Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/b66b5704-547e-3216-af6f-5a1f75bd7950.roa
File:                     b66b5704-547e-3216-af6f-5a1f75bd7950.roa (raw, json)
Hash identifier:          qUxk7m6ahYNW9XLJAymrHwKQovoRtLYS1PxjQl2fWk4=
Subject key identifier:   D0:0E:BA:B7:5B:57:95:C4:F6:39:EF:93:10:57:E5:23:90:A7:0C:3F
Certificate issuer:       /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial:       010D0C9F4328584F49739528A0C8680CAB858BC0
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/b66b5704-547e-3216-af6f-5a1f75bd7950.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        74.118.171.0/24 maxlen: 24
                          74.118.173.0/24 maxlen: 24
                          74.118.174.0/24 maxlen: 24
                          74.118.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:95:28:a0:c8:68:0c:ab:85:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=15fde434-8d22-4d42-9748-9589cfc5ada0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:25:3e:64:7f:e4:11:5f:47:d8:69:0d:fa:
                    50:70:48:ad:f6:2a:4b:04:3c:8f:ac:20:ed:40:cf:
                    37:7b:04:27:bd:13:b1:17:37:07:4d:60:1b:5b:40:
                    49:41:16:50:f0:66:b7:0b:ba:bd:4d:01:f4:ff:24:
                    5d:2e:d1:aa:b5:76:d0:ca:5b:c3:36:85:e5:5d:de:
                    24:01:92:8a:2d:63:8d:5a:a1:78:13:f2:ae:3e:1c:
                    84:f1:38:ab:3f:92:28:b8:17:bc:d3:c7:06:39:9f:
                    7d:13:4b:db:36:64:e2:1e:80:ec:94:e0:62:30:fd:
                    c1:4f:6e:d2:31:f2:b7:77:27:32:99:3c:e8:c8:27:
                    2c:42:ae:0a:66:6f:97:ad:45:5a:ce:05:b2:67:99:
                    70:40:d8:ef:7b:b7:ed:62:e7:f6:33:f4:13:d2:2e:
                    eb:50:cf:54:1f:33:20:a5:60:68:64:46:eb:82:78:
                    6e:63:56:f5:c1:2d:c0:77:47:0d:de:31:44:28:dd:
                    6d:dd:47:20:ce:84:57:f4:6b:f5:a9:a4:bd:70:3d:
                    92:60:5c:89:8c:6a:3d:61:84:9d:58:5f:1d:84:64:
                    c8:54:36:cb:38:08:08:80:fe:a9:f9:dd:e7:c3:22:
                    41:cf:2a:99:75:b6:f3:75:85:6c:68:ff:0e:dd:1d:
                    52:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0E:BA:B7:5B:57:95:C4:F6:39:EF:93:10:57:E5:23:90:A7:0C:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/b66b5704-547e-3216-af6f-5a1f75bd7950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl

            X509v3 Authority Key Identifier:
                keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.171.0/24
                  74.118.173.0-74.118.175.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:8c:eb:db:61:86:11:b7:1c:ec:23:00:f2:01:f5:16:32:a2:
         c5:cd:c9:47:c6:82:cf:c6:a1:42:32:04:42:6f:25:51:dd:34:
         ea:e3:34:db:fa:98:66:08:bf:8b:24:32:ef:6e:a1:1a:a5:c4:
         75:09:3e:a9:6a:b1:0f:ea:61:fb:82:32:0a:b1:ee:f9:fb:1e:
         da:ba:73:a0:47:27:45:4a:a3:53:f0:90:fe:f1:3c:d2:87:7b:
         b2:34:71:cd:9d:e0:50:40:0b:3e:0b:76:6d:c9:06:c1:05:01:
         62:4e:7b:a2:3d:15:22:23:35:bd:dc:93:68:4f:c4:cf:02:e9:
         40:8b:83:a4:28:4d:77:5a:59:24:4e:d8:36:26:51:bd:e6:3d:
         a1:ae:32:23:4d:f6:84:6f:c0:3e:26:5c:01:a7:02:a6:98:1a:
         03:8b:6d:7d:1d:e8:bc:3d:ad:11:e5:4b:48:26:d9:45:c3:cb:
         36:30:73:c1:5a:37:04:c1:8e:a1:81:e9:55:20:6c:a2:9e:77:
         7f:91:83:08:1a:62:a1:a1:3d:81:a9:95:01:a3:d3:42:21:5c:
         41:59:2b:7a:3e:c3:56:7a:9e:95:de:46:f8:f8:d5:0e:84:19:
         c4:ef:9e:47:f3:13:41:60:39:03:aa:7c:65:13:fa:08:1b:b8:
         26:1d:e5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:01:12 2026 by rpki-client