Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/bd89449d-0353-3c54-873d-1f0b04d7ddd6.roa
File:                     bd89449d-0353-3c54-873d-1f0b04d7ddd6.roa (raw, json)
Hash identifier:          yGD8sP3mb9y1X5FfYqJeeLPaCOGS/oue9CfihoIMULc=
Subject key identifier:   B3:52:16:6C:60:2A:F1:0F:5A:5A:81:1B:02:95:2C:0F:F3:FF:99:FB
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F4328584EA794D8656174CDC0FC0CF000
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/bd89449d-0353-3c54-873d-1f0b04d7ddd6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396185
IP address blocks:        74.127.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:d8:65:61:74:cd:c0:fc:0c:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ed43e080-6610-424c-9f65-1618e8498e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:9f:fc:1e:29:09:97:5e:30:b0:93:59:d9:23:
                    bf:90:05:f6:81:9f:b4:1b:a5:47:d0:b2:d0:9f:bf:
                    36:b3:d5:dd:68:19:20:e9:b8:1a:39:8b:22:e2:1b:
                    52:32:9d:61:79:b4:42:3a:1e:c6:de:ab:39:23:fe:
                    2a:14:0a:d2:63:e3:0f:32:23:ad:39:7f:2c:2f:72:
                    05:63:90:5c:7a:04:ff:2c:bc:5e:e9:7d:32:52:f0:
                    57:90:19:a5:83:6f:d2:dc:49:1b:dc:0f:8d:a3:80:
                    ad:f9:60:f6:54:8b:af:99:a6:f3:14:a8:8a:16:47:
                    3b:a4:13:1a:de:e0:c4:01:6c:f3:e6:76:3a:f0:95:
                    d7:e8:ec:15:a4:d8:da:00:8a:9a:04:df:c3:8f:9f:
                    fe:4c:6e:66:d3:9a:03:f7:e7:34:73:c3:17:2b:03:
                    a9:bd:0a:3b:da:a9:2e:e7:df:8d:32:ca:77:c9:bf:
                    0a:fe:f3:bf:07:ea:cf:ae:0c:43:25:c4:73:1a:21:
                    80:79:ab:4a:18:68:59:da:44:8c:75:8e:4f:2f:b6:
                    ae:97:a8:96:d8:21:cf:e2:41:ee:d9:44:f9:58:1e:
                    55:14:e6:81:7f:45:f5:dd:ee:e0:0a:c0:00:e8:0f:
                    51:c1:d1:c9:7b:87:c7:14:a9:03:76:3c:fa:28:65:
                    5e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:52:16:6C:60:2A:F1:0F:5A:5A:81:1B:02:95:2C:0F:F3:FF:99:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/bd89449d-0353-3c54-873d-1f0b04d7ddd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.127.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:fe:ed:30:74:86:c3:9a:07:c0:7f:b1:91:e7:53:7e:71:9b:
         e6:2a:19:b8:97:23:24:a5:8a:30:38:28:47:0a:bf:26:1d:22:
         69:33:b0:3c:f8:d7:8a:a4:e3:81:8f:ab:f8:50:a7:22:0f:c4:
         f7:f6:23:f7:ed:c1:c6:92:fe:26:e5:ed:cf:b3:49:86:d6:ea:
         76:22:d2:ad:31:6d:27:d1:0a:5c:59:96:80:5b:f7:4f:f8:8d:
         a6:87:b0:f5:53:9c:ce:2d:38:b1:0c:2a:7d:30:0e:c4:eb:eb:
         9b:0a:07:61:68:0f:57:5e:a0:73:8f:bb:b1:7a:a2:6e:b3:7f:
         85:5c:f6:af:26:fa:ea:d2:9b:6d:20:aa:77:3f:eb:6f:19:75:
         52:ae:83:43:8c:40:ed:09:5c:c6:9f:92:93:60:b8:92:dc:9b:
         7f:da:21:76:3c:fa:c1:7f:a6:61:32:5e:14:03:ff:3c:f3:43:
         6a:b4:14:0d:fc:e8:2e:54:92:8d:77:f5:c6:d6:e4:db:b0:a0:
         d1:b0:3e:88:ce:c3:7d:05:63:55:13:9b:67:a8:a0:7e:26:02:
         38:bd:f8:62:91:3a:79:4d:07:ae:bb:2a:d0:b1:c7:72:b9:4e:
         bd:ab:60:10:73:9a:c3:5c:11:7b:1b:27:4d:75:3d:46:9e:a7:
         dc:dd:fb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:43:07 2026 by rpki-client