Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa
File:                     bdf6a7d1-a324-35af-8414-d2ae101242c2.roa (raw, json)
Hash identifier:          Lvot73W3w+Z1dV5KGPqCqCziZF0aIatkS+El1XddX54=
Subject key identifier:   EA:43:06:94:F4:44:83:77:86:F7:9B:3C:32:A2:8A:01:0A:D0:C7:8F
Certificate issuer:       /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
Certificate serial:       010D0C9F4328584EC7A1D2132C4D782E32800B58
Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     19528
IP address blocks:        74.209.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:d2:13:2c:4d:78:2e:32:80:0b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=fe230655-2e79-4a82-8e9a-799dd08477d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d9:53:1b:b7:2f:f4:b3:d1:9d:e7:ab:13:24:
                    5d:26:b2:32:22:f2:b2:ae:3b:06:e7:c8:6b:ee:2d:
                    78:9e:bf:8b:72:f4:f9:4d:9c:ee:22:c9:53:4a:76:
                    9b:a2:e3:3a:2c:1e:0b:26:e1:c0:16:28:c8:cb:d0:
                    34:3a:ab:fc:3d:77:a7:bb:8b:93:38:e4:b7:73:90:
                    41:99:b0:80:26:52:11:13:5e:ce:ec:8d:33:da:4b:
                    d1:5e:eb:17:fe:04:1c:28:1e:4a:d7:20:33:80:20:
                    ee:6c:72:4e:5c:5b:32:c9:3c:60:65:b6:a4:a6:df:
                    18:b4:8a:14:21:8f:10:e6:97:38:7e:6a:7a:49:70:
                    33:eb:14:1b:97:00:27:24:9f:b3:77:39:76:b9:d3:
                    eb:c4:dd:77:c0:53:9b:1a:fc:22:ba:77:bd:0a:ca:
                    58:69:24:bd:a1:55:06:d3:68:85:8f:59:71:48:cb:
                    bd:4b:de:c5:dc:7d:d0:fb:7c:af:08:9f:d0:0c:c2:
                    49:2b:db:22:c7:b9:e4:54:e9:0c:35:86:bb:18:8d:
                    a5:02:1f:a4:6a:88:20:83:62:ea:c8:fa:8c:c6:c4:
                    b2:3f:67:bc:aa:c1:2f:d8:61:73:6a:99:0e:58:88:
                    4d:a4:a2:53:ef:23:ca:d8:d6:fb:8b:8a:09:92:d2:
                    95:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:43:06:94:F4:44:83:77:86:F7:9B:3C:32:A2:8A:01:0A:D0:C7:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl

            X509v3 Authority Key Identifier:
                keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.209.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:5d:83:fa:b8:85:74:d3:6e:27:2c:59:ca:42:57:cd:38:ed:
         e9:3e:36:ee:80:e4:ad:c5:de:56:e0:12:e5:db:3a:07:5a:21:
         69:04:3c:37:64:96:4b:5d:af:1e:98:57:61:79:62:78:80:fb:
         0a:04:79:d2:b7:01:7e:f7:08:56:5b:e2:d6:51:d0:71:8f:78:
         13:06:e7:43:50:b1:d6:3c:b1:73:fc:a9:c3:f6:ff:9e:29:7f:
         08:69:44:f4:d6:d1:78:bb:83:e0:1d:a6:02:3c:18:41:2a:9e:
         4e:4b:6a:cd:76:de:98:0f:f5:6a:29:8f:4c:d9:29:52:61:a0:
         13:4b:d6:bc:4b:88:5f:a3:e7:ce:15:53:99:56:91:13:37:0e:
         42:98:9d:f9:6c:9c:ea:68:20:a1:e6:5a:9d:43:12:fe:92:05:
         af:f6:2b:55:ba:4a:e1:b6:05:ff:c2:c6:55:f8:d3:f1:3b:97:
         cf:f1:6e:ef:e8:21:d7:5b:3e:73:b3:eb:2a:29:71:2b:3d:b0:
         db:0f:5e:52:af:f4:54:9f:53:30:f4:74:59:6f:7b:91:66:2f:
         3d:c8:57:63:39:ad:18:62:54:5f:43:81:c8:88:83:70:29:d0:
         2a:78:92:a2:d7:c4:59:1b:a6:05:0f:de:06:2d:9b:dc:01:a8:
         89:2b:61:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:04:04 2026 by rpki-client