Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa
File:                     de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa (raw, json)
Hash identifier:          GSHZHtj53clF0jAAJJTUbg/qq2zGDKSf1ymYGV9ci68=
Subject key identifier:   71:D5:21:09:13:D3:02:D8:39:4B:E4:EE:CC:06:C5:80:BF:E2:D7:23
Certificate issuer:       /CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11
Certificate serial:       010D0C9F4328584EA788266E1376035DD54C9060
Authority key identifier: 55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6939
IP address blocks:        74.121.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 11 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:26:6e:13:76:03:5d:d5:4c:90:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=80b203f8-8ed0-4a77-b359-4bef50e03050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:87:d3:67:bc:75:97:77:be:5e:4c:c5:a2:d3:
                    d6:59:e6:35:c8:13:40:7d:46:4e:7b:7f:82:5d:50:
                    2b:61:cf:14:d3:ed:a5:ea:45:01:9e:bd:3d:ed:83:
                    38:74:60:b1:97:f7:bc:28:ef:00:da:4d:2c:16:dd:
                    c7:f9:28:d0:ec:e3:90:5e:3a:7f:8c:80:c0:87:b9:
                    67:bb:46:3d:db:8d:18:65:18:82:3f:98:b6:83:9a:
                    81:c5:54:e3:4e:44:8d:14:3a:dd:31:b0:fe:c5:4d:
                    a7:6f:d5:3d:c5:cf:64:c8:e0:6c:80:5d:29:51:8d:
                    28:e6:9c:9f:c5:ec:7a:db:2a:26:65:96:9c:0b:42:
                    17:89:49:54:65:3d:67:b9:c2:3c:f1:1b:bd:f5:52:
                    6f:10:4b:f1:28:61:78:a0:03:da:92:43:d4:04:8f:
                    b9:76:3f:14:6a:b5:db:c4:a5:f4:cb:09:a0:e8:5d:
                    ea:62:cb:c4:82:28:03:9e:31:f0:81:4b:a9:c2:26:
                    9a:73:9b:f1:8c:46:0e:64:a9:d4:92:f6:75:a7:07:
                    84:68:cc:35:e6:ae:ba:79:27:7b:f4:81:1e:9b:d2:
                    88:23:47:96:f6:c6:c6:f2:64:3b:e3:1a:b1:9a:f6:
                    99:45:c2:22:2f:3b:6e:7f:33:dc:54:5e:22:54:09:
                    f2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D5:21:09:13:D3:02:D8:39:4B:E4:EE:CC:06:C5:80:BF:E2:D7:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.crl

            X509v3 Authority Key Identifier:
                keyid:55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:e5:9b:b6:16:da:d9:c5:9a:2c:99:bd:10:ad:b6:bb:72:54:
         d9:e6:b8:7a:cd:76:26:4d:62:46:1e:ca:cf:a5:1d:7d:24:9c:
         c4:2d:e6:c1:46:db:23:9a:06:53:f8:28:e2:59:08:10:cd:94:
         8e:98:32:cb:00:e2:8c:bf:93:82:b4:8a:6c:1e:a4:96:13:93:
         66:cb:93:8b:77:a3:45:ea:d8:a1:92:5c:59:de:da:dc:c5:83:
         fe:45:7f:13:d2:0b:ea:f3:74:33:28:ea:05:28:f0:ce:71:9c:
         45:ff:7e:b0:b7:28:84:21:de:50:4b:e1:b7:d0:54:0d:c6:db:
         a9:88:2b:cb:d7:30:26:34:8b:6e:df:e9:22:57:52:07:35:9d:
         28:59:fc:63:fa:f1:83:f4:a3:8d:e4:2a:3d:7b:f9:cf:b6:2d:
         62:90:05:ac:a8:c4:f2:86:1a:67:d8:ee:11:4d:1d:e4:72:f2:
         e9:74:8b:66:b8:0c:6d:17:b0:c7:9e:61:0b:65:54:43:5f:af:
         cf:27:13:80:a8:bd:70:5c:37:e5:8e:75:ea:9d:44:41:c3:94:
         bf:2c:9b:5e:1c:4a:58:0c:a1:0c:78:2b:fa:82:84:b6:48:11:
         fa:ee:46:a9:d4:22:3b:50:ae:aa:72:45:cf:d2:a8:e1:52:b6:
         39:bb:88:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 10:17:24 2026 by rpki-client