Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/fb09f8ad-38f4-3f5f-b294-9040b12ec9c0.roa
File:                     fb09f8ad-38f4-3f5f-b294-9040b12ec9c0.roa (raw, json)
Hash identifier:          RwViu3lkVvdiIcVEPxdfgQNAngTzVzuyn0xv+X5hUww=
Subject key identifier:   BA:73:DD:6B:AA:76:6E:99:7F:99:17:D8:AA:B3:21:C5:77:85:CF:C9
Certificate issuer:       /CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd
Certificate serial:       010D0C9F4328584E4129CFFAC5D741C03CF2F880
Authority key identifier: D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/fb09f8ad-38f4-3f5f-b294-9040b12ec9c0.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     10753
IP address blocks:        74.51.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:cf:fa:c5:d7:41:c0:3c:f2:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=4e7005ce-8b5b-4ab6-a3b5-06ffbd582c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:48:fd:f2:ca:57:89:d2:cb:c7:7d:79:51:
                    e9:17:f8:dd:9f:21:43:f9:4f:ae:d6:f0:ec:c8:42:
                    ea:ac:fe:b9:b3:10:03:b9:33:62:23:47:64:e8:53:
                    0d:35:11:8c:ae:09:04:23:33:0d:83:34:75:a6:08:
                    1c:59:a7:3f:6d:e0:9d:45:2c:8b:28:25:58:7c:21:
                    5d:25:61:93:09:ae:23:80:b3:8d:23:bb:37:2d:66:
                    f6:93:40:d4:4c:d4:62:9c:9e:d8:49:ac:5a:0c:89:
                    08:07:36:f0:6f:c4:86:a2:3b:4b:ac:f6:a8:ea:88:
                    07:35:af:99:d2:7a:b0:e0:2e:24:16:c6:6f:c1:84:
                    60:82:de:39:9f:a4:99:2e:df:79:98:05:8c:4a:1f:
                    b2:eb:37:b0:8a:ac:0d:6e:1e:15:1f:cb:e5:bb:10:
                    1e:96:6c:04:93:48:eb:51:09:aa:fe:2e:91:17:11:
                    3e:6e:11:e6:a1:20:bd:8b:ec:65:49:22:df:da:c2:
                    f1:e2:0e:f3:e3:92:bd:4c:ed:06:5e:77:ad:ce:e1:
                    1c:d6:f5:02:d2:ad:40:a4:03:38:74:a9:cd:54:09:
                    d7:04:4d:6f:4a:27:98:3a:f1:20:35:42:34:40:a3:
                    e7:0a:a2:ea:0e:01:18:8f:c7:fb:9f:49:4e:3b:ac:
                    ce:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:73:DD:6B:AA:76:6E:99:7F:99:17:D8:AA:B3:21:C5:77:85:CF:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/fb09f8ad-38f4-3f5f-b294-9040b12ec9c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.crl

            X509v3 Authority Key Identifier:
                keyid:D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.51.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:0c:54:56:33:cf:3d:3e:1b:24:d3:48:6c:62:cc:8e:50:b3:
         9a:c1:45:ce:67:00:68:45:1e:18:9e:f2:6c:88:f5:6f:64:38:
         73:c8:17:25:b1:1f:27:6c:37:3e:06:95:44:b2:2d:ee:00:08:
         ce:7f:5f:93:80:c2:3f:97:97:09:af:ac:92:69:88:d1:6f:ea:
         49:a3:a8:ff:73:5b:7e:24:02:8c:11:16:0b:2e:4f:18:c0:d5:
         91:1d:8c:ea:bd:12:e6:8b:43:f4:e1:9d:bb:9e:d2:14:f8:69:
         7e:32:54:50:59:34:01:f1:de:47:dd:82:7c:36:a5:f3:82:6f:
         72:94:a5:01:79:1e:8b:f4:9b:6f:99:b2:03:75:9d:09:c7:3c:
         a6:99:62:76:d6:54:5c:46:7c:f6:60:bc:69:21:70:ed:eb:cd:
         7d:6f:ee:f9:1a:bb:64:4b:e9:fb:e7:35:91:ad:d9:80:a1:97:
         09:9a:dc:2d:42:c5:2d:c6:a1:65:cd:ff:2a:9b:6b:c6:e4:8a:
         99:96:fa:0c:1d:76:c0:c1:c9:e2:a9:06:65:92:a6:20:bf:8f:
         be:b2:e3:cb:f4:77:c9:e4:cf:43:fa:a6:69:e0:56:a0:86:34:
         a8:38:37:55:63:89:c6:51:9c:f7:25:ff:c5:9f:66:5d:4b:b2:
         c2:c2:9b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:02:50 2026 by rpki-client