Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/07f3d583-55b0-4da4-96a4-c23530389673/4d87636b-1cd3-321f-ac0a-d5603d6ea03c.roa
File:                     4d87636b-1cd3-321f-ac0a-d5603d6ea03c.roa (raw, json)
Hash identifier:          yjf7F9IJ+HTm7xzWtcVZBuHZpKTv0zweqlukZwoZDtU=
Subject key identifier:   E0:2B:76:27:5D:1C:27:89:80:EB:40:63:22:7B:BF:C1:50:F1:9C:72
Certificate issuer:       /CN=07f3d583-55b0-4da4-96a4-c23530389673
Certificate serial:       010D0C9F4328584DD35B089C75C4D5A95FAF1C80
Authority key identifier: 2A:6F:A2:89:FD:2D:05:D9:D9:58:7C:A4:5B:D6:74:5C:11:F0:6D:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/07f3d583-55b0-4da4-96a4-c23530389673.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/07f3d583-55b0-4da4-96a4-c23530389673/4d87636b-1cd3-321f-ac0a-d5603d6ea03c.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     400527
IP address blocks:        199.74.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/07f3d583-55b0-4da4-96a4-c23530389673/07f3d583-55b0-4da4-96a4-c23530389673.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/07f3d583-55b0-4da4-96a4-c23530389673/07f3d583-55b0-4da4-96a4-c23530389673.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/07f3d583-55b0-4da4-96a4-c23530389673.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:08:9c:75:c4:d5:a9:5f:af:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f3d583-55b0-4da4-96a4-c23530389673
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=bdf74e4a-d524-4587-9bc6-393c57c28bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6e:ac:c0:ff:3d:68:35:98:98:0d:a7:a4:a7:
                    d5:57:96:41:18:ef:81:c2:73:53:e0:03:2f:b7:6e:
                    4b:4d:e4:22:1a:c2:4c:26:20:d9:0f:69:dd:89:96:
                    2d:97:5e:2a:80:d0:bc:85:57:02:60:ad:13:20:41:
                    9f:51:03:42:b8:28:6a:01:67:6f:e9:22:83:7e:f9:
                    69:b5:39:12:a9:29:39:14:d6:ca:39:e5:e4:56:b0:
                    13:b0:8b:b5:75:0a:4a:73:ee:a5:bb:96:b0:ff:ca:
                    b3:6f:6e:c4:ea:91:aa:af:3f:44:ab:65:90:26:a7:
                    e9:47:71:36:42:c9:81:b3:3c:f7:75:de:79:6a:c3:
                    fd:bc:14:1e:e8:bd:43:b9:81:71:43:4a:6b:d8:19:
                    48:ad:93:97:f5:d3:f8:90:8d:6b:60:f1:1d:f2:3d:
                    98:8f:33:c1:bf:8d:3a:56:d7:ae:90:3c:1d:73:35:
                    3b:18:4a:a7:56:11:1e:89:60:78:26:af:01:8c:57:
                    68:f2:1a:39:08:79:af:3d:bd:c9:fa:aa:b3:83:07:
                    e9:99:74:d1:66:eb:f8:08:81:53:98:11:2c:32:f5:
                    ec:0f:f6:75:47:68:bb:40:3b:5a:50:b9:a6:f6:dd:
                    ac:73:fe:23:9a:c9:c5:d3:28:9b:41:c3:75:41:d1:
                    b5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2B:76:27:5D:1C:27:89:80:EB:40:63:22:7B:BF:C1:50:F1:9C:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/07f3d583-55b0-4da4-96a4-c23530389673/4d87636b-1cd3-321f-ac0a-d5603d6ea03c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/07f3d583-55b0-4da4-96a4-c23530389673/07f3d583-55b0-4da4-96a4-c23530389673.crl

            X509v3 Authority Key Identifier:
                keyid:2A:6F:A2:89:FD:2D:05:D9:D9:58:7C:A4:5B:D6:74:5C:11:F0:6D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/07f3d583-55b0-4da4-96a4-c23530389673.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.74.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:3a:31:0b:9a:56:db:dc:6c:6f:42:49:ab:d3:2b:6f:16:b7:
         63:19:5b:94:ef:01:b3:ce:96:29:c8:0f:df:94:ec:e4:d6:a9:
         e4:27:f8:d6:f8:09:3c:98:e3:96:37:03:bf:f8:3f:9a:3f:56:
         d8:97:92:d0:48:b1:81:a5:2f:d8:c2:9c:d7:f2:e5:af:c7:8c:
         f1:a0:c4:ec:77:86:2b:1d:14:7d:97:20:61:1f:85:a1:b4:35:
         d2:2e:ee:a9:ae:db:a1:77:c0:71:a4:49:e1:e5:ba:e1:ca:56:
         54:ae:99:d1:c0:6c:bd:a5:60:97:b3:d3:96:d3:18:34:c4:ed:
         4d:bb:8e:76:37:cb:16:15:a8:37:4d:5d:c1:03:2f:f5:e7:03:
         07:41:3c:05:8f:e9:18:7b:a2:8c:d5:dc:2b:46:0b:d9:77:a1:
         ef:cc:ff:f1:27:54:36:d0:54:7e:fb:30:7d:f6:87:2f:05:0b:
         6c:f0:50:44:c4:8e:c7:b1:31:1c:a3:d8:51:78:e5:9b:62:f1:
         27:88:3f:96:dc:a7:81:77:dd:99:55:3d:78:21:08:3d:72:c1:
         c5:f1:cc:9a:86:be:2a:b1:c2:54:0e:31:12:53:b8:35:ce:ad:
         2c:01:5a:59:c7:1e:f0:f7:48:3f:3d:ea:b7:89:19:e9:52:c5:
         22:2d:8a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 03:16:03 2026 by rpki-client