Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/1bbbc362-e40a-3b08-b948-a507f3c68bc4.roa
File:                     1bbbc362-e40a-3b08-b948-a507f3c68bc4.roa (raw, json)
Hash identifier:          UdiszNW7v9Ot/FAvMbDIPOn5pyybfJRFHEtgoFg0Kpw=
Subject key identifier:   E5:22:20:4E:08:52:95:20:93:48:4F:B4:C8:69:09:F1:4C:15:7E:65
Certificate issuer:       /CN=8c1d3b57-4da4-4452-8b5e-9b5248494b89
Certificate serial:       010D0C9F4328584EED5216DD76A5F0DF61158DE0
Authority key identifier: 46:EA:F7:B9:84:1B:13:7C:CD:CC:1F:DD:91:4A:23:8D:30:F9:29:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/1bbbc362-e40a-3b08-b948-a507f3c68bc4.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     13536
IP address blocks:        74.205.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:16:dd:76:a5:f0:df:61:15:8d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c1d3b57-4da4-4452-8b5e-9b5248494b89
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=1f9c864a-1606-4794-9d8a-539d57d8e612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bb:f9:fc:ae:4b:3a:1b:db:e9:bc:da:f7:1e:
                    78:73:e8:c3:da:c4:d0:5f:fa:a5:bb:5c:68:d6:91:
                    2c:3f:59:97:96:6e:db:b7:40:9e:82:aa:af:81:66:
                    70:96:1d:25:9a:86:cb:62:20:ae:f6:01:ec:76:c2:
                    f1:42:39:7c:a1:f3:8a:3e:b4:21:14:18:90:75:24:
                    9f:cf:c3:61:df:02:d1:2e:e7:f8:3d:9f:c3:3d:a3:
                    6c:59:e8:02:61:b6:36:05:b8:b5:6f:4b:81:2b:eb:
                    82:38:b6:bb:6f:82:b9:5d:e9:00:2a:9b:cb:58:04:
                    b0:76:ae:f4:64:a3:64:1f:40:62:0d:4d:69:b1:93:
                    fb:b3:3e:31:84:76:0e:61:51:f2:c3:84:2b:f3:15:
                    ae:b2:78:79:c7:81:53:3f:ce:b3:52:83:c9:9b:bf:
                    49:e2:67:e2:91:39:eb:d5:6e:c0:0d:76:e0:cc:2a:
                    c5:8d:67:9a:ee:ee:9e:96:80:7a:04:5a:ea:f2:79:
                    69:7c:fc:57:d7:1f:36:c1:12:d5:62:7d:81:24:b8:
                    d1:c9:fa:ab:7f:d9:13:8d:34:d0:9a:68:79:23:45:
                    0a:55:ca:7d:1b:45:9b:92:29:d4:12:69:51:b2:5e:
                    56:42:cb:f6:b5:ca:cb:ba:57:22:ae:28:a7:a8:17:
                    f8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:22:20:4E:08:52:95:20:93:48:4F:B4:C8:69:09:F1:4C:15:7E:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/1bbbc362-e40a-3b08-b948-a507f3c68bc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl

            X509v3 Authority Key Identifier:
                keyid:46:EA:F7:B9:84:1B:13:7C:CD:CC:1F:DD:91:4A:23:8D:30:F9:29:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.205.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:d8:a3:ed:9a:6f:05:1b:d1:8a:e4:68:66:da:9f:08:b1:91:
         ad:a1:b0:52:72:36:7c:4f:4a:43:d4:51:31:6e:a5:9e:76:ec:
         29:58:76:64:ab:40:6b:ff:79:b8:72:15:27:99:e6:df:13:b0:
         ce:d7:ba:f4:bc:49:70:f2:82:47:0c:17:da:80:2b:5c:c1:f8:
         b0:14:78:1c:97:70:67:91:70:f4:10:9d:c1:22:70:bb:60:ac:
         eb:24:5e:4d:40:a7:d2:d4:c4:da:7e:16:3a:9a:20:82:c3:00:
         30:25:42:64:e7:79:0c:6e:7a:20:ae:88:06:e0:aa:b6:4b:31:
         21:5c:16:3e:38:00:05:82:d2:a0:7b:32:79:27:8b:6e:80:ba:
         b3:76:2f:44:70:d6:30:7b:02:e4:6e:dd:d0:c0:69:e5:e6:dd:
         d0:3d:93:e8:64:db:78:0b:d0:17:11:38:ef:07:fa:6a:39:73:
         85:9b:be:b9:94:95:83:d0:a9:43:7a:23:54:b8:20:53:d0:20:
         b4:8d:0c:cf:e4:0b:58:93:c0:fd:01:f1:18:43:32:b6:f5:31:
         2a:31:eb:59:17:8c:13:4d:5f:f4:b8:de:3f:a2:38:49:71:b9:
         ff:27:80:2b:a6:74:b2:87:01:7c:95:7c:29:fd:3f:28:f4:27:
         3b:a8:9e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:02:29 2026 by rpki-client