Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f5a69b88-2f63-3932-878a-4bf4cdc67472.roa
File:                     f5a69b88-2f63-3932-878a-4bf4cdc67472.roa (raw, json)
Hash identifier:          tk8smEpENyzuERqrA4vA37vR3GGpmqv64NSpWprPfiU=
Subject key identifier:   F9:02:20:3E:26:87:C7:88:B7:11:D5:C8:DF:73:6D:B4:CB:7B:1A:2C
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F4328584D0CEE365EAB26C2596071F180
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f5a69b88-2f63-3932-878a-4bf4cdc67472.roa
Signing time:             Tue 03 Mar 2026 23:11:15 +0000
ROA not before:           Tue 03 Mar 2026 23:11:15 +0000
ROA not after:            Mon 01 Jun 2026 22:11:15 +0000
asID:                     53959
IP address blocks:        74.127.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:ee:36:5e:ab:26:c2:59:60:71:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: Mar  3 23:11:15 2026 GMT
            Not After : Jun  1 22:11:15 2026 GMT
        Subject: CN=c9778e5d-8e90-42c8-86d5-078b43063376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:21:1d:b4:11:f4:fc:6c:b7:39:0a:72:f2:84:
                    b6:86:09:d9:47:1d:84:ae:a9:92:7c:0b:bf:c8:d1:
                    3c:69:29:dc:58:92:f4:93:ca:6a:1d:40:c8:a9:b1:
                    00:2a:65:bf:98:12:0f:5d:50:cc:6c:2a:18:c2:91:
                    4c:0f:46:c1:f9:70:94:04:7f:29:a2:00:87:fc:7b:
                    ce:48:1b:9a:88:10:90:2a:1f:5e:36:0a:24:3e:10:
                    df:75:65:b4:d5:f1:de:87:fa:8f:30:21:ef:4a:1e:
                    16:54:07:9d:e4:3d:49:e4:99:1a:4f:70:ce:53:5c:
                    aa:2f:3a:e1:c2:fb:8d:b4:60:a1:ab:e4:c6:7b:bd:
                    10:11:7e:ef:88:ad:79:f3:6f:8a:18:70:08:f6:c2:
                    f9:44:ae:5a:9a:d8:e1:f2:10:12:8b:cd:b6:db:05:
                    4b:d9:33:a8:3e:d5:c9:19:f1:36:06:97:c7:33:c7:
                    35:a5:44:b8:f4:34:db:71:1c:19:2c:5e:93:97:61:
                    b9:32:7c:56:61:aa:01:26:13:58:20:2a:25:bb:21:
                    57:32:a9:0e:ff:1d:fe:9c:54:08:0c:0e:91:a4:bc:
                    30:a4:85:1d:5d:bd:72:27:39:c1:9d:45:c3:8f:7f:
                    bc:01:35:03:9a:4a:56:18:f1:ac:75:ba:41:14:58:
                    41:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:02:20:3E:26:87:C7:88:B7:11:D5:C8:DF:73:6D:B4:CB:7B:1A:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f5a69b88-2f63-3932-878a-4bf4cdc67472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.127.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:37:13:05:66:4b:9d:8c:87:35:c9:2d:f5:fe:64:26:bc:9d:
         50:98:11:8b:59:c2:ec:7e:b3:b3:0d:fc:b9:89:1d:f0:8c:85:
         2a:a7:60:85:17:db:49:e7:99:ae:23:7c:56:65:85:0b:9b:75:
         ba:ed:e9:13:17:4e:f5:9d:c1:8d:6d:9c:f5:c7:6d:62:a0:77:
         7b:60:ed:ec:4c:e2:c4:df:b3:5c:6c:f8:d9:f9:d6:a9:84:57:
         bd:0c:d0:38:26:0c:ea:02:09:c0:fa:05:d9:58:ac:30:22:0a:
         c1:8d:96:f8:d2:5e:93:d2:64:64:b1:23:4b:e5:e1:17:8c:b9:
         e9:59:cb:0f:e4:16:bf:9a:57:fa:12:7f:f3:eb:f4:7d:e3:7e:
         9a:f7:0b:ad:b8:ab:9d:7b:3d:9c:eb:4f:4f:e4:a6:e4:1b:fb:
         7f:c6:b8:8b:c2:55:91:23:0c:bf:10:9b:c9:47:e6:3d:85:1b:
         b3:42:46:fb:5b:58:31:d2:e5:75:7f:86:4b:75:e1:23:03:d3:
         c9:e2:e9:3c:67:cf:77:88:c4:1a:c4:9c:87:27:75:e2:97:a7:
         2b:a6:31:85:15:44:75:ff:d5:be:65:78:33:52:e0:51:0b:7c:
         25:95:66:e1:b1:af:e7:1d:c5:f0:3d:55:3c:2d:2c:66:ae:04:
         85:95:e4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 20:46:20 2026 by rpki-client