Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/9e1f7b4a-dd80-30e8-b8d0-6c7f12c3eb02.roa
File:                     9e1f7b4a-dd80-30e8-b8d0-6c7f12c3eb02.roa (raw, json)
Hash identifier:          M3mumu/khOUkGta8nesRzP/7BUjJToJM3CPTmVU3wEs=
Subject key identifier:   29:F4:D6:90:D5:65:D3:C8:5F:2F:96:EA:12:E4:F0:8E:A8:61:45:FF
Certificate issuer:       /CN=879f8f15-9dc9-4663-aff8-bf62864b859c
Certificate serial:       010D0C9F4328584E6DD4C550573FEF4E5E728E80
Authority key identifier: 86:B2:CD:FC:31:BA:34:57:EA:64:CB:E1:DE:50:AF:13:98:CF:C9:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/9e1f7b4a-dd80-30e8-b8d0-6c7f12c3eb02.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     398296
IP address blocks:        74.114.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:c5:50:57:3f:ef:4e:5e:72:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879f8f15-9dc9-4663-aff8-bf62864b859c
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=54a28f54-554b-4812-a367-2cf01c53f626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:72:89:54:e6:2c:7a:64:7c:4e:fb:7e:59:ac:
                    be:c1:4d:a9:c3:58:d5:9a:bb:68:81:04:5e:af:3a:
                    82:94:dd:12:3e:45:7b:6b:cd:8c:d1:01:cc:47:53:
                    a7:3f:dd:f9:f7:83:68:3f:86:d2:aa:f3:c4:87:8d:
                    17:cf:6e:56:ac:fe:e5:a9:7a:ad:a7:89:b2:ec:f8:
                    46:ae:38:29:c3:5b:4d:37:bd:af:55:1b:38:51:77:
                    6f:b8:2f:d0:ca:2a:17:97:d3:8e:74:ec:bf:b8:ed:
                    d1:47:15:27:af:80:d4:d3:65:ba:4d:96:d5:ea:80:
                    c9:73:51:0b:94:9e:63:02:2b:59:52:1c:00:c5:36:
                    ed:b1:df:17:99:ac:22:61:2d:ae:6f:eb:21:f4:25:
                    de:2e:f8:9a:cc:a9:22:00:15:d3:3c:59:d3:e6:6b:
                    bc:69:65:c8:e2:4f:21:c8:5e:83:7f:e7:7c:21:9b:
                    83:68:84:10:f2:48:b2:d6:68:52:4e:17:7b:56:bf:
                    7a:01:13:a1:34:58:59:11:b5:3a:4c:68:18:6c:63:
                    ae:46:7c:d5:80:0a:9d:87:f5:54:92:2b:be:e0:30:
                    60:7b:18:a2:38:1e:5c:76:7e:dd:0f:05:0b:1d:1e:
                    e4:d2:b5:83:ad:6a:94:45:c6:58:95:1d:d3:61:72:
                    fd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F4:D6:90:D5:65:D3:C8:5F:2F:96:EA:12:E4:F0:8E:A8:61:45:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/9e1f7b4a-dd80-30e8-b8d0-6c7f12c3eb02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.crl

            X509v3 Authority Key Identifier:
                keyid:86:B2:CD:FC:31:BA:34:57:EA:64:CB:E1:DE:50:AF:13:98:CF:C9:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d1:e4:8c:01:6b:8a:14:c5:c7:71:25:e8:ca:40:c7:40:c7:
         31:ff:d5:42:75:4d:83:b4:a9:d6:62:54:34:5c:87:72:ac:a5:
         ec:02:af:b3:d2:57:fd:2d:5f:12:e2:5c:a4:81:5c:79:21:89:
         b6:cd:08:44:38:eb:b7:3c:79:20:49:fa:50:8b:62:4a:44:b2:
         ad:5d:4c:11:43:28:fd:38:b3:6d:77:c5:13:be:26:c5:97:b7:
         fd:6c:43:5e:95:2a:e1:56:8a:e0:6e:e9:95:c5:18:21:69:92:
         c3:7a:75:f3:17:2b:14:27:8b:e5:3d:8d:95:23:7b:3a:f3:5f:
         f7:48:aa:8a:02:7d:b7:16:01:14:bd:de:2f:77:a9:b8:3b:d7:
         81:a8:7d:b9:78:40:e5:ed:5a:83:17:e6:5e:fd:a3:65:e7:8d:
         85:e2:0c:04:f8:16:75:69:8a:fe:e6:ed:17:57:07:ef:e5:c6:
         bc:90:06:bd:53:68:15:65:d0:43:a4:95:eb:61:e8:20:c3:b7:
         b0:5a:a4:bf:2b:8a:64:83:a3:01:b5:e4:dc:fa:f6:72:e0:85:
         78:e4:85:f1:a6:a6:54:18:a0:d0:1a:c3:73:9f:fc:ce:70:e3:
         fc:4a:43:8e:65:73:5c:3a:b2:70:a0:35:77:fd:99:3d:31:d8:
         5a:d1:f1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 10:26:20 2026 by rpki-client