Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/0bd50e50-930c-3e51-a6ad-dc10ef003ea4.roa
File:                     0bd50e50-930c-3e51-a6ad-dc10ef003ea4.roa (raw, json)
Hash identifier:          ACxeFhRgWZcEmqTFgrxH1hTclhzdkHFbqbYQKou5TG0=
Subject key identifier:   D9:27:60:79:B7:F2:EA:F8:9D:37:11:4B:C2:B0:D7:C3:4C:03:07:E2
Certificate issuer:       /CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Certificate serial:       010D0C9F4328584FA2C87287BAE002640824DB80
Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/0bd50e50-930c-3e51-a6ad-dc10ef003ea4.roa
Signing time:             Tue 27 Oct 2026 01:00:14 +0000
ROA not before:           Tue 27 Oct 2026 01:00:14 +0000
ROA not after:            Mon 25 Jan 2027 02:00:14 +0000
asID:                     46113
IP address blocks:        74.113.150.0/24 maxlen: 24
                          2620:7d:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a2:c8:72:87:ba:e0:02:64:08:24:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144
        Validity
            Not Before: Oct 27 01:00:14 2026 GMT
            Not After : Jan 25 02:00:14 2027 GMT
        Subject: CN=288b08c5-fb0a-414d-bf44-84753e36926b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ea:9a:1c:32:3f:9d:ba:0d:12:22:03:c0:4c:
                    af:44:89:ae:15:f3:95:b3:7d:16:df:9d:11:11:e5:
                    d0:ce:0f:4d:a0:a2:73:b8:e1:63:45:03:d7:67:bf:
                    b2:de:df:9f:3f:73:9f:e6:0c:22:07:05:b9:5f:b3:
                    3a:d3:73:d3:4f:f7:92:25:db:0f:f8:f9:6a:ff:c4:
                    26:db:97:1f:0b:9c:ff:2b:b1:3f:27:00:cf:e0:07:
                    35:91:fe:08:8e:cf:01:d6:67:c2:58:0c:ef:f3:90:
                    f0:90:0b:72:7e:50:e3:4f:c7:f2:84:c5:30:5a:ec:
                    48:68:fa:cb:a6:30:36:c3:a5:13:46:d3:70:9e:7a:
                    f3:f6:ad:20:32:2f:14:02:1e:e9:1a:5e:d0:49:2a:
                    05:07:06:bd:7b:21:0f:24:df:03:c1:23:26:93:ba:
                    e1:6c:0f:0c:0d:e8:f7:46:51:3d:0b:e8:72:99:61:
                    06:56:b1:bf:c5:b3:5f:86:da:ad:95:9d:ce:3f:6d:
                    89:3c:43:6b:6e:2e:cc:d1:bc:bb:cf:81:ad:15:1c:
                    2e:a4:41:55:6e:16:4e:09:f4:32:40:c9:26:1b:c5:
                    e3:f1:b8:f0:a6:a0:72:d1:cc:39:ea:59:49:f0:e5:
                    c6:d6:6f:5f:ce:40:94:9a:a7:1c:6b:f1:a6:db:16:
                    a8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:27:60:79:B7:F2:EA:F8:9D:37:11:4B:C2:B0:D7:C3:4C:03:07:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/0bd50e50-930c-3e51-a6ad-dc10ef003ea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl

            X509v3 Authority Key Identifier:
                keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.150.0/24
                IPv6:
                  2620:7d:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a1:7c:47:45:eb:85:1e:20:16:b5:f3:d5:ab:94:a3:aa:61:
         4d:6e:19:32:b8:a9:d6:79:9d:9e:74:15:fd:53:d1:d0:89:44:
         eb:15:1e:0a:a4:43:e2:0e:82:a4:e4:63:1e:1b:e3:e5:3e:0e:
         ea:31:71:04:26:18:44:4e:21:ba:d4:ae:7a:85:6c:1c:87:3e:
         a8:02:74:f0:56:f3:4c:33:3a:fc:aa:9b:31:aa:ff:7f:4e:eb:
         c8:99:13:a1:06:1a:7d:a2:3b:e2:92:99:c5:ee:8d:2b:8c:d7:
         c7:a0:e8:01:5c:37:9a:3e:6f:fa:d2:a2:0d:b7:d5:79:30:2c:
         69:e9:d1:22:36:ab:fe:a9:35:d0:52:dd:24:38:ce:fc:81:f4:
         eb:1f:e5:bf:0d:b9:a4:42:b3:27:1f:09:13:df:40:49:1c:2c:
         10:27:43:bd:d7:72:22:73:ce:64:ad:4a:55:c1:ec:74:69:ac:
         a3:34:f2:3b:ca:01:6b:51:65:ed:75:b1:e5:3e:12:71:d4:0b:
         fa:ba:29:31:0c:66:60:83:d4:ef:52:97:fa:ca:cc:9f:cc:79:
         60:a9:88:0d:f1:89:79:89:f1:9b:03:b8:b0:29:33:5e:2f:ad:
         61:36:b4:ef:35:af:2f:b9:36:7b:5f:3c:3e:f1:d2:47:2b:33:
         3e:8f:a3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:21:46 2026 by rpki-client