Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/b32d6a9e-e1bd-3605-ac5a-95ebe44b73a0.roa
File:                     b32d6a9e-e1bd-3605-ac5a-95ebe44b73a0.roa (raw, json)
Hash identifier:          ND3IAwgtkM8sTlYLkcGNM5qSwFs8TzpEQWo3DgNcvXQ=
Subject key identifier:   AE:AB:89:F2:52:05:16:31:2E:78:00:62:3B:47:28:11:0F:62:8E:01
Certificate issuer:       /CN=c68f99cd-e059-4345-ac58-8ebecccac84e
Certificate serial:       010D0C9F4328584E35FF18E9B5A34A0AB0698B80
Authority key identifier: 0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/b32d6a9e-e1bd-3605-ac5a-95ebe44b73a0.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        74.123.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:18:e9:b5:a3:4a:0a:b0:69:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68f99cd-e059-4345-ac58-8ebecccac84e
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=b4985832-a503-445c-859c-8a9d81e2b095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6e:7d:27:0e:ea:fa:69:c2:1f:9c:f0:80:5b:
                    eb:86:3b:13:e4:5e:d2:eb:ba:b4:db:fe:67:b7:41:
                    88:43:ba:b2:d9:ca:78:60:5e:cd:39:78:0f:10:0a:
                    6a:7a:84:a9:90:39:41:07:cb:b9:49:d6:b4:77:d1:
                    1f:e6:e0:a5:0b:f4:b1:cf:4d:89:12:2d:7b:a7:de:
                    bc:36:a3:a5:7f:96:26:60:90:38:84:33:cd:43:39:
                    5e:7b:52:5d:d8:45:70:5c:ed:d0:96:1b:9e:5c:f4:
                    04:d9:c8:d2:2d:8d:2e:5b:2f:0e:29:6c:da:4b:fb:
                    0d:03:16:17:8e:fd:28:35:7b:1f:62:e3:0d:26:a5:
                    f5:00:57:42:80:21:0c:fe:5e:25:b4:c2:1f:79:92:
                    41:26:27:a1:38:a1:c0:01:a8:82:7a:7e:3f:ab:9a:
                    fc:71:de:10:4e:bf:b2:4a:53:07:ca:45:00:a6:e9:
                    88:a4:87:83:58:81:98:2c:43:79:7b:cf:e3:ce:01:
                    3e:a3:93:cc:55:e7:99:2f:48:3d:63:a2:7f:fe:3f:
                    b9:2b:3a:6d:e1:a1:62:39:20:b5:11:1c:d9:a7:0b:
                    5e:88:02:c7:0d:33:46:18:fb:d6:a0:91:85:7a:28:
                    9f:66:60:31:4d:55:61:41:2d:c1:5b:dc:b4:95:28:
                    19:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AB:89:F2:52:05:16:31:2E:78:00:62:3B:47:28:11:0F:62:8E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/b32d6a9e-e1bd-3605-ac5a-95ebe44b73a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.crl

            X509v3 Authority Key Identifier:
                keyid:0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:15:ee:27:a1:b7:5c:9e:25:f5:22:c1:0a:ce:bc:30:bf:24:
         0e:91:ef:cf:ed:56:f1:55:61:68:5a:ff:55:43:20:cf:c1:bd:
         ac:ba:ad:27:00:53:9e:20:1c:79:a2:22:70:42:ee:c0:a5:99:
         59:21:31:f0:17:8c:99:5e:22:24:36:80:7f:51:ed:22:72:10:
         f2:83:e7:1f:a1:8d:6f:e8:28:e6:30:96:2e:c0:0a:8d:e8:a6:
         66:b6:5b:aa:78:23:1c:9a:64:f6:6b:0d:f1:29:19:45:bb:72:
         2d:7b:89:db:b2:bf:e3:4d:79:ae:22:42:da:78:3f:08:88:f4:
         b4:ee:12:e4:e1:7d:90:b3:81:d7:f9:ae:f8:c2:41:cd:02:cc:
         b2:f6:08:02:ca:b7:80:43:3d:fd:b4:51:ca:db:60:bc:9e:5b:
         f6:37:ec:b1:2a:43:31:fc:9c:25:1b:e5:90:2d:48:9b:2d:a7:
         9e:3d:3b:d8:c3:ab:51:9a:2c:db:f0:86:74:21:85:6c:3f:3b:
         66:e0:98:79:ae:f5:69:e3:dd:64:1b:17:e8:93:f4:7a:57:67:
         3f:96:4b:c9:28:9b:97:bd:c4:9d:dd:55:16:c2:7f:57:a0:38:
         7b:9f:30:78:09:14:84:b1:f3:56:35:41:2e:66:8a:ec:d6:47:
         57:b5:42:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 01:47:49 2026 by rpki-client