Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8ef967d9-fa3e-3d2d-b2fc-eae52f94dfec.roa
File:                     8ef967d9-fa3e-3d2d-b2fc-eae52f94dfec.roa (raw, json)
Hash identifier:          4No+UVi73FresPzxT/iBSaC3PIeoreFawgmYMfSbXnk=
Subject key identifier:   65:82:C7:BE:D9:6A:30:51:53:9A:F1:F9:E6:B1:8B:3B:F6:F9:2A:04
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584CA32C57FC842D7C91C96F73C0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8ef967d9-fa3e-3d2d-b2fc-eae52f94dfec.roa
Signing time:             Sun 25 Jan 2026 02:00:31 +0000
ROA not before:           Sun 25 Jan 2026 02:00:31 +0000
ROA not after:            Sat 25 Apr 2026 01:00:31 +0000
asID:                     4451
IP address blocks:        69.74.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a3:2c:57:fc:84:2d:7c:91:c9:6f:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Jan 25 02:00:31 2026 GMT
            Not After : Apr 25 01:00:31 2026 GMT
        Subject: CN=2c2ca00f-1a04-4957-be90-3af01c0d3152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:22:6c:b1:f4:2b:3a:88:53:92:7e:7e:fb:e3:
                    e5:9e:4e:bf:3b:7a:4e:a4:17:df:f5:b6:1e:05:98:
                    4f:ae:9f:4a:52:84:56:10:b0:19:5e:7d:a3:34:db:
                    0a:1e:16:15:dd:54:80:65:3a:c2:c5:02:58:ff:7f:
                    f4:c0:71:ba:6a:60:bf:7a:96:86:35:7a:b0:d0:75:
                    49:fa:dd:33:4f:99:4b:86:ff:8c:e5:18:eb:74:96:
                    f1:8b:99:76:60:48:26:ed:4b:77:04:2d:f2:df:af:
                    2c:54:58:53:14:5b:c1:4d:c7:7c:30:08:2a:64:6a:
                    c9:5f:be:87:18:e8:df:b8:35:b8:28:d4:35:01:e2:
                    d1:59:05:f0:e0:6b:aa:ee:20:f6:45:5c:8f:48:5b:
                    a2:aa:41:65:16:d5:72:c0:0e:fa:38:e9:8d:81:f3:
                    75:24:54:d6:5e:3f:fd:a3:dd:6b:da:7f:47:5e:10:
                    d7:a9:70:bd:b6:d5:37:61:03:6b:0a:1a:29:5a:72:
                    d0:c8:dd:8c:c9:4a:6c:be:ad:c9:9b:23:38:50:79:
                    1f:a3:08:5e:73:00:bb:a6:2b:fe:18:04:10:5a:40:
                    e8:ab:a2:2e:ea:3a:ea:61:dc:fb:61:de:39:5b:5b:
                    80:ad:6c:04:d6:a0:33:65:07:08:4a:02:1c:e8:02:
                    74:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:82:C7:BE:D9:6A:30:51:53:9A:F1:F9:E6:B1:8B:3B:F6:F9:2A:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8ef967d9-fa3e-3d2d-b2fc-eae52f94dfec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:03:0d:40:a3:da:e0:5f:b6:70:c5:06:a4:11:f8:0b:8b:c1:
         6c:97:89:9a:30:00:15:0a:45:a6:16:67:69:62:de:46:d3:8c:
         2f:4b:f1:67:e1:65:f8:30:c3:c4:4a:21:c1:32:9e:57:81:7d:
         ad:ef:f2:a8:bf:ab:b2:8e:b1:04:4b:dc:74:a8:77:fa:6f:ec:
         68:fb:7c:e9:5d:2b:f4:6f:4c:cf:42:88:ba:64:18:57:cc:b7:
         2c:6f:9f:1e:b8:ea:c3:61:39:20:04:a4:fe:d7:12:66:3f:10:
         c3:bc:76:05:b2:65:e1:11:2e:c6:8a:df:d6:08:2c:56:38:4a:
         d9:7a:46:bb:fc:c0:4f:d0:13:a3:57:3f:9b:8c:8d:a7:07:ec:
         fb:cb:8a:ae:51:7f:65:fe:3a:d5:f8:1e:fc:6b:0f:49:67:e8:
         4c:31:82:6c:46:b2:75:8c:e1:a2:4b:dc:cb:ec:56:27:f3:c1:
         77:46:b1:4f:88:40:71:c9:52:9f:fc:18:0b:67:0d:68:1c:a7:
         27:b1:ae:b6:01:a5:1c:72:83:d5:6e:20:77:24:27:55:b6:4a:
         3e:25:13:cf:4b:5e:bb:99:8f:26:f9:00:95:80:ce:fa:df:af:
         c1:9a:e6:e8:10:29:6d:0e:ba:3f:4a:95:4a:96:b3:5b:77:19:
         59:5c:44:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 14:58:27 2026 by rpki-client