Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/629b83c0-7cd9-47f5-b48c-a59884f9661d/d99c6542-f200-34d7-82d9-7cf70a617cf8.roa
File:                     d99c6542-f200-34d7-82d9-7cf70a617cf8.roa (raw, json)
Hash identifier:          2oy9SGZqZ6wcYCL77NdABDz8NQDOnh9gXEN+5Mh77ic=
Subject key identifier:   C9:F5:47:0D:CA:31:AC:BC:98:6A:4E:C9:89:0E:21:9D:8E:1A:AA:E3
Certificate issuer:       /CN=629b83c0-7cd9-47f5-b48c-a59884f9661d
Certificate serial:       010D0C9F4328584ED62E5629BA795D022216D080
Authority key identifier: 07:86:0A:48:9E:B5:D0:C6:7C:0C:70:26:75:12:81:4C:8B:1E:11:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/629b83c0-7cd9-47f5-b48c-a59884f9661d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/629b83c0-7cd9-47f5-b48c-a59884f9661d/d99c6542-f200-34d7-82d9-7cf70a617cf8.roa
Signing time:             Fri 14 Aug 2026 18:04:52 +0000
ROA not before:           Fri 14 Aug 2026 18:04:52 +0000
ROA not after:            Thu 12 Nov 2026 19:04:52 +0000
asID:                     53289
IP address blocks:        74.121.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/629b83c0-7cd9-47f5-b48c-a59884f9661d/629b83c0-7cd9-47f5-b48c-a59884f9661d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/629b83c0-7cd9-47f5-b48c-a59884f9661d/629b83c0-7cd9-47f5-b48c-a59884f9661d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/629b83c0-7cd9-47f5-b48c-a59884f9661d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d6:2e:56:29:ba:79:5d:02:22:16:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=629b83c0-7cd9-47f5-b48c-a59884f9661d
        Validity
            Not Before: Aug 14 18:04:52 2026 GMT
            Not After : Nov 12 19:04:52 2026 GMT
        Subject: CN=d04f50d1-36f3-4a3a-9f4e-26a246dba0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0b:50:65:84:38:e9:30:26:b7:02:26:b4:3f:
                    bc:9a:e5:a7:57:70:7e:6b:12:78:a1:57:07:6b:f1:
                    81:c5:b0:57:be:2e:a9:1e:cd:47:66:d9:ab:9a:51:
                    1b:5c:58:d2:84:25:4d:79:76:7e:04:f3:18:68:53:
                    5b:f8:26:c9:a1:34:69:99:30:40:c0:76:34:4e:b9:
                    61:33:a7:a1:6e:5d:97:16:89:18:b8:1f:9f:ef:ed:
                    39:68:60:a0:ff:cf:58:e1:3c:fd:f3:14:1a:41:46:
                    51:6b:3e:62:f5:76:b6:c4:91:8f:3f:19:b7:e9:3f:
                    78:b6:f6:40:28:c0:a2:e8:9a:87:3f:36:7e:7b:07:
                    de:05:c7:5d:12:ab:c4:65:88:aa:a1:c1:fe:db:40:
                    54:09:e5:28:c9:6e:54:ce:0a:62:27:63:f4:c0:8d:
                    da:91:7e:30:da:b4:df:11:3a:59:d2:47:6f:c6:36:
                    05:54:a6:e8:57:de:23:bd:ca:0a:af:e5:02:92:47:
                    22:16:ed:b5:78:4c:9a:72:af:ba:f4:a1:40:3d:85:
                    f1:e0:ac:f1:ad:a8:6b:0f:69:41:14:62:d4:09:16:
                    dd:f2:e4:13:d9:03:5e:5c:3f:43:e1:0f:c6:9c:a6:
                    d0:46:2e:e4:66:e4:81:7f:97:a3:ba:ba:85:91:5f:
                    73:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F5:47:0D:CA:31:AC:BC:98:6A:4E:C9:89:0E:21:9D:8E:1A:AA:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/629b83c0-7cd9-47f5-b48c-a59884f9661d/d99c6542-f200-34d7-82d9-7cf70a617cf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/629b83c0-7cd9-47f5-b48c-a59884f9661d/629b83c0-7cd9-47f5-b48c-a59884f9661d.crl

            X509v3 Authority Key Identifier:
                keyid:07:86:0A:48:9E:B5:D0:C6:7C:0C:70:26:75:12:81:4C:8B:1E:11:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/629b83c0-7cd9-47f5-b48c-a59884f9661d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b3:58:f5:42:8b:aa:aa:27:13:d5:6b:26:65:df:93:c8:ad:
         48:94:1b:c6:45:3e:75:da:c6:ed:22:57:92:bc:ea:0c:48:a2:
         e6:87:d2:68:37:c1:d7:ce:b1:33:f0:87:81:e3:06:8e:28:01:
         e1:e5:fb:90:00:13:14:cc:21:1b:b1:d3:5f:48:72:10:fa:02:
         4b:b9:11:a0:59:07:4f:11:ba:c4:6c:27:a9:36:6f:03:b0:4f:
         cb:4b:98:29:21:af:f9:a7:10:b8:f7:a8:16:b2:87:c6:66:4d:
         af:93:cd:0f:05:47:1b:b1:8f:a5:c9:ec:01:f4:b4:b3:e3:d8:
         9a:12:d3:e8:49:0d:99:ad:7f:d8:a1:7b:db:8d:89:eb:59:6f:
         18:b8:12:60:5f:2b:c1:7a:c8:c6:4e:09:d5:f4:e7:73:5a:f0:
         12:17:ab:06:f0:a8:55:2c:d2:64:5c:92:9c:82:8e:0c:51:1e:
         1d:7e:3b:d0:28:d1:cf:9b:57:60:2b:36:e6:04:42:95:30:b5:
         3e:70:b5:dc:d6:c9:4c:d8:21:b7:78:33:ce:b7:aa:64:7b:16:
         59:13:8f:6c:63:43:84:12:be:e6:de:8e:08:a3:ac:89:a1:64:
         7f:14:df:23:d1:11:78:8f:c2:90:07:84:8e:24:de:82:08:3f:
         85:98:b5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:08:24 2026 by rpki-client