Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d71b1776-38b9-4e41-aecb-f56ed16a9cc5/66e27e05-431e-30b8-9707-61feb2f4db11.roa
File:                     66e27e05-431e-30b8-9707-61feb2f4db11.roa (raw, json)
Hash identifier:          1cOw8oWVy95DfDanapoYRXb2uft95ZHaBmovCBTWbiw=
Subject key identifier:   B0:64:D9:8A:C0:3B:10:17:7F:7B:53:D3:61:6A:BF:2D:7F:A2:E9:9C
Certificate issuer:       /CN=d71b1776-38b9-4e41-aecb-f56ed16a9cc5
Certificate serial:       010D0C9F4328584D651539C536214FFCFF0EFD80
Authority key identifier: 22:27:55:74:36:85:96:6D:C6:56:AA:66:EE:ED:76:AE:0B:3E:5F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d71b1776-38b9-4e41-aecb-f56ed16a9cc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d71b1776-38b9-4e41-aecb-f56ed16a9cc5/66e27e05-431e-30b8-9707-61feb2f4db11.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     16509
IP address blocks:        74.112.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d71b1776-38b9-4e41-aecb-f56ed16a9cc5/d71b1776-38b9-4e41-aecb-f56ed16a9cc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d71b1776-38b9-4e41-aecb-f56ed16a9cc5/d71b1776-38b9-4e41-aecb-f56ed16a9cc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d71b1776-38b9-4e41-aecb-f56ed16a9cc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:39:c5:36:21:4f:fc:ff:0e:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d71b1776-38b9-4e41-aecb-f56ed16a9cc5
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=247f7f71-d44c-4812-a07e-9504eb9a3bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6a:c7:ad:cb:df:a5:a3:ed:89:d9:0e:32:46:
                    67:62:98:41:ef:ab:ee:38:97:a1:09:31:31:ce:1c:
                    68:21:ed:2d:16:83:5b:75:dc:1e:52:50:9a:2c:3f:
                    77:07:50:f1:56:78:4e:73:ee:31:b2:77:8a:6e:89:
                    59:27:99:2e:81:b2:2a:18:8f:85:3e:2c:a4:41:8e:
                    b1:2f:4d:a2:65:c9:e5:60:53:6a:7c:6e:5b:01:90:
                    16:e5:87:5a:f0:37:f8:4d:9f:94:d7:d4:93:8b:08:
                    40:52:4c:69:ab:de:09:24:3e:6a:e8:bf:34:13:00:
                    96:9b:63:08:4c:c0:e2:bc:61:21:5d:70:fa:39:ef:
                    44:ba:dc:28:2a:af:81:b0:33:c7:5c:ea:54:cb:d7:
                    e0:ea:33:a8:3c:e0:bd:4f:98:9e:f9:41:85:31:3e:
                    0c:52:3c:b8:19:fe:8f:11:3a:9d:ee:9d:4d:cb:18:
                    64:7b:d9:de:2b:1b:ff:74:95:e5:f2:c2:01:b9:ae:
                    00:cf:b4:27:d9:6f:02:44:be:16:64:ce:5a:06:11:
                    6a:26:1f:68:19:43:a0:df:a9:ea:19:e7:dd:6f:96:
                    0d:2a:8e:c3:c8:32:bb:01:06:24:b5:f4:ac:04:2e:
                    45:1f:0c:59:fd:f6:b1:03:d5:e6:dd:9d:de:fe:43:
                    32:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:64:D9:8A:C0:3B:10:17:7F:7B:53:D3:61:6A:BF:2D:7F:A2:E9:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d71b1776-38b9-4e41-aecb-f56ed16a9cc5/66e27e05-431e-30b8-9707-61feb2f4db11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d71b1776-38b9-4e41-aecb-f56ed16a9cc5/d71b1776-38b9-4e41-aecb-f56ed16a9cc5.crl

            X509v3 Authority Key Identifier:
                keyid:22:27:55:74:36:85:96:6D:C6:56:AA:66:EE:ED:76:AE:0B:3E:5F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d71b1776-38b9-4e41-aecb-f56ed16a9cc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:91:1b:b7:a8:b8:3b:b3:b3:1d:fd:84:94:43:5f:98:d4:35:
         05:42:8b:7e:ad:9f:1c:4c:ad:22:26:95:d2:d3:27:4a:d0:21:
         c2:6d:da:ee:ce:aa:9a:5b:6f:66:d5:0d:78:2a:de:88:3d:45:
         7e:30:7f:26:91:6d:b5:96:40:13:fa:01:2e:23:39:7c:58:43:
         2f:12:f4:8c:2f:65:c5:c5:98:5b:1c:e2:10:5e:e8:41:3f:a1:
         d4:fe:52:da:64:84:26:52:f0:48:f9:b6:1d:9a:bf:cb:0f:a7:
         ca:5c:84:e6:e6:cb:f5:64:42:5c:2c:e1:a5:16:01:12:b0:b2:
         a4:dc:d4:2a:ce:1f:49:08:77:26:ec:fc:69:20:db:ba:4c:b4:
         bd:f3:d2:a8:5d:63:f0:c0:23:74:5b:a9:14:a5:c1:e0:1f:c9:
         9f:87:7a:6a:f0:9e:44:d1:ce:9f:f5:76:ca:88:64:5f:05:ce:
         6c:77:5d:c0:3d:28:4e:82:99:82:81:04:8d:67:db:f4:59:81:
         77:d9:f6:a3:81:9a:1b:82:a8:97:23:bb:c8:46:a8:3d:3a:45:
         a3:5c:76:a0:78:e6:ec:01:6e:d2:82:26:45:2f:88:3d:39:b3:
         3d:9d:52:09:3c:b8:0c:e9:7f:b4:57:3f:31:47:f2:17:7b:54:
         e7:89:b3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:55:31 2026 by rpki-client