Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c976757a-111a-3e55-b5fb-54fa0ddee651.roa
File:                     c976757a-111a-3e55-b5fb-54fa0ddee651.roa (raw, json)
Hash identifier:          ief/b1LfRKtrkywJtRZ28LoTX7xmy0HFap7r0rorBHc=
Subject key identifier:   F2:1D:6B:8D:9F:06:FD:0B:C8:42:BE:B1:7F:33:1F:5F:E5:99:AC:52
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584D7A051CD1F7F29EF25D8B1E40
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c976757a-111a-3e55-b5fb-54fa0ddee651.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     54178
IP address blocks:        74.126.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:1c:d1:f7:f2:9e:f2:5d:8b:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=83c30d13-3ba9-4365-992d-fb5e122cac47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:21:28:ef:44:c7:02:f6:82:ad:e8:b4:4c:
                    86:89:49:34:0b:ef:b3:cb:9a:eb:f1:e8:b9:a6:20:
                    6f:5e:a0:77:7b:25:f3:65:c6:44:58:9c:7c:ef:69:
                    3e:a3:81:bb:5c:54:94:0b:50:5e:03:70:d4:64:08:
                    04:a6:74:5a:5d:5d:ea:3b:9a:39:f6:5e:9d:63:63:
                    6e:d0:95:53:fc:d4:cd:60:74:82:12:5d:55:ed:82:
                    bf:bf:0d:cb:f3:0e:2c:d5:a5:ef:e6:bb:f9:38:dc:
                    67:d0:77:84:bd:ca:e4:57:12:0b:81:6b:af:92:74:
                    3b:e4:e0:54:d3:38:49:88:26:0c:28:c3:3d:76:2a:
                    c8:86:b6:c3:70:f5:d1:50:75:af:05:37:bf:d7:65:
                    95:fe:46:77:0f:6e:b7:38:75:98:5d:27:49:e9:d6:
                    b9:76:c1:81:1e:0b:45:ae:e8:1c:b8:62:18:10:92:
                    5e:b7:02:14:94:b2:9d:63:af:cc:8a:74:b4:9e:65:
                    fb:5e:1e:55:7a:40:b3:ba:97:54:f8:35:ef:2c:ed:
                    75:df:a0:aa:17:49:fc:47:20:e1:50:76:71:40:3b:
                    dc:e0:66:dd:41:20:09:32:52:39:17:8d:ad:2c:8e:
                    af:b6:bc:dc:c9:5c:fd:1e:12:57:11:71:0e:b9:07:
                    73:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1D:6B:8D:9F:06:FD:0B:C8:42:BE:B1:7F:33:1F:5F:E5:99:AC:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c976757a-111a-3e55-b5fb-54fa0ddee651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:ad:f8:e8:d4:6d:68:ae:f8:c0:02:9b:97:2f:fb:aa:3a:f4:
         b1:f6:aa:8b:64:2e:3e:94:ed:e5:c1:c1:0d:3b:77:19:d8:4a:
         6f:c3:3c:23:88:ec:b8:12:5c:5a:40:45:51:9b:54:ec:a3:53:
         d5:3a:9e:4d:bf:d5:ab:5a:46:18:40:b2:cf:4f:00:6b:71:11:
         0f:96:72:24:71:b8:9f:b4:29:b2:93:1c:81:07:63:c8:73:61:
         f3:0c:67:3c:65:25:ee:64:99:07:4d:38:a6:c4:b3:65:2e:fe:
         59:b9:f5:c0:af:de:8e:4b:8f:f1:94:5a:29:c1:67:aa:84:29:
         b5:87:b3:8f:7d:6c:f6:9b:9b:e0:2d:c4:9f:bb:7a:de:05:71:
         96:f9:5f:cd:1f:2c:47:de:6b:ab:ef:7c:0f:3c:62:9c:4f:8c:
         89:d5:a8:0a:b8:45:bd:12:d0:a3:a1:2f:75:fc:c8:b6:12:cd:
         06:50:5b:dd:7c:8a:51:13:5a:89:82:ce:98:24:40:52:b5:2b:
         dc:c7:b0:88:bd:f5:39:50:f4:34:80:42:e6:30:51:fe:83:4e:
         57:7a:e6:6d:5b:08:a7:31:07:00:2e:8c:70:f6:25:bc:e4:ba:
         66:d5:ef:14:a1:0d:43:f1:ed:99:1c:7a:11:36:42:ac:8f:87:
         56:ee:87:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:23 2026 by rpki-client