Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/0b67e6a1-877b-3eba-9d95-3788077e5e55.roa
File:                     0b67e6a1-877b-3eba-9d95-3788077e5e55.roa (raw, json)
Hash identifier:          G0zoybB5Tk4byXwJiUxdfvuscX02LTNlVYaaqnTWiiM=
Subject key identifier:   F8:48:CD:8A:97:4B:F3:E5:2D:BB:4C:6F:B9:20:40:92:39:9E:9B:6E
Certificate issuer:       /CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25
Certificate serial:       010D0C9F4328584CF4221FDA1F9C4FB716EB8680
Authority key identifier: AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/0b67e6a1-877b-3eba-9d95-3788077e5e55.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        74.220.48.0/24 maxlen: 24
                          74.220.49.0/24 maxlen: 24
                          74.220.50.0/24 maxlen: 24
                          74.220.51.0/24 maxlen: 24
                          74.220.52.0/24 maxlen: 24
                          74.220.53.0/24 maxlen: 24
                          74.220.54.0/24 maxlen: 24
                          74.220.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:1f:da:1f:9c:4f:b7:16:eb:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=e89c9872-0e60-4cfc-ba12-b512a61ab4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5b:de:7d:6c:dd:9d:32:d7:2d:81:d6:38:a8:
                    53:16:aa:3c:c5:ae:6b:5d:e4:f0:70:f6:f9:f0:ed:
                    59:6b:02:89:27:f5:9d:13:80:27:e8:57:96:0b:80:
                    b9:09:bc:36:e6:f0:bf:5c:03:0b:e7:84:72:0a:00:
                    dc:d1:c9:1f:28:7e:d3:77:d8:07:1b:75:c8:f7:94:
                    a9:a0:af:2f:56:54:22:e0:7a:db:16:33:4f:de:4b:
                    c3:df:ac:c7:50:cf:bb:f5:2b:30:0c:6f:13:04:f2:
                    db:d0:47:eb:7e:0b:a1:0e:fe:fc:6e:6d:a0:95:83:
                    13:85:e1:84:40:cc:97:4e:6e:b0:96:eb:fc:51:27:
                    47:5d:25:86:c9:f7:32:8e:58:42:29:7e:3d:26:37:
                    f3:83:fd:c0:03:d6:73:37:79:3b:b1:55:f8:69:f6:
                    7c:45:e5:13:52:82:50:64:eb:72:09:7c:26:04:6a:
                    ce:69:0c:41:7c:eb:48:91:70:b8:83:46:82:6f:74:
                    3e:20:27:8a:fe:b2:f5:ec:f9:01:d9:c6:50:ee:b1:
                    b3:e9:85:40:c2:24:af:4c:be:cc:1b:a2:26:78:c7:
                    52:fa:30:5e:50:d8:ec:d2:4b:4f:39:7c:f4:68:a7:
                    6f:3a:c6:24:2a:17:51:b6:58:7b:74:10:f7:76:ec:
                    9d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:48:CD:8A:97:4B:F3:E5:2D:BB:4C:6F:B9:20:40:92:39:9E:9B:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/0b67e6a1-877b-3eba-9d95-3788077e5e55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl

            X509v3 Authority Key Identifier:
                keyid:AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.220.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c7:ad:30:e5:33:50:ed:4d:34:81:f2:c9:30:ec:c1:67:29:
         b2:77:1d:06:84:0f:64:ea:2a:3c:72:d6:e7:7f:21:0d:a0:ba:
         21:69:6a:14:d3:4b:53:e2:9b:cf:6f:92:05:aa:3f:48:4b:9a:
         b8:78:a7:e3:99:3a:83:45:b8:07:e9:fa:50:9a:5f:e2:67:6f:
         62:19:78:bd:72:7e:13:2a:2a:9c:24:c3:06:0c:f5:88:67:a8:
         62:e1:b4:7a:32:5b:2f:29:0f:8f:24:f0:2c:41:09:87:58:2f:
         b7:47:ff:59:27:59:99:64:1c:09:43:07:ad:b3:85:58:b3:cd:
         fe:18:e0:b2:39:a0:4a:30:5e:36:a5:a3:20:42:59:71:ac:05:
         23:4c:80:ff:8c:49:f5:7f:c0:8f:3a:03:77:7a:b5:f7:77:93:
         2a:28:04:c7:9d:97:36:b8:c6:eb:d4:ef:58:a8:c2:41:47:32:
         a6:c9:12:46:72:62:59:a4:b0:ce:b0:96:2d:b8:70:52:54:16:
         c9:b2:2e:39:7e:50:19:f3:18:2d:34:75:c8:fe:69:ea:f1:3f:
         16:bf:f7:d0:d2:2a:00:d2:a5:45:bb:55:a9:95:07:10:5f:28:
         16:f1:10:11:d5:b0:00:bd:5e:1a:7a:39:60:25:4d:4d:88:e7:
         d7:4d:15:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:53:34 2026 by rpki-client