Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af260bd0-8636-3259-a427-f13f89c8c476.roa
File:                     af260bd0-8636-3259-a427-f13f89c8c476.roa (raw, json)
Hash identifier:          7sl4Yi5gHIU6Mo8Bv5r5KrZgcAc2bWJwxfk3kLL+g7g=
Subject key identifier:   38:3C:5F:BE:E6:4A:05:15:A6:18:F2:F8:51:85:1A:94:C1:06:38:EB
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584EA787254AC1985235473680C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af260bd0-8636-3259-a427-f13f89c8c476.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15290
IP address blocks:        74.216.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:25:4a:c1:98:52:35:47:36:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b7a3b9e6-8307-471c-a36a-2787d80f1405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:23:c7:60:b3:30:e5:a4:ea:ef:be:e7:70:3d:
                    84:56:3a:9f:0c:08:60:fc:2b:2f:f8:f6:8a:83:7b:
                    9d:50:01:00:cc:c9:e8:1e:cf:24:91:c2:7b:1b:42:
                    5a:90:7c:7c:72:9d:9a:25:da:67:df:4b:4c:96:ac:
                    aa:9b:4c:9a:69:92:4b:5c:e9:ba:74:10:3a:43:8f:
                    9d:cd:32:ce:8d:8c:44:39:80:8a:e4:f2:70:b6:76:
                    9a:22:e4:36:88:ce:62:3f:15:80:d9:7a:12:87:8b:
                    1a:8f:80:1a:fe:17:89:a7:78:ca:c4:e5:82:bf:1f:
                    75:33:b3:aa:a9:60:4a:c0:a1:bc:5e:70:27:fe:88:
                    dc:8c:bc:9f:86:bb:e1:43:cd:c7:96:49:47:75:a9:
                    2b:83:19:7a:fe:44:25:4b:fb:c7:d3:99:b4:5a:1e:
                    8e:61:ea:13:c1:eb:3e:d8:60:bc:d1:58:2a:84:65:
                    f4:dc:f0:93:8e:f4:d7:f4:c3:c9:b6:ee:ae:bc:a1:
                    9d:e6:f6:50:04:eb:3c:d9:73:35:54:b3:c6:5d:49:
                    40:66:a9:89:6c:2f:9c:39:6f:c9:d5:5a:a8:c3:1c:
                    93:35:97:13:97:de:b5:67:34:b6:72:f8:26:0f:5c:
                    96:19:f9:4c:b7:92:1c:3d:d1:b7:00:9d:70:34:eb:
                    c9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3C:5F:BE:E6:4A:05:15:A6:18:F2:F8:51:85:1A:94:C1:06:38:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af260bd0-8636-3259-a427-f13f89c8c476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.216.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:4a:eb:ef:be:30:80:f2:d9:27:4e:8c:a2:04:26:f2:46:fb:
         b9:b6:80:c4:17:c2:4b:ab:83:a5:93:ae:ec:1e:17:d8:71:69:
         0f:6f:b4:b6:07:b6:dd:29:13:58:d7:65:f6:c0:d7:be:31:81:
         24:0a:89:6f:e2:58:32:2a:b3:51:62:d2:ba:93:d8:63:b3:a5:
         dc:5f:03:39:bc:8e:5c:c7:f5:f2:78:60:2b:de:bb:1f:bf:61:
         9c:34:41:a2:cc:e9:b0:fe:45:d9:38:99:d0:a4:b7:3e:02:58:
         f3:88:3e:a5:4b:44:4d:76:21:7c:3b:68:4c:2e:2d:a2:be:48:
         37:e5:98:51:b2:6b:ae:eb:c4:0d:e8:fa:e1:30:49:cf:d0:41:
         23:d4:69:4a:74:b3:c3:b8:ea:94:7e:7b:c0:b8:c3:d0:e5:e0:
         a9:82:6f:17:a9:74:93:41:ff:17:56:e1:15:e7:4a:62:52:8a:
         c6:48:30:06:62:d4:0e:69:4d:e4:93:26:ef:4c:67:71:b4:3c:
         34:df:e1:0b:fe:6b:41:0d:da:1a:b9:81:3f:7d:53:38:0e:f4:
         28:96:88:0d:3e:ce:65:32:37:4d:54:59:b5:f9:81:61:ad:8a:
         78:68:6b:62:cb:05:5f:da:fb:00:e4:bf:28:91:54:ae:42:0e:
         2f:ee:fe:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 12:31:11 2026 by rpki-client