Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/74a53bf6-3784-3907-8de9-6c6a2dcad5f9.roa
File:                     74a53bf6-3784-3907-8de9-6c6a2dcad5f9.roa (raw, json)
Hash identifier:          MAPGaXoGpfj7SsFyKveJLfDXmDcEb6PUlc70eDSiJsY=
Subject key identifier:   88:25:36:A0:DF:C8:74:9B:FE:BA:0A:FE:2A:62:EE:B3:B8:40:1B:23
Certificate issuer:       /CN=0699cec8-3851-41f8-aee8-2e225865699c
Certificate serial:       010D0C9F4328584F4F07F9258C8CCDB0F77A5300
Authority key identifier: 04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/74a53bf6-3784-3907-8de9-6c6a2dcad5f9.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     11911
IP address blocks:        170.61.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:f9:25:8c:8c:cd:b0:f7:7a:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0699cec8-3851-41f8-aee8-2e225865699c
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=57d96d9b-e60e-459b-9d70-3ededb06d179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:73:d9:2a:d9:5a:f3:dd:c6:39:38:f3:24:
                    fc:f8:b3:3f:ac:bd:4d:f3:f2:1c:cd:55:cc:2a:fb:
                    a7:27:37:8a:a7:75:47:48:02:36:22:b2:d5:57:ac:
                    77:3a:ea:ad:ec:39:c5:38:bb:2b:67:9d:4c:8a:a8:
                    6e:b8:36:f6:d2:05:6a:8f:40:20:3c:b8:2f:c2:cf:
                    3c:47:56:9a:da:06:61:4e:7e:05:b6:f9:61:9d:cb:
                    96:ae:f9:e2:f1:42:5b:31:1c:f4:b9:91:1a:cf:ac:
                    6f:84:40:18:10:a1:cc:8c:7d:c2:52:36:ba:b0:e9:
                    b9:4c:35:30:ff:23:41:7d:85:99:77:e6:7d:75:6d:
                    24:8c:2f:4a:e1:28:29:c2:51:92:60:38:df:64:f5:
                    d4:fb:38:04:2d:8b:81:86:ef:2a:ca:11:53:c4:c5:
                    70:e7:fa:3f:25:0b:ce:39:88:a0:3d:ef:02:45:b9:
                    fa:db:09:6c:38:7c:ad:dc:a9:07:10:1b:44:72:10:
                    77:57:d2:39:da:f0:2a:d4:a7:f8:30:97:96:58:fe:
                    a2:f6:13:06:04:85:95:8d:8c:bf:14:ac:74:e6:ef:
                    0c:cf:05:d8:f9:4a:8f:af:53:a7:02:10:6b:72:4f:
                    fe:a7:6d:66:bb:c7:f3:eb:06:93:fc:fc:71:22:f5:
                    7b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:25:36:A0:DF:C8:74:9B:FE:BA:0A:FE:2A:62:EE:B3:B8:40:1B:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/74a53bf6-3784-3907-8de9-6c6a2dcad5f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl

            X509v3 Authority Key Identifier:
                keyid:04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.61.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:cd:0d:5e:f9:a3:cb:ca:2d:7c:fe:4e:d9:c8:4b:eb:77:96:
         c2:ab:55:d9:12:2b:44:6c:e1:5c:a2:b8:ce:dd:aa:d2:1e:65:
         15:45:04:54:1a:f4:fb:3c:59:19:29:ee:b3:36:4e:00:1f:6f:
         86:d0:09:46:d8:ea:25:7f:c8:9f:ac:57:3d:f2:bb:5b:62:ea:
         da:fc:86:8f:fd:23:c9:99:24:80:03:de:2c:eb:1f:f9:5f:76:
         f5:45:77:06:c8:50:34:7d:60:eb:c7:d9:77:d8:20:50:97:6d:
         77:17:4c:f5:f5:32:6e:b7:cc:2b:be:51:c0:fa:6b:ed:e1:ce:
         8e:ca:06:7e:dc:fe:67:f4:7f:f3:ad:95:2f:ee:ad:e4:a7:2d:
         5e:2e:57:27:76:bd:ce:ad:15:9e:2f:52:5a:d4:e5:5a:66:5a:
         68:1e:98:fa:4a:a8:1c:3e:3f:cb:0f:ff:ac:ba:82:00:c3:6a:
         67:be:49:22:99:6a:f0:ba:65:34:cf:f0:23:d4:b2:b3:80:df:
         66:7c:06:4b:41:1d:a3:41:b7:10:92:66:90:cd:ff:ee:8e:9c:
         5a:09:21:b3:f8:28:4b:9d:6f:df:ab:55:5f:4e:64:3d:a3:66:
         71:01:dd:e0:00:60:8d:89:81:25:b0:9d:a1:a9:c8:cc:c0:2e:
         e1:fb:d2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:19:00 2026 by rpki-client