Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/90b24d23-f2f9-31e8-bd2c-5665c2883273.roa
File:                     90b24d23-f2f9-31e8-bd2c-5665c2883273.roa (raw, json)
Hash identifier:          FTQMTF5BMRU/qwfYUhzvUyfO7V8u1Beg/exNikdYZNc=
Subject key identifier:   93:4D:3A:61:C1:72:63:E4:7C:02:B9:63:AB:FC:9D:05:1C:24:DC:A0
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584CD99CC4524A6A873376830FC0
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/90b24d23-f2f9-31e8-bd2c-5665c2883273.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        74.121.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:c4:52:4a:6a:87:33:76:83:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=8db43b79-670a-42fd-936a-8f8f067427f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:93:0f:12:6b:c8:b7:0b:77:9c:50:15:e2:d2:
                    57:2b:ba:98:58:93:5b:e6:82:9c:77:73:a8:42:ea:
                    a2:77:5a:f1:8f:83:ee:9b:4c:70:32:ff:26:e1:65:
                    95:17:98:e1:8c:f1:9c:54:ef:27:f2:d0:cb:c2:b1:
                    53:f4:61:42:4c:d8:03:8c:d9:9e:65:d5:27:2a:6f:
                    69:de:eb:fa:23:d9:28:44:bf:b4:9a:c5:4e:3e:35:
                    c6:50:49:6d:58:20:ff:4e:af:0f:d5:dc:a0:5a:19:
                    ce:dc:8e:ce:10:e4:6f:ab:66:a0:4d:85:98:32:1e:
                    ed:8d:81:8d:3c:13:a5:6d:e8:2a:d5:b4:a9:22:0a:
                    d1:97:d7:7f:12:39:91:47:41:d6:01:25:dd:ad:94:
                    fe:98:b4:e4:0c:c2:77:ae:b4:0f:c1:e9:41:db:f7:
                    6d:6e:c3:0c:7d:98:6b:70:46:29:a4:1d:d4:7e:0d:
                    5b:dc:c9:63:52:03:38:98:b4:fb:6c:ea:5a:c1:83:
                    68:42:d7:78:d0:94:86:d0:e5:b1:0d:1d:62:ff:94:
                    59:c8:22:de:cf:07:6e:d6:d6:74:fc:66:e8:e9:24:
                    35:e5:38:11:60:cc:3d:20:b5:ae:3b:f3:1c:91:0f:
                    93:8e:0e:22:cc:82:a1:88:04:05:bd:c0:fd:f1:35:
                    17:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4D:3A:61:C1:72:63:E4:7C:02:B9:63:AB:FC:9D:05:1C:24:DC:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/90b24d23-f2f9-31e8-bd2c-5665c2883273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:cf:e3:fc:f5:2a:22:f3:4c:ef:50:cc:03:5a:47:44:b3:cc:
         fa:4c:ca:8c:95:18:12:54:98:b2:84:b4:d4:e9:e8:00:c9:fb:
         3a:21:89:a2:36:e0:d6:f6:1d:2b:82:36:5b:3b:30:e9:f5:76:
         2c:4b:2c:66:20:09:d7:b6:f8:4e:d3:73:48:42:04:9d:9f:fa:
         08:87:55:54:1c:12:74:10:02:4b:ca:7b:a5:9b:6d:31:dd:40:
         63:5e:82:be:6d:16:67:47:57:6e:4d:f3:a1:0d:2c:58:22:ef:
         30:a6:1f:2e:16:f1:35:af:01:ab:f3:c4:ea:a4:2a:ed:e3:d1:
         dd:0a:f8:07:d9:bb:50:fe:5c:e2:14:2e:3d:8a:7f:d4:b8:2e:
         d8:e7:6c:94:70:6f:47:ec:8c:61:e7:ec:90:3d:f5:10:0e:16:
         9e:9c:cd:6a:7d:18:63:ee:8f:6a:22:31:1b:6e:1d:32:00:6b:
         27:dd:c1:f6:44:4a:32:d6:4b:08:e8:de:41:1a:1c:0d:b8:ab:
         73:f6:e9:57:e0:b7:af:0b:27:d7:8c:45:ea:1f:cf:09:0d:59:
         a3:5a:4c:41:b8:33:b0:20:62:12:02:89:aa:1b:45:5f:d5:65:
         9b:43:81:bc:4f:09:47:c7:eb:6e:e0:95:74:db:a1:c0:2f:5e:
         09:d0:4c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:59 2026 by rpki-client