Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/d43324fd-d4ce-3fd9-b497-2c61a7c51028.roa
File:                     d43324fd-d4ce-3fd9-b497-2c61a7c51028.roa (raw, json)
Hash identifier:          fJHUMfwf8T9caf98o+1ctMGkWd4qOcUS5NPzig6Ix9w=
Subject key identifier:   18:29:40:B2:E8:FA:AB:9A:D1:68:96:57:2D:B6:BE:2D:6A:0F:19:F4
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584ED9C74762EE519ED28F145B00
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/d43324fd-d4ce-3fd9-b497-2c61a7c51028.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     16904
IP address blocks:        74.127.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:47:62:ee:51:9e:d2:8f:14:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=9540f147-a6b7-42a9-8024-aaf9997ac268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:93:db:02:21:b0:c6:06:08:06:7b:cd:2b:17:
                    b0:e7:e5:7b:c1:61:38:cf:e7:54:d5:0f:22:7d:bb:
                    e9:ac:02:f3:fa:c4:f0:59:7b:d1:23:a1:04:85:9a:
                    b4:0d:84:13:bb:60:f5:1f:b0:2b:a5:8f:7d:36:10:
                    cc:ba:31:34:b8:a6:91:4e:1b:73:53:5b:9b:18:e5:
                    93:f4:85:78:0a:6b:bc:88:71:ab:cf:b4:98:bf:9b:
                    16:07:7c:6d:ef:83:a7:f0:88:2a:03:25:2d:05:c7:
                    ae:80:d5:c6:3d:4c:82:aa:82:9e:0e:e2:df:f5:fe:
                    56:72:7e:2b:24:6c:04:18:ae:9e:1b:e4:37:75:17:
                    a5:b4:7c:cd:a7:95:1c:02:69:87:71:3e:6a:4c:29:
                    52:73:9b:74:0f:25:5e:a9:18:35:9d:64:40:be:01:
                    8d:50:e7:f9:08:ce:80:23:21:85:db:03:93:78:c6:
                    e2:13:8f:8b:80:f5:fd:32:a0:7f:8d:2a:84:50:2f:
                    23:55:dc:e0:be:09:7d:91:b8:05:5b:5a:bd:86:ad:
                    8c:d6:29:66:4f:34:c1:6a:61:86:96:0e:cb:4f:61:
                    37:eb:af:e5:cd:e1:ad:1c:5c:fc:1a:ca:a6:92:3d:
                    80:61:91:53:10:b7:3c:65:0d:64:a5:45:bb:94:e1:
                    75:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:29:40:B2:E8:FA:AB:9A:D1:68:96:57:2D:B6:BE:2D:6A:0F:19:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/d43324fd-d4ce-3fd9-b497-2c61a7c51028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.127.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:3b:0b:25:98:52:a5:c7:bb:86:1b:fc:1d:c5:51:d2:70:0c:
         ad:47:ae:ce:5a:51:bd:07:39:88:2b:ae:7f:e5:2c:44:66:16:
         04:c6:ca:3c:99:9e:b0:da:1e:fb:39:17:4d:1d:f3:03:6f:07:
         0c:94:db:0a:41:79:ab:21:bc:ef:e7:e3:b5:eb:88:95:87:5b:
         32:35:a7:77:5c:d2:fc:54:93:2d:71:43:96:a0:d6:4e:74:ac:
         78:6a:68:a3:69:fb:15:02:88:10:aa:a5:93:7e:3a:2e:07:31:
         8a:38:26:85:f7:19:ef:79:7d:9d:0d:98:31:0c:fb:7c:6c:b6:
         f3:da:b9:7f:7d:ca:09:41:0d:25:8b:3f:dc:38:b5:bb:0e:21:
         b9:a7:1b:8d:da:b5:2a:f6:e1:90:a8:a4:b7:e0:0a:54:ad:18:
         95:3c:52:28:fe:88:a3:c8:ee:ba:b0:e6:9c:51:c7:78:fa:ae:
         34:c4:3c:a9:5b:31:8b:c7:10:09:78:77:10:db:73:22:4b:cd:
         ea:d7:61:5c:ba:b8:e2:75:ef:b4:b7:4a:13:e0:81:62:90:19:
         4a:79:e0:b8:bf:79:cc:91:09:95:73:26:d1:93:71:59:a2:dc:
         67:15:11:f5:62:1f:4c:19:e8:8c:a3:e3:05:4f:b2:22:16:e9:
         d2:42:81:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:13:06 2026 by rpki-client