Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/f1c70656-041a-32d4-b933-394ffaf00711.roa
File:                     f1c70656-041a-32d4-b933-394ffaf00711.roa (raw, json)
Hash identifier:          Wc2kJ7DuB4PlBxY+JEGGMhXWnKNDrFA1+lYMAI9MOFk=
Subject key identifier:   23:54:56:D1:70:60:04:B3:DF:26:54:6A:74:C3:0C:42:18:38:0B:3E
Certificate issuer:       /CN=9fb6ebd5-02ff-4a14-8559-e09bdf5de60f
Certificate serial:       010D0C9F4328584EC0A7105239EE8ABCF4CD4200
Authority key identifier: 07:FD:E2:DF:53:CD:29:B6:88:CF:CF:1B:03:16:94:BF:4A:EF:B0:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/f1c70656-041a-32d4-b933-394ffaf00711.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     30674
IP address blocks:        74.200.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:10:52:39:ee:8a:bc:f4:cd:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb6ebd5-02ff-4a14-8559-e09bdf5de60f
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=2cc296c7-1260-4448-8a20-35c378c22fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:71:b9:e6:e2:28:24:92:8d:71:8f:97:ff:59:
                    e6:a4:9e:95:8f:1c:b3:6b:34:50:8f:34:56:98:6d:
                    c7:45:01:6e:ae:04:34:7c:a9:76:4a:1c:19:29:51:
                    b8:d4:25:ed:e4:35:dd:17:90:a6:0e:aa:76:a5:e3:
                    db:00:81:96:b1:03:e7:ee:d0:e6:03:b1:fb:be:e6:
                    1f:24:0f:ec:c5:33:43:fd:97:a1:5d:b5:05:ca:ac:
                    b8:5e:72:b0:7a:37:ee:be:77:eb:5f:a0:7d:47:5b:
                    a4:ec:19:10:9c:7b:db:41:72:5b:79:8b:ac:5a:4d:
                    f5:84:80:28:b0:2c:3d:57:c7:c9:82:af:58:d1:fe:
                    22:b4:09:22:3a:1a:f0:1d:4d:a3:7f:72:6b:6f:d7:
                    78:2d:28:7f:de:59:5d:48:6c:50:87:35:84:02:ad:
                    c1:59:01:7b:ce:4c:db:98:1c:cf:a2:8f:79:42:90:
                    76:1d:ad:ff:71:1f:3a:aa:a9:54:2e:bf:7d:e2:50:
                    6b:b5:da:93:6f:26:df:c3:44:eb:39:10:b9:cf:d3:
                    d2:a0:5f:fc:92:99:4a:7d:04:a5:9b:4c:cc:c0:4a:
                    29:39:2e:50:a5:f5:86:9e:4b:b1:4d:0a:02:ba:bf:
                    de:85:3e:af:8e:94:c2:82:7b:93:8b:04:c1:4e:6d:
                    22:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:54:56:D1:70:60:04:B3:DF:26:54:6A:74:C3:0C:42:18:38:0B:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/f1c70656-041a-32d4-b933-394ffaf00711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.crl

            X509v3 Authority Key Identifier:
                keyid:07:FD:E2:DF:53:CD:29:B6:88:CF:CF:1B:03:16:94:BF:4A:EF:B0:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.200.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:fd:d4:2b:1b:15:3b:c1:82:a1:19:9b:c1:3a:59:d6:d4:77:
         24:2f:e6:bd:ef:c0:68:90:68:6d:e5:34:e8:b2:35:59:24:d0:
         26:e4:57:e5:b6:84:b1:cb:9f:c9:c9:1c:f2:a7:19:1c:37:80:
         8c:1d:3d:b6:ee:62:1d:a7:bc:f8:ba:d5:f0:9c:10:74:08:2c:
         26:79:86:1a:62:a7:f8:be:09:05:5f:ed:46:35:16:a3:2b:79:
         70:5a:63:3e:23:45:08:02:84:1b:d2:68:45:e1:0e:f2:51:39:
         71:ae:20:b8:44:f7:85:aa:1e:1b:ed:28:22:4a:3c:20:45:b9:
         bd:10:44:b5:36:e2:6e:21:b3:0e:e2:1f:f2:a0:bf:44:6c:1b:
         95:d6:3c:76:20:bd:65:f9:27:b5:6c:e6:9c:cb:ec:86:e2:04:
         54:3b:ca:95:09:7e:38:db:33:4a:1d:7e:24:19:34:46:08:8c:
         08:5d:c9:52:be:2f:2c:e1:4f:f1:0c:21:6f:f3:36:06:43:74:
         7c:09:37:e3:68:73:e2:4b:02:59:e9:3a:a4:c4:73:63:54:6f:
         58:c9:7b:80:41:f0:41:43:be:61:0e:f6:74:a1:71:3d:51:65:
         ca:5d:db:ef:88:28:77:fc:66:32:6c:32:e5:00:09:74:91:e7:
         aa:cc:24:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:26:12 2026 by rpki-client