Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/4925d209-f003-3bb9-b12d-10cc44b06d40.roa
File:                     4925d209-f003-3bb9-b12d-10cc44b06d40.roa (raw, json)
Hash identifier:          Llkus5YyzWNPeQEb33bWo+EdDVttRjIfxA6uYH8x7Ug=
Subject key identifier:   1C:0D:DE:C1:8B:94:DD:03:D7:DE:24:BB:BC:2E:6B:C5:3F:5B:11:F3
Certificate issuer:       /CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2
Certificate serial:       010D0C9F4328584CA061A73B9FCA89C789AAB600
Authority key identifier: AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/4925d209-f003-3bb9-b12d-10cc44b06d40.roa
Signing time:             Sat 24 Jan 2026 02:00:31 +0000
ROA not before:           Sat 24 Jan 2026 02:00:31 +0000
ROA not after:            Fri 24 Apr 2026 01:00:31 +0000
asID:                     15278
IP address blocks:        74.117.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a0:61:a7:3b:9f:ca:89:c7:89:aa:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2
        Validity
            Not Before: Jan 24 02:00:31 2026 GMT
            Not After : Apr 24 01:00:31 2026 GMT
        Subject: CN=b5c8dfd3-c723-418b-8950-d7368779fefc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b7:5d:6d:0a:f0:67:be:7c:8e:85:35:41:bd:
                    5d:e3:2b:19:43:ab:76:04:1e:22:c6:c7:25:ea:78:
                    f7:e8:03:49:c8:c2:a3:2e:02:ba:cc:e1:61:6e:12:
                    21:30:f5:b7:32:6c:61:dd:0c:f5:88:7b:e8:05:c2:
                    f0:3e:68:7e:83:42:68:9c:e2:b3:c5:31:90:0b:b4:
                    af:93:53:0d:05:6c:fd:21:38:ee:39:98:a2:b5:e5:
                    e3:f3:1e:17:3b:9e:c8:6f:26:dd:d3:7b:61:26:e8:
                    8e:ed:71:27:bc:59:05:05:64:cc:2f:40:ca:90:d8:
                    78:04:31:c5:8b:c9:d9:01:9d:53:2a:f3:86:87:a4:
                    b4:a0:8a:40:f5:4d:cf:31:08:36:b1:cb:0e:1d:93:
                    3f:f6:b7:ab:85:29:ec:e7:62:ce:69:b3:07:1c:3d:
                    89:7b:ad:d2:12:8c:8f:44:f0:8b:0a:1f:9f:e2:66:
                    92:4c:6e:1c:67:67:c9:95:d3:e2:4b:5d:78:d7:2c:
                    2f:0e:bb:fe:ba:0b:5c:8f:78:e1:df:4a:7a:fa:03:
                    d9:e3:fc:08:3e:3a:ab:ae:0b:88:7f:ff:f7:6b:0c:
                    33:f4:25:f9:96:65:dc:79:11:b7:dd:4e:73:d9:f8:
                    be:b5:55:36:b8:0b:2a:57:9b:c4:15:05:2c:72:d2:
                    c8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0D:DE:C1:8B:94:DD:03:D7:DE:24:BB:BC:2E:6B:C5:3F:5B:11:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/4925d209-f003-3bb9-b12d-10cc44b06d40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl

            X509v3 Authority Key Identifier:
                keyid:AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:6a:66:a1:67:a2:5a:a9:31:92:72:35:fa:5c:11:af:83:c6:
         27:c2:ed:fa:04:ca:f3:19:c4:00:b6:0c:f6:27:7e:c2:90:ac:
         a4:d6:d6:e7:7a:39:70:ea:63:97:ff:97:ba:7b:23:f7:49:16:
         7b:ed:b9:e9:fe:7c:a5:58:d2:20:c7:96:1c:81:9a:66:bb:02:
         60:83:a7:d7:f3:6d:0d:f0:c5:f7:fd:db:62:93:ae:f4:f7:a6:
         20:fc:0f:3c:8f:3e:e5:91:72:83:54:73:10:e3:f8:2e:8b:92:
         70:69:c1:7b:ea:83:de:bf:51:76:ad:3d:99:48:c9:79:be:de:
         f2:3f:ec:a8:dc:07:5b:f2:87:f6:78:c0:3a:b6:e2:00:25:06:
         22:5e:d3:e6:51:0a:fa:5d:e7:6a:22:31:10:2e:d3:4f:52:42:
         e9:50:bf:fd:1c:67:c4:b8:b5:74:6c:12:f3:f1:31:7b:75:b8:
         c8:ee:fa:f7:87:f8:6b:aa:42:61:49:cc:06:5f:ac:87:d2:07:
         f2:54:37:e3:27:db:ec:53:e5:69:6b:5a:20:d2:2e:0f:b5:2c:
         0b:e5:87:df:25:82:0d:74:20:37:6e:4c:e8:48:54:68:34:72:
         25:8d:81:e7:f0:bd:a9:ad:f2:05:13:13:55:d5:c8:48:74:42:
         3f:15:ee:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:41:23 2026 by rpki-client