Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7e7f63b-ecb4-3a72-aaa7-897d0575830d.roa
File:                     a7e7f63b-ecb4-3a72-aaa7-897d0575830d.roa (raw, json)
Hash identifier:          9QsFVlwe4FgXX4nl2H3S8DaconaPHwJOz54dA5vdib8=
Subject key identifier:   65:7E:94:0E:BE:79:C7:7F:0D:C8:8A:6F:E9:1C:44:48:00:1F:8C:BA
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584CEBC2341B264B1A4987944640
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7e7f63b-ecb4-3a72-aaa7-897d0575830d.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     27338
IP address blocks:        74.8.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:34:1b:26:4b:1a:49:87:94:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=865ffcbb-2631-4969-ba31-2658c556f502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a6:e0:60:ab:4c:61:c4:7a:6f:00:67:88:6e:
                    9b:15:f5:8c:72:ff:0b:ad:7d:01:b9:62:d9:6b:9f:
                    b3:58:4d:2f:4d:6e:fd:71:2f:9b:6b:9a:8e:49:b7:
                    a0:36:c0:fc:5e:e1:8b:0b:b6:c1:4f:58:0f:27:5d:
                    34:8a:3c:61:4e:2e:a1:a0:a0:5b:7f:bc:c4:41:ac:
                    02:09:d7:15:cf:d6:46:f7:6f:77:62:19:0a:ba:2b:
                    e8:47:c0:e0:e1:cc:a2:de:3b:94:34:79:6f:4d:ed:
                    4b:79:1a:9d:22:78:bb:56:a9:b3:6c:76:30:20:d2:
                    b8:35:7b:6d:80:a7:dc:df:bc:c4:8d:1e:69:7c:c7:
                    82:b0:08:91:91:00:51:6b:62:15:6d:22:50:2d:68:
                    a1:cb:07:10:d8:a5:9d:16:01:52:fa:4d:4c:2f:e2:
                    3d:01:e0:cd:fc:b6:8d:52:4e:3d:20:74:b9:cd:5b:
                    ad:54:b3:08:00:1b:63:c0:9b:8c:ca:96:b4:47:5a:
                    c3:bf:15:89:21:da:41:07:54:1b:95:f7:ee:30:ba:
                    4a:46:5b:9a:a2:ff:8d:8d:8b:f4:fa:11:b8:a3:4f:
                    0b:a4:27:30:35:60:da:e4:6b:e3:3b:0b:36:df:df:
                    34:7b:38:2c:c5:dc:7d:14:8e:da:e4:9d:a8:67:ba:
                    26:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7E:94:0E:BE:79:C7:7F:0D:C8:8A:6F:E9:1C:44:48:00:1F:8C:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7e7f63b-ecb4-3a72-aaa7-897d0575830d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.8.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:96:ec:46:32:8a:e1:9c:3e:b1:f2:dd:6b:dd:87:34:8c:51:
         67:ca:a5:bd:a4:ec:c3:a9:a5:93:1d:6c:13:ed:76:ea:8d:d9:
         c2:0a:67:4a:4f:89:a4:1c:09:e0:9f:7a:b9:82:03:1e:99:83:
         66:cb:16:1e:15:fb:5f:0e:f3:3e:34:49:38:bb:28:cf:d9:40:
         a4:7e:b4:ef:64:b2:ed:27:56:70:2f:9b:d2:8b:b7:4b:c4:9b:
         55:ce:35:9d:f4:e9:03:29:6a:cb:c4:92:04:ae:02:df:3b:4b:
         b3:6d:29:d5:f8:74:10:6b:21:05:cf:e6:e2:bf:6a:20:1a:25:
         b2:e4:af:07:ce:21:e4:23:a2:d7:00:6c:0f:cb:80:29:30:6c:
         e4:ab:f0:75:bb:49:3a:28:a5:ab:c5:48:af:8d:5e:31:c0:d6:
         07:ae:02:91:bc:a6:5b:df:35:a1:b1:5d:8b:b2:31:b5:72:5e:
         2e:29:62:79:53:57:e8:c6:df:aa:6c:3f:65:d3:9a:61:32:98:
         33:c3:45:69:0e:17:69:8b:20:2e:5c:4c:13:c6:ba:24:8e:0d:
         41:fe:89:f3:65:77:78:a1:30:2b:c2:fc:ac:74:0d:77:dc:42:
         92:8b:30:4d:38:ec:ec:ca:06:d4:9f:1d:bb:ec:ec:b4:dc:df:
         c6:ba:48:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:30:05 2026 by rpki-client