Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/a2552e86-09b0-3dba-8bf1-2e9f8e4d15bc.roa
File:                     a2552e86-09b0-3dba-8bf1-2e9f8e4d15bc.roa (raw, json)
Hash identifier:          gCHSm3JxK6W52iGKRuKRgw3jcKo2oKcSbUxO+appj88=
Subject key identifier:   4F:FA:14:27:A6:F6:07:48:5D:52:F2:0D:93:C8:C6:CD:7F:95:FA:A3
Certificate issuer:       /CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd
Certificate serial:       010D0C9F4328584EE38C9AB320058D0A00BA0600
Authority key identifier: D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/a2552e86-09b0-3dba-8bf1-2e9f8e4d15bc.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     396982
IP address blocks:        74.51.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:9a:b3:20:05:8d:0a:00:ba:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=d38f557d-b5d8-4ebe-96fd-0b5f53b83577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:17:d1:b3:e6:ca:99:ad:cc:32:1e:69:74:fb:
                    a4:09:19:7c:e5:42:6a:2a:db:5b:ba:0e:a3:e3:05:
                    b6:90:54:d3:ed:a8:7c:19:47:bb:b8:f9:aa:ff:e8:
                    d4:2f:2e:fd:6a:33:6f:4c:fe:28:de:ee:8e:03:49:
                    61:45:c0:48:9e:06:95:19:a1:9d:ec:81:69:98:0e:
                    b7:60:37:d7:bd:0b:20:ca:98:8d:8b:81:2a:f6:dd:
                    c0:f5:22:c4:56:7d:ed:a9:40:66:f8:12:86:5d:be:
                    af:a2:e5:0f:52:33:85:c7:d5:02:be:f8:4f:80:fc:
                    74:72:f5:f4:90:99:9d:40:23:6f:ba:3d:64:ce:b1:
                    09:92:27:23:79:5c:42:12:1d:2f:96:04:d5:db:48:
                    38:81:c2:3b:a0:b5:9d:7a:cb:45:4e:c2:03:36:c7:
                    2a:07:6c:5b:25:9f:02:23:7d:b0:21:8a:c1:84:3e:
                    62:89:6d:0c:d9:54:d6:5c:64:31:ac:89:50:a6:e7:
                    62:54:7d:b5:f7:8b:f0:14:36:22:a3:0d:f6:c3:f4:
                    f5:92:d2:ea:73:ce:cf:a0:92:7d:f3:4a:d3:75:40:
                    3f:91:e9:5f:ef:61:bc:e9:71:b6:84:1b:bc:59:c4:
                    db:bc:13:4b:12:80:66:64:d9:8d:86:ae:c3:84:d9:
                    c8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FA:14:27:A6:F6:07:48:5D:52:F2:0D:93:C8:C6:CD:7F:95:FA:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/a2552e86-09b0-3dba-8bf1-2e9f8e4d15bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.crl

            X509v3 Authority Key Identifier:
                keyid:D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.51.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:5d:c9:d2:ea:09:7a:1a:d1:11:49:cf:f8:c0:ea:58:b6:66:
         22:f1:7f:99:c2:50:2a:9a:fa:29:4a:1d:c1:9d:7a:48:01:02:
         e7:df:a4:48:42:1d:11:63:ff:ec:bb:54:f3:25:fe:f9:ba:99:
         96:a2:21:5e:08:ff:c5:f4:ba:9b:63:35:04:00:09:36:39:8e:
         5b:f2:b2:63:1c:4c:d6:92:70:00:0b:0e:96:d9:03:d0:b7:15:
         24:d7:30:d6:5a:38:72:1c:63:48:be:75:41:ef:66:3a:66:ac:
         4e:a8:1d:90:2e:e8:99:66:15:d2:49:37:95:15:2c:01:a3:74:
         24:08:18:fe:85:10:e6:4d:13:b8:58:62:64:64:f9:d4:67:65:
         09:d7:89:21:e9:ac:e0:e6:9a:e8:92:99:df:63:8a:8d:3b:9a:
         4f:d1:e9:55:f6:6c:d3:e6:97:27:fc:84:1d:a3:5f:c1:55:81:
         1e:51:c3:7e:37:b6:60:41:2e:96:01:0f:54:37:c8:3c:13:c1:
         4f:3a:0c:d3:7f:ce:d4:b4:66:71:44:e0:6f:56:e4:27:78:94:
         93:32:41:48:9d:62:53:72:c4:76:67:01:b9:61:09:92:3d:64:
         1e:3f:e3:60:2f:42:a0:6c:f9:9e:4a:74:4d:4c:5f:32:6c:d2:
         bd:9e:bf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:32:39 2026 by rpki-client