Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/e17ead58-d2cf-3332-b67c-3bb252f105c7.roa
File:                     e17ead58-d2cf-3332-b67c-3bb252f105c7.roa (raw, json)
Hash identifier:          hIjw70zzv0Y9C4K8y0jSrx9mSXVhZCUYQTcPu3ghrBU=
Subject key identifier:   A0:97:D2:7D:7F:B3:79:FA:79:9F:C8:B2:80:27:23:5D:DA:F6:9E:A8
Certificate issuer:       /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial:       010D0C9F4328584F89A8738DA8B44464E8CE6580
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/e17ead58-d2cf-3332-b67c-3bb252f105c7.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     6142
IP address blocks:        74.85.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:73:8d:a8:b4:44:64:e8:ce:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=d24e471f-1630-44f3-81ce-3f51416ac84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:92:e9:7d:a3:f4:93:21:9e:af:7b:41:8c:d9:
                    90:92:05:a2:dc:e0:1d:5e:4d:15:17:c1:d0:7e:27:
                    f3:a3:81:e4:89:53:e3:62:71:c0:74:8b:1d:af:a6:
                    16:04:54:e6:97:6a:06:82:26:df:10:98:a6:80:0e:
                    ee:4d:e5:48:ce:84:62:c3:bf:4e:39:0e:ce:0b:42:
                    4e:55:d6:a8:3b:de:59:cc:a4:63:0e:51:b9:be:b8:
                    d6:44:66:0a:16:a9:9f:4d:2b:bd:44:fe:de:af:4a:
                    39:f9:75:6b:ab:37:cd:78:35:25:b3:3e:bd:10:7f:
                    bb:1a:bc:88:e1:66:5c:b4:54:49:ee:79:b9:bf:a4:
                    80:32:fd:e4:56:ab:26:5a:d7:3b:93:b7:fa:73:d6:
                    5c:45:6b:5a:08:50:42:2f:cb:eb:ce:a9:ec:2c:2a:
                    8f:86:67:3f:bc:f6:90:81:30:18:7a:6b:3b:62:55:
                    20:4f:d8:88:9f:96:50:8f:fc:95:c3:7d:14:a4:2c:
                    af:ff:d7:7d:72:e4:4b:b3:ab:68:e3:5a:a8:8c:52:
                    71:a7:bc:c0:92:1a:b3:78:be:34:4b:41:1a:8b:c9:
                    a7:18:98:ba:b6:53:0b:2e:5a:2a:21:50:92:83:64:
                    bd:05:c2:a6:ee:f9:83:d9:1f:48:64:c6:aa:ab:92:
                    fe:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:97:D2:7D:7F:B3:79:FA:79:9F:C8:B2:80:27:23:5D:DA:F6:9E:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/e17ead58-d2cf-3332-b67c-3bb252f105c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl

            X509v3 Authority Key Identifier:
                keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:0f:07:1c:fa:95:42:19:57:5a:99:3a:73:96:68:e6:9b:94:
         4e:7f:8d:9b:fc:dc:66:32:23:38:4b:c8:69:b5:87:9d:4b:e6:
         1f:d4:37:8b:f1:10:ec:b2:ba:8c:ec:41:d2:2a:21:ae:99:b8:
         75:88:ac:45:3a:47:96:62:dd:5e:9c:46:57:3a:97:02:d7:58:
         f8:f2:bc:ef:b6:94:e1:34:44:70:74:17:d4:50:26:fa:1c:08:
         68:67:70:ab:47:28:47:5f:28:8d:e1:98:c9:94:b6:a4:9c:6f:
         f2:5e:63:75:a8:2f:a2:84:7f:32:05:65:55:89:2a:de:87:63:
         b5:62:e7:2e:a9:ac:5d:81:0e:14:44:12:41:15:78:ef:5a:28:
         f6:0c:08:2a:fd:e8:3d:18:29:93:96:0f:97:0f:0e:f9:bf:f5:
         0b:50:d9:47:d1:52:b9:69:0c:f7:91:19:60:35:e5:e4:b1:9a:
         e0:e2:61:ed:f6:d3:5f:7e:b4:20:18:70:b7:1d:a3:f4:e8:a6:
         e2:18:1b:23:11:55:ac:5c:bb:06:8e:6d:05:f9:66:06:00:bd:
         22:7f:ec:50:b9:37:b2:55:08:e7:a6:2f:85:94:7d:bd:c5:6c:
         7d:12:f2:19:d2:e5:49:0a:72:b9:8a:e0:b3:1f:0c:8a:56:cc:
         87:b5:7f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 06:59:53 2026 by rpki-client