eb:b6:76:30:ee:73:11:cd:7a:39:27:8f:f6:f8:78:
         57:cc:28:7f:bc:c9:4f:24:71:d0:6c:cb:43:99:eb:cb:56:ed:
         3f:3c:39:21:57:16:fd:6b:13:71:a5:5f:94:58:27:14:b2:a0:
         53:a6:8b:59:89:d4:46:05:a5:75:2c:79:97:d0:87:91:9a:6c:
         ef:45:3b:15:4b:1e:17:97:80:48:3e:52:90:6b:78:e5:ad:68:
         d3:ef:75:73:14:dc:ae:28:99:aa:5c:7f:ef:a6:eb:2a:44:15:
         cf:ae:49:88:93:ec:ef:bc:55:28:ae:61:c9:3e:46:f8:fb:ac:
         db:32:12:85:65:19:21:7a:c8:64:ef:58:84:d1:ab:72:33:0c:
         4c:a5:78:17:3b:4c:67:63:9f:2d:d6:54:2e:c3:3c:ae:1d:d4:
         5e:8c:e0:6d:40:2b:a6:e0:4f:08:a2:03:3c:08:ab:f9:85:2e:
         c4:f4:e1:3b:57:15:26:5a:71:7c:58:f2:7f:97:78:79:ce:d5:
         7e:4c:4c:38:b3:ec:e7:7d:60:3d:92:f4:12:39:e6:32:04:c7:
         20:ec:07:8c:e7:80:9a:0a:c2:1d:08:f5:58:f7:3a:34:d9:1a:
         fe:74:12:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:00:08 2026 by rpki-client