Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/1a0b81f6-755f-3295-9d2a-86b7e5b5a436.roa
File:                     1a0b81f6-755f-3295-9d2a-86b7e5b5a436.roa (raw, json)
Hash identifier:          IBGwscg8quQpiVFn73wZMNy9A/2RkaA3nzYASgO2IPQ=
Subject key identifier:   EC:3C:3E:5C:25:40:44:6A:FA:50:2D:4F:DD:43:AA:6F:98:7D:16:C0
Certificate issuer:       /CN=4b1a33d4-9e8c-465b-86d6-ab0b137cae90
Certificate serial:       010D0C9F4328584F542C71C7804585D6BEF5D200
Authority key identifier: C7:E0:75:FC:ED:F9:4B:CE:90:5C:01:CE:27:2A:43:3D:55:BF:D7:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/1a0b81f6-755f-3295-9d2a-86b7e5b5a436.roa
Signing time:             Mon 28 Sep 2026 21:12:54 +0000
ROA not before:           Mon 28 Sep 2026 21:12:54 +0000
ROA not after:            Sun 27 Dec 2026 22:12:54 +0000
asID:                     6079
IP address blocks:        74.115.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:2c:71:c7:80:45:85:d6:be:f5:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b1a33d4-9e8c-465b-86d6-ab0b137cae90
        Validity
            Not Before: Sep 28 21:12:54 2026 GMT
            Not After : Dec 27 22:12:54 2026 GMT
        Subject: CN=f3e085c9-548a-400c-83cd-dcfac7507ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fd:95:9f:d4:f9:d2:95:13:a3:ee:ad:99:ab:
                    63:3f:6c:d5:52:21:c1:ff:b6:80:ee:01:64:22:7b:
                    44:ec:cc:5d:2e:72:45:50:66:a7:44:6a:a3:47:93:
                    c8:e0:de:07:52:06:b8:2e:9a:8d:f2:1d:b3:fb:d8:
                    12:ab:91:9d:b6:a3:56:dc:89:95:41:8f:75:e7:30:
                    87:cc:e6:c6:d4:69:8c:1c:e1:f4:48:b3:f0:3f:e4:
                    71:31:77:66:52:ce:bd:d5:68:49:96:4f:6f:f6:63:
                    fd:b0:0c:9e:10:6d:3f:cc:33:50:63:5f:29:ae:c1:
                    a6:c6:d3:85:19:6a:a3:ca:30:f2:d2:8f:8b:f3:0b:
                    51:8d:09:c2:a5:75:b9:d5:f3:ca:fb:5a:ed:c5:18:
                    32:21:e1:72:1b:ee:d2:90:96:68:0d:60:66:21:8c:
                    72:b7:ad:af:d4:e1:67:1f:48:7e:17:a5:82:1b:28:
                    7f:c3:2b:b4:2d:79:51:9b:1e:72:05:22:52:a1:40:
                    1a:35:c3:00:fc:1a:42:38:6a:a1:72:ef:34:03:48:
                    3e:48:3f:91:64:87:18:da:25:3d:79:d2:b4:45:8b:
                    d6:55:35:ba:e3:9a:1f:80:a7:8e:86:84:9e:e4:e7:
                    11:46:65:b0:cb:61:f2:c7:8d:ff:0d:a0:9e:dc:be:
                    12:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3C:3E:5C:25:40:44:6A:FA:50:2D:4F:DD:43:AA:6F:98:7D:16:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/1a0b81f6-755f-3295-9d2a-86b7e5b5a436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.crl

            X509v3 Authority Key Identifier:
                keyid:C7:E0:75:FC:ED:F9:4B:CE:90:5C:01:CE:27:2A:43:3D:55:BF:D7:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b1a33d4-9e8c-465b-86d6-ab0b137cae90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c1:54:e1:d1:67:4c:49:63:03:44:6b:1d:a7:82:6e:55:1f:
         b7:18:2a:5b:48:22:e9:0a:1e:12:75:29:a9:e0:3b:fc:58:39:
         3c:35:fd:f5:5e:7c:2e:d6:fd:60:fa:34:8d:a7:2e:31:12:9b:
         ce:06:d1:b7:cd:84:d3:72:d7:f1:04:97:bb:0b:b8:2b:1d:78:
         f9:7f:79:71:cc:c9:c4:7f:57:07:9e:e2:45:3c:7e:a2:b3:d9:
         91:38:8e:fd:6d:db:cf:37:2f:86:38:7c:c3:63:b1:12:e1:6f:
         a9:23:61:47:3d:a7:09:ba:a3:9c:8d:88:6e:17:82:42:c8:65:
         8a:ce:11:8c:5c:b4:ab:af:7b:e3:6e:f6:c9:7d:25:43:dc:d2:
         12:79:45:02:c4:83:7f:ef:6e:4f:27:4b:02:d0:b1:fa:e9:2f:
         03:9e:df:3f:20:06:9e:ad:13:21:ef:4b:60:1a:39:a5:2d:57:
         36:7c:f2:f3:ef:1f:4e:ea:28:38:dd:92:85:9e:9c:4a:47:df:
         ed:70:2a:38:21:52:5c:77:47:bb:62:88:da:c1:58:aa:ef:70:
         b2:b5:f6:fa:e5:99:7e:36:87:a9:6a:84:dc:47:9d:ff:e0:32:
         d7:2a:6a:a2:91:e4:00:42:b8:56:ea:48:65:3c:5b:3b:24:73:
         38:e9:bd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:58:36 2026 by rpki-client