Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/6e3468c4-90ed-3c55-9272-bfaed0242e22.roa
File:                     6e3468c4-90ed-3c55-9272-bfaed0242e22.roa (raw, json)
Hash identifier:          yXi9WpkeQKfvZ8EFbaWb2rjq6jfhqHrMLwXNK79RFyo=
Subject key identifier:   FF:B9:76:F8:9F:96:98:07:7E:B0:37:EC:05:44:99:A4:8E:18:08:C1
Certificate issuer:       /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial:       010D0C9F4328584DADAAE17D8D0F8C7EF8BBEB80
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/6e3468c4-90ed-3c55-9272-bfaed0242e22.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     19229
IP address blocks:        171.74.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:e1:7d:8d:0f:8c:7e:f8:bb:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=6d198ed0-eed1-48bc-9537-355a35e0e7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a5:75:99:a4:74:f0:3f:32:3e:51:4a:b4:99:
                    56:ab:c4:16:80:97:fb:f3:f7:62:c8:87:96:40:c3:
                    8d:69:02:bd:17:f8:1b:92:64:f9:5d:9d:24:43:8b:
                    49:41:eb:95:d6:9c:fe:23:59:a0:53:a5:e7:49:74:
                    8e:d2:13:9c:eb:d1:c3:8a:d7:16:40:b1:b9:22:ae:
                    62:e5:92:cd:6c:87:19:7e:49:9c:71:79:ba:36:04:
                    c1:b2:b7:2d:02:ac:4a:69:94:09:57:e1:a2:37:2d:
                    36:44:ec:58:55:5b:53:17:b4:65:49:0a:ac:da:67:
                    a4:ac:a7:f9:64:fb:ae:c7:f5:f0:65:a1:57:0a:e2:
                    47:9c:58:0a:37:8e:29:fb:8a:6f:15:ea:02:86:47:
                    ec:4f:6a:0c:9f:e6:78:b5:df:f9:c8:71:50:8a:e9:
                    86:c0:c6:4b:38:ab:58:8b:a3:c3:85:79:88:af:ae:
                    41:17:52:a4:87:43:c0:9c:1f:e7:08:a5:25:26:71:
                    f1:4b:d8:53:c3:07:db:15:dc:a0:ea:d4:de:3a:c3:
                    90:8c:7f:40:a8:9f:94:dd:7e:38:54:28:28:44:7d:
                    7b:0a:7a:76:42:67:78:12:50:28:b4:9c:95:a8:a8:
                    79:d0:6c:6d:f8:0f:c1:47:9c:ac:da:f7:e7:6d:53:
                    3c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B9:76:F8:9F:96:98:07:7E:B0:37:EC:05:44:99:A4:8E:18:08:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/6e3468c4-90ed-3c55-9272-bfaed0242e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl

            X509v3 Authority Key Identifier:
                keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.74.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:38:5f:f1:e4:f3:f0:1f:63:f3:99:19:d1:05:94:6d:52:63:
         a2:29:b1:05:de:1d:e6:9e:61:d9:6c:79:1a:cd:d1:c0:ca:04:
         f2:5a:7e:84:c9:bc:e0:52:c0:7b:72:72:3d:e7:97:51:cd:ae:
         c7:ff:b1:bd:1f:a2:da:05:9e:00:94:19:e9:23:ca:a2:e1:88:
         4a:b3:d6:c1:ed:67:fb:b1:17:81:6a:d4:59:f0:3f:7c:00:6a:
         79:01:09:0d:47:70:e9:63:d1:27:02:e6:7d:20:c0:e4:a0:11:
         fb:50:ef:21:cd:a1:bc:87:2e:1e:71:33:8c:e8:b2:09:20:a8:
         70:48:80:9c:80:bc:ec:2e:d1:6c:6e:26:7e:97:55:ce:c9:bc:
         70:55:0e:86:52:9c:48:19:2b:1a:30:f0:cb:6b:a9:8f:ca:32:
         8e:c0:d3:25:77:a1:ea:27:e9:c7:92:db:3d:4b:ac:d2:03:15:
         72:48:43:0e:09:44:54:3d:25:34:a4:da:92:96:9b:8b:c4:4a:
         dd:2d:84:04:e1:5e:e8:62:2b:3c:17:7d:e7:00:d2:5b:e8:54:
         74:69:90:39:aa:c6:52:8f:e2:54:00:de:64:ba:45:f5:79:9f:
         7c:f5:48:cf:a4:b2:ad:4f:e3:7b:41:13:b2:f5:ed:85:dd:92:
         4d:cb:cf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:47:43 2026 by rpki-client