Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d717e7ab-b3b4-3352-9105-9309415cc5da.roa
File:                     d717e7ab-b3b4-3352-9105-9309415cc5da.roa (raw, json)
Hash identifier:          qUIwKzBixmAl8uydPW4VgIeGGKRl2uCEpHkU7HGRq8A=
Subject key identifier:   D8:AB:84:F1:C3:C6:82:40:40:8F:12:F4:E9:84:A3:76:D4:86:FB:88
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584E104EEACA0D6BC869E005FCC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d717e7ab-b3b4-3352-9105-9309415cc5da.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     55410
IP address blocks:        74.49.192.0/22 maxlen: 24
                          74.49.200.0/22 maxlen: 24
                          74.49.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:ea:ca:0d:6b:c8:69:e0:05:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=336cef4a-978a-49d5-a266-14ca6008aa9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:4f:77:50:0b:a7:bf:b0:41:2e:63:83:e1:
                    5d:cf:6d:e0:d7:de:af:e3:96:9b:3e:0e:06:6a:33:
                    07:49:72:09:38:18:f5:0b:17:eb:2c:f3:a1:4e:2b:
                    12:20:fc:3f:94:83:a2:92:99:32:b1:93:5f:40:1d:
                    10:15:74:3a:9e:02:11:cc:31:aa:06:a3:ec:e3:ca:
                    09:b9:fb:a8:8b:37:57:02:c1:b1:2d:98:fd:ab:b0:
                    51:b4:cc:10:94:56:e7:83:f0:2f:c1:fb:99:cf:c0:
                    63:db:86:77:8c:0b:dd:3f:20:61:55:69:3f:97:88:
                    2f:95:58:e2:6e:49:f1:75:cc:92:46:ad:9e:b9:68:
                    65:bf:3a:d2:8d:74:a4:0e:34:4b:51:e5:0a:69:24:
                    71:9e:9b:2f:6d:99:23:e0:34:50:95:6a:96:a5:17:
                    24:a2:ab:6d:69:96:42:9b:14:79:78:e5:eb:86:29:
                    40:9f:48:49:7c:a5:68:87:98:d2:39:2b:73:4a:ce:
                    3e:4d:32:13:24:75:4c:4d:55:33:33:33:13:87:32:
                    c3:88:cb:06:9b:4b:00:d0:99:4e:bc:9e:6a:4c:90:
                    e9:2a:99:90:fb:da:59:4e:23:e5:93:7d:ba:f0:24:
                    64:5d:73:46:02:1e:38:16:fd:0d:7c:f8:cf:43:65:
                    83:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AB:84:F1:C3:C6:82:40:40:8F:12:F4:E9:84:A3:76:D4:86:FB:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d717e7ab-b3b4-3352-9105-9309415cc5da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.49.192.0/22
                  74.49.200.0/22
                  74.49.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:f3:43:30:4e:8b:33:d7:26:50:7f:9c:f7:1d:36:ef:72:26:
         f6:58:7d:c8:2d:23:52:48:63:5f:1d:a3:44:d3:f1:9e:62:9d:
         fc:cf:b5:90:e0:66:ab:0b:81:b2:da:2d:be:95:cd:5a:66:f4:
         b0:1b:9c:2b:b8:b1:96:fa:99:3c:14:d3:8c:0c:b9:14:46:f4:
         2c:08:22:a5:15:11:a9:ab:de:9f:0e:a3:e9:20:e2:5d:5d:09:
         c8:4a:da:e9:7e:96:1f:a0:9f:ae:b4:4f:57:b2:ef:74:07:87:
         53:20:9c:e7:f7:52:9d:e5:0f:9e:ae:66:bc:95:b1:33:85:bd:
         41:53:a4:fe:c6:e8:87:bd:e0:24:8d:0e:14:f3:e6:26:77:36:
         58:09:74:d4:cc:89:a8:89:dd:53:e8:cb:86:02:50:74:84:31:
         bc:85:c9:d7:83:ae:b7:1f:ca:44:89:b3:7e:44:d6:0d:5a:19:
         0a:80:55:d9:eb:fa:49:0f:13:c7:2e:43:14:ce:5c:3a:c7:fe:
         91:9d:65:c4:b7:0d:55:5d:5b:dc:bd:c5:ea:30:5a:f8:91:5d:
         ce:12:6f:b5:5a:e5:66:8a:73:fe:d4:9d:b8:82:5a:78:fe:c5:
         34:d9:c9:5f:de:58:2a:03:36:c9:4b:b5:14:c7:a2:16:ae:31:
         e4:27:9b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:53:38 2026 by rpki-client