Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc/a8147eea-7dbe-3db2-a5b8-17467719f2a3.roa
File:                     a8147eea-7dbe-3db2-a5b8-17467719f2a3.roa (raw, json)
Hash identifier:          6eA+H3FfuugAOa7ynpoR+Qk5t7QgOm+W7AAWHPz2n6s=
Subject key identifier:   EA:57:71:D3:1D:67:CE:30:E2:97:B7:09:6D:FD:96:69:C0:EF:5B:19
Certificate issuer:       /CN=8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc
Certificate serial:       010D0C9F4328584F2FCDA9B28EF538D2C0FBAF80
Authority key identifier: 17:B5:EE:65:E7:60:36:0D:F2:B1:7B:CF:42:A0:2F:C1:B5:17:01:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc/a8147eea-7dbe-3db2-a5b8-17467719f2a3.roa
Signing time:             Tue 15 Sep 2026 20:32:50 +0000
ROA not before:           Tue 15 Sep 2026 20:32:50 +0000
ROA not after:            Mon 14 Dec 2026 21:32:50 +0000
asID:                     18606
IP address blocks:        74.121.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2f:cd:a9:b2:8e:f5:38:d2:c0:fb:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc
        Validity
            Not Before: Sep 15 20:32:50 2026 GMT
            Not After : Dec 14 21:32:50 2026 GMT
        Subject: CN=5a4bf9f9-ed65-4227-a6d0-54f006bd0f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:55:ba:42:09:11:bf:c1:22:79:c7:38:59:62:
                    fe:da:a4:db:50:1e:97:0b:17:78:d8:5d:0c:60:22:
                    62:90:7b:ca:e0:85:f7:55:b2:27:ff:29:b8:6b:ce:
                    56:d4:a9:bf:8e:53:70:59:4e:ef:33:af:c9:76:1d:
                    cd:bb:59:1a:9a:c3:78:14:bb:dc:12:1e:3f:79:7c:
                    a7:27:cf:8a:d7:e9:c4:ae:f3:d2:d6:ab:f3:19:fb:
                    bf:98:d6:d3:a8:f2:d6:a1:5f:a5:30:de:c1:63:81:
                    96:73:31:b0:01:31:58:a8:09:b3:71:23:ee:d4:15:
                    e8:8e:03:89:0a:6f:ab:f5:02:51:bb:88:a0:f8:02:
                    95:c5:9f:f9:24:b6:4f:a2:d9:33:c3:cc:c4:db:7c:
                    e9:64:f3:69:b4:ca:a1:55:ca:c3:8a:dd:a7:b2:a7:
                    98:42:e9:27:6a:e5:ee:80:f3:f4:44:77:e6:00:33:
                    95:26:06:47:28:3b:8c:14:15:00:0b:36:11:cf:e1:
                    57:09:01:c5:67:a2:4a:05:12:7d:61:d1:74:7f:8b:
                    dc:63:e7:5c:8b:af:16:6a:ad:f3:ce:71:c8:3b:bc:
                    25:dc:ac:ed:0f:ef:1c:77:53:fb:57:95:7b:2c:7a:
                    14:f6:3c:4c:59:81:2e:c8:0d:f8:5f:13:fb:5e:19:
                    d7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:57:71:D3:1D:67:CE:30:E2:97:B7:09:6D:FD:96:69:C0:EF:5B:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc/a8147eea-7dbe-3db2-a5b8-17467719f2a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc.crl

            X509v3 Authority Key Identifier:
                keyid:17:B5:EE:65:E7:60:36:0D:F2:B1:7B:CF:42:A0:2F:C1:B5:17:01:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a0ee3b7-e09c-4778-9b9d-29de5f61ecbc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:8d:0b:e5:8a:c3:ba:25:d3:e5:4b:5c:d3:7b:e2:55:28:fd:
         75:d4:87:b0:a3:13:79:6e:19:d1:bb:67:7f:de:1f:18:cb:a0:
         b7:73:09:42:b9:81:81:aa:39:c4:45:e2:37:45:84:e4:1b:50:
         c3:68:ae:c8:5e:39:4b:da:77:f5:3c:14:86:c5:bc:6b:bb:94:
         2b:be:d4:6a:00:5e:eb:06:20:b7:1e:04:59:16:52:e4:cb:77:
         1a:29:e7:42:69:79:bc:4a:34:2c:40:97:44:96:5e:8c:fa:7d:
         c0:94:6b:70:ef:c3:cc:88:c7:a1:9c:bd:df:1a:7f:fc:75:fd:
         0d:84:f9:c4:b3:f0:52:ca:13:14:c9:6d:cc:e9:cf:1c:84:e1:
         bf:ae:c5:f5:d0:f5:4f:63:04:9f:8f:f5:35:c5:1a:ee:d7:ef:
         9a:3e:d3:ce:ad:2b:ae:e7:a4:7f:30:25:40:65:34:62:57:62:
         72:da:e4:94:e6:6c:a9:67:29:65:9e:84:da:4f:92:cf:9c:2a:
         d9:d0:33:99:95:3d:39:cb:db:14:51:d8:44:ad:9d:4f:1f:48:
         72:8e:b8:c3:1a:7d:41:fb:a7:3e:f3:c8:41:90:6f:3f:ad:6b:
         92:1f:90:ff:cf:0d:5e:ea:91:74:4d:30:82:4d:f9:4e:a7:e4:
         8d:05:07:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:17:21 2026 by rpki-client