Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/4a9bf0fd-13a2-3a93-a385-e482018356cd.roa
File:                     4a9bf0fd-13a2-3a93-a385-e482018356cd.roa (raw, json)
Hash identifier:          h9K+FC/b10UJbNzpaajUPwDnFgnoMkNqJrEUHQo1v/w=
Subject key identifier:   BB:53:65:7D:FB:54:4F:75:D2:65:8F:53:25:A1:20:9C:B1:42:E6:CA
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584F7782D434A96CFB89CC0C1D00
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/4a9bf0fd-13a2-3a93-a385-e482018356cd.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     15164
IP address blocks:        74.51.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:82:d4:34:a9:6c:fb:89:cc:0c:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=e3e51b67-cb70-4f5f-80fb-88d2088b3509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:ec:df:2b:37:75:2f:fa:36:a4:4b:9b:06:
                    4d:7e:97:64:27:c5:71:17:39:60:dd:1b:fb:c4:43:
                    7d:d0:1a:c8:d0:94:4c:0c:6c:2f:00:87:63:94:9a:
                    20:7a:4f:8c:bf:d5:63:71:c6:93:33:5a:6b:ed:57:
                    7c:78:1f:8b:fc:13:9b:aa:dd:d2:e3:43:b1:f4:e7:
                    aa:d7:2a:08:15:50:38:2c:c1:36:5b:83:1e:73:03:
                    68:5d:86:df:b0:9d:28:8b:69:5a:86:24:4b:3e:bd:
                    ac:99:b4:3d:5c:20:d7:14:41:e5:3d:63:07:db:2e:
                    ac:2b:f4:27:6d:9b:76:1f:37:2e:77:57:5e:e4:1d:
                    19:34:a0:f6:cb:10:5c:dc:d2:b6:e9:ee:fe:cd:0a:
                    00:2d:5f:af:bd:5d:c5:f8:f2:8e:10:12:96:20:75:
                    a6:67:7a:be:a4:03:54:62:35:27:f5:0e:d6:7b:f3:
                    d7:79:4e:bc:67:75:18:5e:6e:06:c8:e1:48:3b:e3:
                    fd:a5:a1:97:7c:72:77:8c:59:24:54:a2:86:e4:9b:
                    bd:c1:d2:2f:c7:39:60:52:a6:a5:c7:51:8d:6f:51:
                    22:88:41:95:f2:63:68:49:25:07:21:77:e9:30:91:
                    7e:3e:ef:04:1e:e3:f7:d7:4a:56:60:6f:21:c9:0d:
                    87:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:53:65:7D:FB:54:4F:75:D2:65:8F:53:25:A1:20:9C:B1:42:E6:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/4a9bf0fd-13a2-3a93-a385-e482018356cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.51.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:2c:9d:45:56:2c:07:94:5a:05:6a:55:64:2d:ac:4c:ab:5d:
         be:2e:2f:73:e0:36:07:6c:41:45:06:50:e8:8a:7a:6d:b9:19:
         5d:de:ec:1d:36:75:10:e7:10:a0:04:bb:2e:65:06:87:97:36:
         ca:0c:15:43:7b:a5:24:cd:66:7b:50:3b:5c:b2:12:49:77:ff:
         10:70:85:b4:b4:9c:31:9a:97:e6:05:b4:43:27:dd:cc:f7:86:
         b3:d0:b9:7d:8d:c4:7f:f1:41:88:1e:d7:a6:3a:c9:aa:df:1f:
         27:e5:dc:cd:02:23:02:75:02:09:7d:20:0c:4c:29:4e:d5:39:
         bf:ed:9b:31:20:26:50:bc:48:63:cd:5c:4c:01:be:62:be:60:
         67:e8:69:22:9a:d7:a7:d3:c9:bb:c7:5b:40:e7:9d:e6:9f:44:
         8e:ac:66:8b:af:70:14:cd:6f:fe:a9:9f:11:a9:9a:56:c8:ee:
         b7:25:94:f5:e9:56:09:b6:74:5a:2d:d0:b8:a5:2f:2d:97:00:
         a8:e2:95:d3:50:60:25:9f:be:bb:fe:49:3c:a3:37:2a:04:9f:
         97:d4:1b:86:5d:dc:af:e4:e4:c3:31:bb:d2:a5:8f:05:45:98:
         8c:50:38:fc:fb:42:f7:45:b8:46:54:24:59:d7:f9:7c:96:ff:
         ed:78:f7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:55:21 2026 by rpki-client