Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/70ac99d2-7062-3ad5-a510-3591893e0831.roa
File:                     70ac99d2-7062-3ad5-a510-3591893e0831.roa (raw, json)
Hash identifier:          PHI1V3X32P/eMsmfAgyy2C0EH9InSt0zvMJwLgZWi5c=
Subject key identifier:   C2:7A:FF:98:F0:CA:89:57:2B:52:E0:E8:64:21:33:7F:79:8C:8E:85
Certificate issuer:       /CN=e04b8478-e14b-4dff-ae0c-707f31960618
Certificate serial:       010D0C9F4328584E1FA999D39105AD3A3DF04A80
Authority key identifier: 96:1D:C8:E3:E5:9C:A9:6B:6B:D2:3D:D8:04:C0:4C:2B:72:53:7E:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/70ac99d2-7062-3ad5-a510-3591893e0831.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     14618
IP address blocks:        74.118.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/e04b8478-e14b-4dff-ae0c-707f31960618.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/e04b8478-e14b-4dff-ae0c-707f31960618.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:99:d3:91:05:ad:3a:3d:f0:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04b8478-e14b-4dff-ae0c-707f31960618
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=b80923dc-1375-4232-944e-88d25d1555c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:89:c5:d2:af:28:17:0b:ba:a9:59:3d:a0:a6:
                    a5:59:59:8f:94:6c:0a:03:9d:6f:73:1b:c4:71:09:
                    9b:da:8f:9b:37:2b:4f:f2:bf:55:cb:0a:25:4f:1e:
                    dd:18:d0:a1:cb:ce:47:53:39:fd:9d:2b:70:19:d0:
                    8d:af:d5:31:60:75:34:f1:7f:ca:a4:04:f8:72:3f:
                    c5:63:0d:3c:40:67:82:fd:7c:a8:8f:7f:f5:5a:c6:
                    d3:8d:bf:86:92:a0:80:95:eb:0f:51:67:40:e6:05:
                    13:eb:6b:1a:e8:cb:88:2f:a3:3e:ec:b5:37:a6:c6:
                    44:e3:b9:6f:39:c8:30:e6:1a:bb:cc:2e:15:5f:57:
                    69:86:82:ff:47:c6:8d:4e:ee:03:51:23:9d:18:30:
                    95:7f:b8:00:05:e1:71:c0:2c:dd:06:0d:ae:18:e7:
                    1d:ff:85:58:fb:57:bd:39:8c:32:e0:a6:6a:fc:97:
                    3a:bd:21:b9:cf:0b:69:24:c7:22:6f:0e:08:50:2c:
                    ba:70:22:53:4e:24:eb:56:d4:2e:9b:66:d9:c1:b5:
                    77:65:95:15:0a:35:64:8f:40:5d:0b:aa:66:82:ae:
                    26:a8:4a:9f:23:ad:bf:d6:a0:80:98:ae:69:0b:cf:
                    0d:21:fa:33:6b:ea:b9:5c:98:ec:8e:06:06:d5:3e:
                    57:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7A:FF:98:F0:CA:89:57:2B:52:E0:E8:64:21:33:7F:79:8C:8E:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/70ac99d2-7062-3ad5-a510-3591893e0831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/e04b8478-e14b-4dff-ae0c-707f31960618.crl

            X509v3 Authority Key Identifier:
                keyid:96:1D:C8:E3:E5:9C:A9:6B:6B:D2:3D:D8:04:C0:4C:2B:72:53:7E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:84:cf:c3:6e:a9:2a:93:c9:da:3c:cc:7b:2d:47:59:e2:a5:
         cb:f5:f5:e8:44:bc:f3:c1:8b:a1:77:c3:ab:b0:1b:0a:a0:50:
         dd:0d:2a:28:2c:5d:0a:cf:74:c2:43:b5:f2:67:a6:f1:cb:0c:
         2c:5b:27:78:fe:01:d4:c5:19:ba:05:f0:3a:1a:dc:b9:22:89:
         b4:dc:6c:31:7f:c7:3e:71:94:06:1d:07:58:2e:97:a4:4b:6a:
         75:e8:0f:cd:9d:64:d6:26:16:42:99:a9:b9:8c:55:7c:3c:ea:
         7b:fd:97:7a:89:d8:2e:50:28:c4:0d:01:bb:ba:eb:fd:e2:f7:
         6c:b5:25:af:7a:5e:cd:f1:9a:d9:4c:68:75:80:cd:ba:09:e7:
         3c:92:5d:95:6a:1f:44:92:87:c8:fa:2d:9a:b6:09:cc:9f:da:
         74:04:95:e1:e0:4d:56:c7:13:70:ea:41:ae:a8:dc:d3:c0:23:
         c2:bd:1e:1b:cf:2c:af:19:52:7a:9c:ec:48:0c:c8:1d:cb:c2:
         b0:8a:2f:42:05:a9:a1:6b:72:ef:b2:4a:ac:73:af:de:27:7a:
         bf:40:8f:0a:e0:5b:18:4c:30:71:32:82:e4:3d:33:33:f1:3f:
         b2:21:0d:ba:4e:66:1c:54:91:4f:fb:23:59:3a:fb:6d:97:a3:
         85:a0:ae:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:25:57 2026 by rpki-client