Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ac3fba6e-34d0-3467-9a92-b8b2f0ecd7e9.roa
File:                     ac3fba6e-34d0-3467-9a92-b8b2f0ecd7e9.roa (raw, json)
Hash identifier:          YS3R7SP4hiiI7khVNEOplZhFwzN88RFfCPILofW7p50=
Subject key identifier:   EF:50:71:85:3F:FC:6D:1D:38:C5:21:03:B6:29:4D:05:20:2F:13:27
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584B153C165FD971BB00379B2500
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ac3fba6e-34d0-3467-9a92-b8b2f0ecd7e9.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     4540
IP address blocks:        74.126.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:16:5f:d9:71:bb:00:37:9b:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=bd877fdb-c97f-4fc4-9edf-6befa8df1990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4d:85:cf:95:37:8c:f7:c5:f2:65:22:2d:32:
                    44:d9:3a:6d:06:8e:1a:2f:7a:6e:41:f6:0b:c1:7e:
                    f2:40:73:39:4d:94:42:6c:de:04:9a:43:bc:18:8c:
                    56:44:81:05:9b:37:79:bc:58:42:83:37:fe:e6:43:
                    24:6a:d1:7c:59:cd:28:fc:c3:29:ec:27:17:5b:c9:
                    35:9c:2e:dd:b7:2e:f1:7b:ea:62:fb:f0:de:3b:54:
                    27:8f:cf:d4:ec:ea:9c:bf:38:d0:d2:f7:14:bc:8e:
                    2f:a6:d7:dd:a0:43:64:cf:53:7e:22:ad:e7:96:63:
                    62:22:3c:34:e8:d9:95:30:04:17:42:8b:51:7d:8b:
                    b6:35:6c:3f:60:1b:04:09:bd:ec:3b:3a:24:2c:b9:
                    bb:15:4d:c6:c1:f0:6d:a7:d0:10:b3:00:cd:82:2c:
                    78:12:ba:cb:ad:e7:28:c7:45:18:05:f1:3a:3d:ff:
                    70:23:15:5a:b4:85:c3:58:28:25:b3:ce:94:7e:08:
                    c9:1b:a7:5c:66:96:10:40:05:b9:59:d3:4d:e2:1d:
                    eb:bb:05:2a:e2:8f:af:74:ea:55:15:39:63:78:a5:
                    a6:ed:c9:67:62:ce:c5:f8:bc:f0:c0:64:42:cc:ec:
                    3d:a7:49:0f:54:8d:42:d7:22:46:a8:03:21:83:cf:
                    1c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:50:71:85:3F:FC:6D:1D:38:C5:21:03:B6:29:4D:05:20:2F:13:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ac3fba6e-34d0-3467-9a92-b8b2f0ecd7e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:8f:97:81:b8:b5:89:2f:62:d0:a6:e8:78:97:c7:8c:0c:fe:
         05:7c:a6:69:60:7c:86:8b:22:84:b9:cf:ac:97:52:f8:df:6c:
         c6:33:9b:07:09:8b:5a:73:5c:bb:a3:6f:76:3e:42:84:0f:20:
         1e:6b:91:e8:2b:39:96:4b:c5:35:0a:d5:ac:87:a3:d5:87:23:
         58:05:02:3b:64:3f:83:55:5a:30:d6:03:3c:ac:d5:67:8b:27:
         86:95:23:9b:06:7b:e8:dd:54:25:74:56:02:92:2f:4e:69:c8:
         ba:6c:a1:28:ec:01:d8:55:21:ce:56:fb:82:20:94:1e:85:43:
         c4:9e:4c:a5:ff:3c:6d:14:17:9b:17:28:34:91:51:75:2a:dd:
         59:b7:7e:06:28:6c:86:0f:99:08:0c:ca:09:73:45:32:31:89:
         0d:1f:54:cf:c3:6e:b4:1e:38:de:ed:a7:fb:fa:52:4c:f8:8f:
         86:52:66:26:58:f9:9f:cd:d6:d8:77:3e:04:ef:60:41:6c:02:
         dc:19:5c:df:43:aa:72:86:fe:88:54:48:cd:fe:8d:a7:06:c8:
         1c:74:4a:88:40:3f:83:bd:fa:c5:86:50:e0:d2:8f:c5:0b:1f:
         18:7d:97:d4:c8:cf:0e:6c:e0:bc:f3:e1:91:4a:30:50:04:ae:
         b5:26:54:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:25:33 2025 by rpki-client