Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c4d17b3c-31b2-30d5-9514-a5ae2da2a1f0.roa
File:                     c4d17b3c-31b2-30d5-9514-a5ae2da2a1f0.roa (raw, json)
Hash identifier:          ASPtQCNahkkdmJwMGu3yLtjHr/+GDOWT3WYcyQIy998=
Subject key identifier:   0B:DA:5C:4E:72:66:DD:FA:DF:88:C8:9D:50:7E:4A:C7:99:0D:74:04
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584D83CA9A8E972BE285C1BA3400
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c4d17b3c-31b2-30d5-9514-a5ae2da2a1f0.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     17278
IP address blocks:        69.74.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:9a:8e:97:2b:e2:85:c1:ba:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=e9da85e6-924a-44d8-9002-252ee0b5c9bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d0:82:39:d5:06:74:d1:90:e6:6d:00:17:a0:
                    de:c3:e8:57:57:22:b3:63:d9:53:f5:24:9b:c4:a4:
                    b9:4c:5e:06:97:54:be:e0:d4:25:7e:52:25:1e:3c:
                    ac:2d:10:a4:84:e5:c5:97:cb:7a:9e:25:7d:73:e9:
                    af:a7:9a:74:96:25:bb:26:6d:87:ae:3f:e2:d0:be:
                    39:af:fa:13:96:a7:3d:2c:09:6e:b9:3b:2d:2b:1e:
                    64:55:48:e1:96:e3:8e:e4:e7:ea:27:23:b8:0e:f6:
                    05:c0:50:0a:4b:fd:32:ce:26:ef:24:57:37:b1:c8:
                    7f:4d:57:32:bb:95:7a:5a:c6:27:82:a3:7b:0e:71:
                    16:3a:78:4f:08:6b:74:e0:32:e1:8e:bf:15:39:ce:
                    c0:bd:98:6c:3d:59:2d:cc:f4:00:2b:27:2a:94:c9:
                    a5:3e:30:3a:2c:03:4d:ba:3b:43:7b:7a:84:73:9f:
                    29:50:34:a1:dd:53:75:00:90:41:c0:c9:48:a7:50:
                    69:fc:79:c0:8d:69:6c:44:af:f3:14:d1:09:0d:8a:
                    36:b4:97:6b:ec:fe:0c:8a:73:68:60:4c:c4:d2:e3:
                    95:8f:b9:2f:01:be:1a:89:8b:94:1e:30:32:12:e0:
                    d0:9a:34:02:a4:ce:67:2c:01:a1:6c:bb:7e:ee:e4:
                    18:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DA:5C:4E:72:66:DD:FA:DF:88:C8:9D:50:7E:4A:C7:99:0D:74:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c4d17b3c-31b2-30d5-9514-a5ae2da2a1f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:6a:e4:91:37:1f:d2:28:e0:55:bb:04:59:a7:68:86:05:cb:
         97:02:10:a3:dd:42:97:14:9c:c9:87:2e:fd:47:f4:55:d1:30:
         8b:80:11:bc:f9:c3:67:8d:1a:f3:27:39:96:3b:2c:74:0b:c3:
         15:d1:5a:39:6b:7e:67:40:e9:94:fe:6e:27:d1:0d:5a:82:92:
         f5:af:79:0f:52:2b:ce:dc:45:d8:ac:63:7e:b5:a6:75:c1:0f:
         e5:20:37:96:de:d1:a6:0c:a3:68:36:af:71:7a:38:d8:77:bd:
         28:7f:67:c2:01:04:61:9a:0e:b3:b9:1a:80:76:ef:19:40:1a:
         7c:93:f0:75:92:9e:98:dd:58:88:e0:b4:82:84:08:8e:bb:f9:
         ff:f7:8d:23:00:32:36:9a:5b:9e:5b:66:31:43:d3:5f:1c:50:
         8f:64:78:3e:bd:70:71:bf:cc:44:48:a0:eb:e4:b9:e0:e9:e0:
         52:1f:70:f8:c3:14:69:14:b5:cf:a6:48:09:96:a8:d7:dc:cd:
         2d:31:26:7c:b9:f1:02:2c:7e:81:ed:3c:79:a5:09:7d:6c:48:
         d7:ac:fd:47:9f:8e:6f:ae:8c:cf:02:8b:89:b0:4e:fb:cc:8b:
         e8:86:eb:32:26:c3:e5:06:fc:c9:5b:3c:eb:f4:f0:e0:2c:d6:
         6f:5d:fa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:35 2026 by rpki-client