Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/b32c3b67-a8df-3503-9350-ca9f3aaef95f.roa
File:                     b32c3b67-a8df-3503-9350-ca9f3aaef95f.roa (raw, json)
Hash identifier:          TYKbcMrmU8MEazGDnupuAHPZVlIBAcp1Qp/aS+IrudQ=
Subject key identifier:   CE:42:01:42:C9:1C:13:EA:D8:CB:A1:61:B0:4F:F0:CC:43:20:8D:FD
Certificate issuer:       /CN=c68f99cd-e059-4345-ac58-8ebecccac84e
Certificate serial:       010D0C9F4328584F8DD895D3A6966E4430F86880
Authority key identifier: 0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/b32c3b67-a8df-3503-9350-ca9f3aaef95f.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     14618
IP address blocks:        74.123.52.0/24 maxlen: 24
                          74.123.53.0/24 maxlen: 24
                          74.123.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:95:d3:a6:96:6e:44:30:f8:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68f99cd-e059-4345-ac58-8ebecccac84e
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=8259065d-cdd3-4914-917f-fdd2cb9da09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:74:4c:80:31:00:e0:c9:f0:a4:cc:8c:1c:c4:
                    9c:60:56:48:eb:1e:33:0f:b8:00:62:2d:c5:01:08:
                    89:ab:84:fb:b7:40:b1:bd:e0:82:92:8d:7a:90:34:
                    41:8a:e9:e6:e4:36:08:01:3c:3c:3d:2e:0f:40:24:
                    3b:56:3b:da:86:24:37:63:04:1b:cb:7a:57:14:39:
                    89:2b:51:b6:63:7c:40:c0:fd:6e:3d:07:57:ce:b0:
                    99:03:73:74:fa:a2:d3:23:2b:8b:58:81:24:60:e8:
                    24:b4:d9:a1:39:ac:d8:b1:74:28:48:2e:6b:af:06:
                    e9:e2:ba:6d:02:41:17:5a:e5:35:48:e9:92:69:14:
                    c2:88:d1:f1:07:0f:98:12:09:05:b7:6f:41:a8:1d:
                    66:c0:82:3f:5e:9a:be:80:cf:dc:08:a8:28:9d:be:
                    cb:d7:73:d3:d7:10:f7:c7:47:76:52:4d:98:05:cd:
                    a4:25:c5:24:6e:8c:2d:80:b3:c0:ef:95:1b:97:85:
                    96:46:a4:8b:b1:ef:5a:23:0f:41:00:11:8d:65:08:
                    43:43:0c:03:35:15:2e:2b:8d:70:c5:37:b5:0b:ae:
                    f4:12:bd:63:02:06:9e:58:94:52:8a:d9:f4:c9:30:
                    f7:01:aa:d2:43:c1:63:79:0e:ad:ee:da:a0:79:f5:
                    db:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:42:01:42:C9:1C:13:EA:D8:CB:A1:61:B0:4F:F0:CC:43:20:8D:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/b32c3b67-a8df-3503-9350-ca9f3aaef95f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.crl

            X509v3 Authority Key Identifier:
                keyid:0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.52.0-74.123.54.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:94:c1:ce:1e:bc:ef:5e:a3:f0:52:ce:23:cb:70:80:f4:12:
         60:91:ba:2c:44:6c:42:f7:43:03:c8:35:31:d9:9b:ee:e9:4c:
         f9:13:de:df:4a:0b:d2:3f:10:70:14:07:de:7e:52:f1:9c:b5:
         55:30:3c:5d:d6:2d:ca:47:eb:07:ae:fa:68:f4:92:f2:97:5f:
         bc:92:25:7b:4b:bd:d3:66:30:eb:45:88:59:bf:12:43:12:70:
         42:bd:9f:d0:b3:45:36:9d:f8:2e:a0:06:83:5d:e5:e6:a3:87:
         5a:50:2c:4c:77:0e:61:a2:02:c3:fc:fd:d3:51:08:84:3d:9e:
         4e:b5:75:82:98:1a:fa:b6:8c:35:c2:77:cf:70:92:f6:5b:05:
         08:ee:3a:5f:13:94:27:fc:6e:2e:c6:41:6d:03:32:04:bb:bc:
         8c:02:16:b7:4f:60:3f:37:0d:3e:71:3f:f4:c4:d5:5b:13:ce:
         be:3d:99:5c:31:b0:6a:0d:34:2b:2c:a3:85:5d:c9:90:1b:5d:
         ff:8f:ba:02:38:6a:3c:1f:ee:59:3a:d2:ce:ab:2b:93:57:2e:
         f7:20:1e:f0:5a:d9:f7:cf:4f:ea:d3:ad:5b:9f:9f:7e:b6:0a:
         01:b1:55:23:b7:ec:25:8c:13:69:7f:4b:6f:3b:d5:ab:94:e5:
         4c:ed:93:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:21:02 2026 by rpki-client