Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/e17ead58-d2cf-3332-b67c-3bb252f105c7.roa
File:                     e17ead58-d2cf-3332-b67c-3bb252f105c7.roa (raw, json)
Hash identifier:          fi8kz/9W8XtZgUGmFR0hRnFgmsyGybOQ9GmCRkwms1E=
Subject key identifier:   01:B0:4A:1C:51:86:A9:BA:DD:BE:9C:F1:C1:EA:08:2B:A8:03:CC:5D
Certificate issuer:       /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial:       010D0C9F4328584EE7BCB55F7659444ACF7F2C30
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/e17ead58-d2cf-3332-b67c-3bb252f105c7.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     6142
IP address blocks:        74.85.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:b5:5f:76:59:44:4a:cf:7f:2c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=daa84157-d616-4206-94e3-1e4464c5abe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:58:7d:15:8c:b5:24:7f:05:86:fb:3a:4c:65:
                    1f:d6:85:3a:2d:1a:d4:21:40:e1:35:b2:8a:14:ea:
                    55:60:2b:49:09:6a:17:f1:86:21:24:b5:50:3d:58:
                    f7:f1:3f:60:8a:1e:56:be:1c:e3:97:9f:f1:82:1b:
                    6a:97:7b:8f:0a:1f:02:79:2c:02:b5:f5:4f:6f:b0:
                    6e:81:8e:d1:3f:aa:e8:77:86:bb:2d:5f:51:59:06:
                    b3:69:d6:82:1d:26:7b:94:74:6c:c1:7a:8d:de:cd:
                    a3:bd:6f:6f:12:b1:63:2a:be:1c:bd:3c:08:09:05:
                    6b:6c:78:de:47:8c:9f:0f:a0:7f:c7:3c:3f:ae:33:
                    36:37:b4:89:12:b5:b7:49:f2:97:0d:2a:65:d7:31:
                    64:2d:7a:dd:e7:6b:9e:e2:99:13:52:33:21:6a:6c:
                    de:da:a5:af:d0:67:d5:b5:a0:2e:6e:01:dc:a1:08:
                    d3:ef:71:c7:e7:18:9c:ca:80:be:3d:65:15:0a:82:
                    ef:a0:e0:b5:52:96:a8:4c:7c:e6:a3:7b:0a:0d:ed:
                    01:96:df:60:13:9d:ea:03:ce:fc:77:e6:ce:70:24:
                    91:d4:2c:43:58:13:da:00:70:86:72:20:a6:b5:35:
                    8a:72:f4:ab:c3:a0:35:92:71:41:a9:17:f7:ae:6d:
                    3d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B0:4A:1C:51:86:A9:BA:DD:BE:9C:F1:C1:EA:08:2B:A8:03:CC:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/e17ead58-d2cf-3332-b67c-3bb252f105c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl

            X509v3 Authority Key Identifier:
                keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:96:b4:f2:33:15:25:f1:a8:d4:9c:5d:c5:4d:25:0b:5a:ab:
         30:1b:32:f3:4b:5d:12:7b:22:91:e5:b1:c7:70:45:df:10:bb:
         0d:6e:58:d2:16:69:4f:35:24:c3:67:b8:af:3b:86:f7:63:5a:
         a5:9c:f7:28:c6:1e:6b:9b:18:3d:0a:b2:9b:76:a7:05:6f:0c:
         b3:c2:86:ab:4d:c6:e2:22:b8:e0:67:39:1a:20:3a:f5:55:85:
         82:3a:c6:62:4b:88:d6:29:b9:a2:b4:ee:f4:60:71:e7:6f:b3:
         f0:c0:4e:15:d0:b2:3f:a4:e9:ad:3f:2d:8e:6d:39:7d:72:54:
         75:18:d9:dc:93:73:67:98:e2:06:06:2e:fc:3c:72:37:8e:16:
         5b:87:06:0c:f5:c9:eb:68:16:08:fd:22:02:71:aa:b2:f5:e0:
         a5:10:01:90:3a:5a:30:4e:5b:20:5c:ff:b6:df:3d:54:dc:71:
         7e:7b:8c:70:3b:76:d5:b7:e7:b8:dc:d7:d8:d4:4f:82:62:1d:
         d0:68:ff:7d:46:00:1a:1b:1f:3e:b3:a1:05:fb:59:30:d4:3f:
         7a:7f:04:14:31:26:cc:eb:3b:bb:12:02:e8:57:2d:4f:3f:47:
         78:0e:75:a6:5d:f3:cf:e6:ef:77:35:7a:cb:38:08:bb:40:34:
         86:fc:66:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 14:26:03 2026 by rpki-client