Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/86945b7c-04d9-3d21-af20-69e5bd13ba87.roa
File:                     86945b7c-04d9-3d21-af20-69e5bd13ba87.roa (raw, json)
Hash identifier:          x8ITt+TVv+NjNzU4CANUFHGJyMeB185Ny0OdU4uXruA=
Subject key identifier:   DB:F9:5B:7D:D2:57:DE:73:94:9E:DA:D6:20:35:82:F6:BA:B7:C0:B1
Certificate issuer:       /CN=503450af-ac6f-4861-96c0-24f7e8724111
Certificate serial:       010D0C9F4328584D5024F9CE25ED8BABCAECE600
Authority key identifier: F9:63:1A:91:2B:F7:A0:6A:5D:82:31:40:0C:21:D5:FD:BB:ED:FA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/86945b7c-04d9-3d21-af20-69e5bd13ba87.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     22961
IP address blocks:        74.122.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:f9:ce:25:ed:8b:ab:ca:ec:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=503450af-ac6f-4861-96c0-24f7e8724111
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=587a43ce-6312-4ef4-809e-ce38a5d31061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:83:10:f3:ec:20:b2:bf:76:f7:bc:0c:8b:f3:
                    ff:db:c2:4d:0f:42:f7:35:58:1b:9c:13:38:53:ad:
                    e3:e9:75:d3:18:d0:4d:63:12:c8:59:aa:f1:a5:90:
                    67:7c:31:54:8e:88:05:59:b9:db:e1:df:01:d8:e3:
                    46:4a:20:ab:4e:eb:a4:38:5a:1e:94:f4:35:18:84:
                    3f:d2:2a:7e:93:91:36:6f:b0:05:d2:59:9a:bc:ad:
                    28:34:49:18:4c:fc:56:03:dc:df:36:2a:a8:b0:45:
                    bf:5f:a2:0e:88:c2:73:9b:b9:f4:74:5d:35:23:58:
                    dc:20:29:01:5a:73:44:98:7d:7f:78:f3:ef:da:25:
                    5e:78:f2:fe:bd:73:1c:c7:31:dc:1d:4b:dc:e9:33:
                    9d:1f:aa:43:1f:90:d5:c6:0a:51:64:d3:8b:91:7b:
                    c4:da:68:5a:e0:26:c0:e2:5c:f6:af:98:c3:33:47:
                    4c:4e:ba:a9:a2:7f:4f:81:4e:41:48:67:bd:01:37:
                    fe:c9:c9:9a:df:d0:7a:4f:49:24:1b:24:a2:69:e7:
                    d4:49:0e:e2:95:6e:68:0b:22:ba:39:fc:20:84:80:
                    c3:07:41:67:80:3e:3b:77:c0:ee:d7:0d:0d:43:df:
                    34:c1:9c:f6:ec:9e:a6:26:6a:a2:94:18:47:ce:ed:
                    8c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F9:5B:7D:D2:57:DE:73:94:9E:DA:D6:20:35:82:F6:BA:B7:C0:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/86945b7c-04d9-3d21-af20-69e5bd13ba87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111/503450af-ac6f-4861-96c0-24f7e8724111.crl

            X509v3 Authority Key Identifier:
                keyid:F9:63:1A:91:2B:F7:A0:6A:5D:82:31:40:0C:21:D5:FD:BB:ED:FA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/503450af-ac6f-4861-96c0-24f7e8724111.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.122.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:f6:6d:25:4a:76:65:c6:cb:28:8f:71:37:19:42:4d:47:b4:
         bf:17:4f:48:9c:09:65:91:71:f2:f7:3f:f2:5c:b9:09:ea:8d:
         5b:c3:f3:d9:8e:23:04:a2:57:57:ed:75:d9:8c:40:47:02:e1:
         92:c2:53:b5:c8:45:64:50:93:cd:cb:90:2b:2b:27:ba:26:a3:
         df:a2:e2:8e:38:c8:96:61:1b:2a:c8:60:c6:cc:c3:bb:9b:2d:
         e0:5d:76:d0:dc:e5:52:60:dc:d7:4e:cc:45:5f:ab:9e:41:ac:
         2d:5c:bc:4e:a6:da:21:c2:1e:92:07:93:b5:19:24:04:2b:21:
         e9:68:2a:89:c2:0e:0c:85:ec:d1:f5:15:24:32:b2:04:9f:d8:
         67:04:f5:8f:7b:31:ee:a4:57:0d:74:04:f4:14:05:64:60:5c:
         c1:16:5e:5f:db:50:20:f1:0f:b5:90:49:a7:4c:68:46:4d:bb:
         d2:8c:b8:a9:96:a6:8d:74:54:b8:18:24:1f:2c:e5:6b:dd:1c:
         7e:9b:10:78:9d:e1:70:79:45:80:63:05:09:30:ca:11:fc:ef:
         38:90:06:27:86:5d:39:3c:e6:80:00:32:e8:4f:24:57:69:35:
         a0:1a:06:7b:06:44:ee:61:8f:30:f9:1b:c5:13:fc:a3:c2:bd:
         cb:23:b0:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1QJPnOJe2Lq8rs5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTAzNDUwYWYtYWM2Zi00ODYxLTk2YzAtMjRmN2U4NzI0
MTExMB4XDTI2MDMyODAxMDAzMVoXDTI2MDYyNjAxMDAzMVowLzEtMCsGA1UEAxMk
NTg3YTQzY2UtNjMxMi00ZWY0LTgwOWUtY2UzOGE1ZDMxMDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYMQ8+wgsr9297wMi/P/28JND0L3NVgbnBM4
U63j6XXTGNBNYxLIWarxpZBnfDFUjogFWbnb4d8B2ONGSiCrTuukOFoelPQ1GIQ/
0ip+k5E2b7AF0lmavK0oNEkYTPxWA9zfNiqosEW/X6IOiMJzm7n0dF01I1jcICkB
WnNEmH1/ePPv2iVeePL+vXMcxzHcHUvc6TOdH6pDH5DVxgpRZNOLkXvE2mha4CbA
4lz2r5jDM0dMTrqpon9PgU5BSGe9ATf+ycma39B6T0kkGySiaefUSQ7ilW5oCyK6
OfwghIDDB0FngD47d8Du1w0NQ980wZz27J6mJmqilBhHzu2MsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNv5W33SV95zlJ7a1iA1gva6t8CxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MDM0
NTBhZi1hYzZmLTQ4NjEtOTZjMC0yNGY3ZTg3MjQxMTEvODY5NDViN2MtMDRkOS0z
ZDIxLWFmMjAtNjllNWJkMTNiYTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTAzNDUwYWYtYWM2Zi00ODYxLTk2
YzAtMjRmN2U4NzI0MTExLzUwMzQ1MGFmLWFjNmYtNDg2MS05NmMwLTI0ZjdlODcy
NDExMS5jcmwwHwYDVR0jBBgwFoAU+WMakSv3oGpdgjFADCHV/bvt+rswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81MDM0NTBhZi1hYzZmLTQ4NjEtOTZjMC0yNGY3
ZTg3MjQxMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnoEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIr2bSVKdmXGyyiPcTcZQk1HtL8XT0icCWWRcfL3P/JcuQnqjVvD89mO
IwSiV1ftddmMQEcC4ZLCU7XIRWRQk83LkCsrJ7omo9+i4o44yJZhGyrIYMbMw7ub
LeBddtDc5VJg3NdOzEVfq55BrC1cvE6m2iHCHpIHk7UZJAQrIeloKonCDgyF7NH1
FSQysgSf2GcE9Y97Me6kVw10BPQUBWRgXMEWXl/bUCDxD7WQSadMaEZNu9KMuKmW
po10VLgYJB8s5WvdHH6bEHid4XB5RYBjBQkwyhH87ziQBieGXTk85oAAMuhPJFdp
NaAaBnsGRO5hjzD5G8UT/KPCvcsjsBk=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:41 2026 by rpki-client