Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/5ce7a893-ce2a-338e-a1ae-4e5d0cd758cf.roa
File:                     5ce7a893-ce2a-338e-a1ae-4e5d0cd758cf.roa (raw, json)
Hash identifier:          ctsz8pxxHdqQms8E9JEgiQfekvOPzZGEElVezsXvF78=
Subject key identifier:   64:3F:D4:68:61:0B:9A:AB:8D:81:08:04:07:78:33:7B:3D:97:42:F6
Certificate issuer:       /CN=9fb6ebd5-02ff-4a14-8559-e09bdf5de60f
Certificate serial:       010D0C9F4328584F8C72F5EA29D180CC5B1A2818
Authority key identifier: 07:FD:E2:DF:53:CD:29:B6:88:CF:CF:1B:03:16:94:BF:4A:EF:B0:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/5ce7a893-ce2a-338e-a1ae-4e5d0cd758cf.roa
Signing time:             Mon 19 Oct 2026 01:00:12 +0000
ROA not before:           Mon 19 Oct 2026 01:00:12 +0000
ROA not after:            Sun 17 Jan 2027 02:00:12 +0000
asID:                     32416
IP address blocks:        74.200.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8c:72:f5:ea:29:d1:80:cc:5b:1a:28:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb6ebd5-02ff-4a14-8559-e09bdf5de60f
        Validity
            Not Before: Oct 19 01:00:12 2026 GMT
            Not After : Jan 17 02:00:12 2027 GMT
        Subject: CN=8dfc9204-6f0e-43eb-9141-938d92345e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:83:de:b9:d9:5e:ac:8b:c7:b1:ca:a0:03:
                    12:bc:b8:4f:08:71:14:70:93:a0:3a:1f:7c:80:be:
                    fe:b3:d0:c3:6f:05:26:7b:50:2f:49:e3:b6:dc:37:
                    78:b8:06:bd:11:2e:42:29:1d:5b:95:cb:da:24:83:
                    80:75:bd:48:4b:7d:e1:c5:0e:be:0c:47:23:01:fa:
                    c7:cb:cf:9d:be:85:e2:29:80:b7:49:db:d6:2b:ac:
                    0b:dd:80:22:ea:e7:40:e9:e0:bb:7e:1a:4d:8e:76:
                    65:2e:d2:38:7a:40:bc:fb:f7:51:c8:52:8f:56:b4:
                    2b:d2:da:49:85:d0:d4:7c:1b:8b:bf:31:2c:fd:44:
                    75:7f:51:fd:b6:71:d5:1c:2e:db:94:d3:70:fa:00:
                    51:b8:3c:4c:89:27:51:99:3d:e0:97:4d:2e:6b:ab:
                    2f:47:d2:6f:4c:a4:6b:b0:1a:cc:7a:45:e2:44:53:
                    c6:8f:0f:df:f3:a8:32:db:45:de:d8:f0:f0:cd:47:
                    c5:50:50:87:ee:ea:92:5a:65:c0:0a:44:e6:b5:b3:
                    2b:65:81:f9:8a:65:ab:61:e8:91:62:ac:b3:77:c4:
                    9c:27:14:52:da:ea:29:5e:0a:c6:19:7d:75:0c:71:
                    e0:6c:3f:2f:f1:d0:7d:b5:4f:c4:5c:08:40:3b:b6:
                    be:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3F:D4:68:61:0B:9A:AB:8D:81:08:04:07:78:33:7B:3D:97:42:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/5ce7a893-ce2a-338e-a1ae-4e5d0cd758cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.crl

            X509v3 Authority Key Identifier:
                keyid:07:FD:E2:DF:53:CD:29:B6:88:CF:CF:1B:03:16:94:BF:4A:EF:B0:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.200.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:de:27:7e:75:fd:06:69:b0:0a:20:c6:56:ed:24:9d:af:38:
         dd:d3:39:4f:cd:b1:da:38:81:b0:f3:81:dc:5e:14:57:4e:d5:
         72:ae:69:f8:73:fc:51:e6:ae:cd:fd:85:4e:61:07:52:9d:a2:
         0e:b3:e6:db:52:fa:78:14:c9:82:2e:ea:8d:39:a4:2a:39:76:
         32:3f:f6:28:8a:c1:05:32:ce:bf:fc:f9:32:70:a4:ae:82:39:
         ea:c9:a8:3f:1a:5d:f2:f2:82:95:33:cd:5f:3c:71:92:fc:e5:
         9e:40:26:01:d8:2a:dc:02:5e:be:34:56:8e:01:9a:c5:8f:d5:
         f8:3e:37:14:9e:3e:1c:c7:10:f5:18:8d:5c:87:c3:30:cc:5e:
         54:1f:d7:99:fb:03:81:28:43:48:91:3d:09:fa:41:e7:f9:59:
         20:51:8e:0e:22:73:97:ce:27:76:14:37:6f:54:b8:91:b0:4a:
         00:bb:2f:01:45:ed:fc:eb:54:14:0e:8a:50:84:10:c5:02:a0:
         fa:79:a7:95:14:09:cd:4d:75:4c:a0:c0:85:fe:14:0d:c3:1d:
         d7:23:db:f6:bd:cd:7d:8d:8b:58:1b:2e:68:87:99:72:50:c3:
         ca:9c:7a:2b:bd:1c:dd:da:9e:c6:b7:3a:7b:e2:86:11:0e:c5:
         b9:50:7f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:11:08 2026 by rpki-client