Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/c1428898-ff6a-36ce-9129-b74449e03ae0.roa
File:                     c1428898-ff6a-36ce-9129-b74449e03ae0.roa (raw, json)
Hash identifier:          4UJfrJTNSPeuJAV85R3b6r3nhhiqRqJHd12KTB4yXEU=
Subject key identifier:   01:33:B1:92:50:D5:14:2E:72:2C:D2:C3:8E:B1:8C:86:51:E8:9C:09
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584F49756AD508C2474167F36900
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/c1428898-ff6a-36ce-9129-b74449e03ae0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     4213
IP address blocks:        74.116.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:6a:d5:08:c2:47:41:67:f3:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2d985dd0-8d6d-4351-a23c-6b9f5547de37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5b:4f:07:7e:78:0e:41:37:ed:8a:37:3d:3f:
                    c7:0e:d7:4b:bb:6e:62:bb:be:e0:91:5a:70:83:db:
                    b8:f1:03:bd:5a:61:69:5f:52:da:16:ea:4d:5d:2a:
                    b1:56:0f:82:43:52:92:0c:67:1b:5d:1d:8e:78:90:
                    a0:5e:50:18:a6:0b:e9:fe:2b:74:a7:18:0d:07:ab:
                    a3:0a:74:3c:b4:df:af:f1:d8:4d:48:c5:40:08:95:
                    e2:a8:e2:f3:fe:de:ea:3c:42:9e:e5:ec:0f:22:9b:
                    60:2d:9e:38:49:c5:ec:67:f2:e9:6f:d2:18:36:12:
                    93:05:ce:be:94:09:dd:bb:82:52:a1:fd:ac:50:b1:
                    6f:f1:e8:65:be:8f:9c:2d:32:ef:e9:12:2c:bb:52:
                    7c:c3:01:3a:46:ac:ae:bd:4e:f1:74:9a:6d:0e:f1:
                    82:28:c4:ed:42:92:82:9d:79:88:11:cb:4f:af:9e:
                    15:76:54:b8:ab:5f:f5:f9:d6:11:eb:a8:36:c6:7b:
                    95:7f:04:d6:bb:88:f1:b2:b2:6c:31:25:54:a4:b4:
                    65:a2:e6:a1:da:9b:ec:d4:2c:8c:94:66:87:57:39:
                    3e:bd:b6:96:f9:df:f5:bc:78:be:2f:5e:9c:8d:bd:
                    3a:9a:59:cf:dc:cd:15:a5:d3:8b:9c:f7:8c:fe:bb:
                    95:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:33:B1:92:50:D5:14:2E:72:2C:D2:C3:8E:B1:8C:86:51:E8:9C:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/c1428898-ff6a-36ce-9129-b74449e03ae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:9d:b0:1d:2c:19:07:fe:57:56:51:96:40:44:ca:fd:a4:eb:
         e1:ca:14:4b:fa:8a:b2:43:70:a4:74:21:cb:60:4c:8a:63:e4:
         e3:72:ce:a8:1e:1a:84:d4:78:ad:48:66:e8:62:9c:52:56:18:
         d4:ce:09:ff:8d:3e:d7:cb:c9:b3:f1:e8:46:08:72:65:ce:72:
         5b:76:9b:3a:42:5c:8c:30:33:49:7f:43:f4:a5:56:15:56:3a:
         c9:02:04:95:6e:5b:55:43:6d:93:f4:fe:85:8c:be:fb:e8:83:
         d1:88:dc:f5:05:6c:24:47:7c:ad:45:a5:41:db:ef:d5:d4:d6:
         b9:10:6e:c0:ee:85:8c:81:7f:94:db:6c:e4:e8:09:2e:47:85:
         f0:e2:97:a4:40:f8:94:e2:39:1b:cf:3b:41:7d:7f:79:9d:8d:
         15:a4:21:ad:22:98:d3:3e:53:15:d5:3a:92:b9:30:ae:94:3e:
         e1:53:75:f0:9c:96:e8:8a:8e:67:73:55:1b:37:19:13:e2:ed:
         b3:7d:e9:18:be:24:a5:5f:7e:0d:22:8e:65:91:2a:a3:e6:18:
         f4:2f:5c:08:c0:20:68:5f:ef:b5:6e:34:7d:88:4d:38:19:15:
         af:c9:6e:df:78:6a:40:cb:51:a7:36:95:57:2a:0f:c5:21:24:
         95:6f:80:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:47:50 2026 by rpki-client