Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/b5320878-209f-3b05-9ceb-b477a0499e0c.roa
File:                     b5320878-209f-3b05-9ceb-b477a0499e0c.roa (raw, json)
Hash identifier:          kvvP8F9KPX/q4PLHURmb2MTYL/pzGwY2rPeOzMOHB0c=
Subject key identifier:   E6:59:17:7C:58:68:FA:F9:AE:2E:14:A1:44:38:99:38:03:A5:0A:A2
Certificate issuer:       /CN=c5188e20-1297-4b61-a494-1ca0036777f2
Certificate serial:       010D0C9F4328584D04E2414BC954A57016B86A80
Authority key identifier: B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/b5320878-209f-3b05-9ceb-b477a0499e0c.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     8075
IP address blocks:        74.117.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:41:4b:c9:54:a5:70:16:b8:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5188e20-1297-4b61-a494-1ca0036777f2
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=4c91dd6f-e39d-4331-8eb0-701205f6ba69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:3d:50:ad:51:98:8c:2b:31:42:52:97:0b:
                    f0:95:b8:bb:07:2b:7b:d2:19:33:6c:7b:ea:1d:ac:
                    bd:64:57:ae:50:e4:0d:47:6d:15:9f:ce:1d:f6:6a:
                    98:20:5d:06:8d:77:e8:34:65:6d:49:65:c2:55:96:
                    7f:b5:97:4a:5c:60:b7:f9:22:8e:e8:b8:86:df:9f:
                    cc:4d:ff:f2:ec:19:96:80:01:d0:4a:8a:a0:d2:86:
                    62:f8:be:09:13:f3:5b:c7:d4:24:80:d7:6b:a9:04:
                    e9:10:dd:95:1b:71:f0:be:16:71:82:d3:1b:d3:61:
                    52:86:41:55:d6:ae:f0:c8:b6:41:94:dd:a1:a8:c1:
                    df:48:fa:af:03:62:24:94:bb:89:1a:18:04:b9:fe:
                    87:8a:a4:3d:29:bd:47:20:1e:91:b7:2d:6f:c4:23:
                    e8:f9:b3:f7:c7:c8:0e:de:d0:0c:79:48:3e:a6:4d:
                    e8:36:4c:78:1b:6b:e1:fa:df:70:2c:9c:99:2c:ca:
                    47:9b:fe:54:4b:b6:e8:bd:a4:62:78:ef:54:7b:f3:
                    82:fc:41:2b:eb:b7:ab:a1:20:4f:8d:12:b1:30:2f:
                    f9:0b:cf:3f:c3:e4:13:3e:10:14:d5:29:f3:a1:c0:
                    07:a2:65:aa:da:a8:75:e2:3c:3f:3e:55:57:95:fe:
                    6c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:59:17:7C:58:68:FA:F9:AE:2E:14:A1:44:38:99:38:03:A5:0A:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/b5320878-209f-3b05-9ceb-b477a0499e0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl

            X509v3 Authority Key Identifier:
                keyid:B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:47:cf:71:92:b8:9d:eb:3a:25:9a:cd:f5:5b:53:7b:96:9e:
         04:75:79:eb:63:d6:2a:04:e4:36:f9:a7:76:3f:8f:90:14:53:
         e2:74:f5:59:51:bc:7b:9f:d3:9a:ef:e5:59:43:ac:e8:72:ad:
         1f:d4:21:a2:8c:1e:d3:19:32:cb:25:4f:6f:9d:58:b3:d4:a8:
         e9:00:7c:49:5b:cd:5a:c7:57:17:d8:a0:43:e4:01:82:1b:fb:
         28:d1:60:39:76:ca:de:d1:cd:e6:ff:10:16:04:b5:ec:58:d5:
         34:2b:98:12:c6:58:5d:61:44:d9:82:86:7a:4b:01:90:ef:cd:
         a2:fe:1e:f4:46:90:c9:dc:e5:35:d8:27:0a:c3:3d:82:06:07:
         ae:6c:59:70:85:ee:ea:21:a9:ac:10:25:cc:40:98:1c:9c:22:
         49:cc:d9:62:e0:bc:8f:f7:58:a1:76:0c:b0:59:d2:ea:1b:a7:
         b9:62:9f:a0:54:79:0d:ef:12:54:5e:91:93:e9:da:59:b0:17:
         78:82:f4:91:a1:5b:df:3d:ad:a9:2c:64:e0:a6:9c:c7:4a:5b:
         c7:a9:f6:4d:7f:1b:98:6c:1a:1d:31:a0:7c:9d:3a:fe:9c:b1:
         a6:fd:c7:9e:c1:aa:30:7d:bc:7d:c9:98:1b:4c:ff:bc:a5:ad:
         6e:3d:95:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:38 2026 by rpki-client