Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/28c14568-3d6b-3afa-aaf3-35ef290a818e.roa
File:                     28c14568-3d6b-3afa-aaf3-35ef290a818e.roa (raw, json)
Hash identifier:          49DarFlYeaxVRR5daM0HDEo2wUd7Nn+FSbd/35gV9XU=
Subject key identifier:   6F:BF:4D:A7:19:09:D0:C6:DF:F3:88:C8:02:DF:68:1F:52:4F:98:49
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584CCBA77B040D2F4F5FFF866B00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/28c14568-3d6b-3afa-aaf3-35ef290a818e.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     54858
IP address blocks:        74.85.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:7b:04:0d:2f:4f:5f:ff:86:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=ae5cac5a-f477-4606-8358-dff374f85643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:01:fa:95:57:bb:a4:aa:de:99:3a:98:bb:c3:
                    21:c6:b8:0c:db:63:df:fa:9a:79:f4:c1:6c:6a:34:
                    18:f7:0c:dc:e1:08:74:26:01:54:b9:15:0b:1b:5c:
                    25:bf:f4:e3:d7:51:bf:c8:c0:14:a9:ad:51:74:b0:
                    09:e8:86:10:4c:1b:d6:d9:23:aa:70:78:d0:24:41:
                    2e:7d:04:b5:32:07:8b:67:eb:13:43:c4:b9:48:fe:
                    86:3f:9a:ec:fc:d7:10:de:79:a7:2a:05:7d:c3:95:
                    c8:ae:a6:07:b7:3e:5e:a9:d1:05:8c:84:b0:f6:64:
                    58:88:10:05:46:af:f9:a9:6d:17:e8:62:44:cf:f9:
                    ec:4d:61:24:ca:53:d3:9a:76:1b:89:3a:75:8e:34:
                    1a:86:c2:cc:d9:1b:24:38:78:c6:57:58:c2:e2:e1:
                    52:d6:c1:2e:d9:7a:75:ac:a7:ca:d4:55:2a:76:6c:
                    09:bb:72:b2:b0:b9:9f:38:70:57:32:86:99:67:9f:
                    6d:ed:e8:74:fb:e8:05:49:63:c9:28:bb:28:c1:24:
                    97:f8:5d:18:15:14:3c:32:36:18:ef:0f:ab:5c:56:
                    64:8f:42:84:04:94:d7:47:56:38:26:f4:1a:a8:dc:
                    a4:da:1a:ed:76:3f:2b:c6:b2:63:de:47:97:0b:24:
                    cd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BF:4D:A7:19:09:D0:C6:DF:F3:88:C8:02:DF:68:1F:52:4F:98:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/28c14568-3d6b-3afa-aaf3-35ef290a818e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:19:ff:7d:cd:64:16:0a:55:fb:8b:a8:07:5d:31:01:e2:96:
         7d:c4:df:84:4e:8b:17:a2:53:47:08:91:35:e8:78:4c:22:47:
         3e:77:86:0a:9e:bf:d5:2c:ba:bf:49:a5:16:c5:64:86:e2:20:
         da:d3:6f:be:74:f6:43:f7:96:41:85:c8:f9:58:39:6e:e2:9a:
         25:bb:f5:30:d3:a5:41:bb:13:98:89:19:d6:ea:ff:91:31:ed:
         73:c8:2a:d0:09:c7:fe:e3:bc:ba:a3:bd:66:b1:54:b2:78:4f:
         9b:b2:2d:44:5d:1d:76:49:74:84:6e:f0:50:a8:4f:5c:68:20:
         67:09:65:1c:76:84:46:03:0a:51:87:c5:0f:b9:8e:b4:5d:af:
         6c:4c:35:98:54:01:ac:16:64:de:72:85:70:6a:08:d1:eb:c6:
         10:88:0f:c6:bf:e9:7e:2f:33:9a:3b:cd:5f:6a:de:fe:b4:ae:
         74:2c:8b:62:63:e1:83:83:5a:e1:8c:73:4a:d2:e9:1d:d1:02:
         d1:a3:76:34:f2:31:f4:cf:ab:ba:13:6f:f1:02:df:f5:1a:fe:
         2e:79:f6:9b:25:7f:70:6b:22:3a:4a:58:d4:40:01:31:b9:f9:
         c2:90:8c:79:19:23:e7:f5:9c:fa:e5:b3:02:d1:77:0b:91:f2:
         78:d9:ac:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:15 2026 by rpki-client