Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/91c66afb-9ac4-3017-8aef-fec8356787b4.roa
File:                     91c66afb-9ac4-3017-8aef-fec8356787b4.roa (raw, json)
Hash identifier:          +8T4nOjuGgsO8AuBn0kDZc/6aPXjYVXP0RQizCCjGnM=
Subject key identifier:   0A:7B:6C:C2:8D:18:8D:1C:31:07:FB:0B:B4:43:AF:0D:EB:74:E2:83
Certificate issuer:       /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial:       010D0C9F4328584E0A6FEE8ED86FA05E04BFB000
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/91c66afb-9ac4-3017-8aef-fec8356787b4.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     150075
IP address blocks:        74.118.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:ee:8e:d8:6f:a0:5e:04:bf:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=f018f87c-56ab-45d4-83de-2678cd004763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:77:3e:c8:86:1a:a2:58:bc:6f:d0:97:84:9e:
                    d4:eb:8d:e4:13:54:e2:fc:cd:00:2d:0d:ae:ac:0c:
                    d9:0b:e9:06:d5:c4:44:20:54:13:aa:16:ed:b2:7c:
                    d0:30:28:a7:5a:fc:52:64:43:0f:52:0a:f9:9b:c6:
                    db:c4:67:a2:78:97:10:c4:99:2e:89:56:00:31:c2:
                    9a:53:4b:7b:c3:34:33:d0:b7:61:4c:31:ab:af:02:
                    d3:c6:c7:75:9f:d1:a8:93:1b:d4:52:19:af:ba:16:
                    69:2c:ce:39:c1:56:60:64:2e:5f:1b:42:ca:8d:ae:
                    c6:b4:be:ee:ed:4f:50:26:86:73:4d:95:d4:6b:95:
                    63:f6:5a:96:c2:9a:c3:bd:06:cb:6a:86:83:d0:db:
                    80:5e:de:06:4e:dc:80:56:80:95:60:7a:71:e9:02:
                    26:4e:68:c2:4a:7c:93:ea:63:27:5c:7d:69:9f:7e:
                    b3:1b:63:d8:c7:0d:bb:67:bf:8e:1d:cb:a2:4e:c7:
                    b4:c3:93:72:6a:44:e8:88:34:6d:ca:03:54:3d:90:
                    09:d3:29:b0:2c:e9:17:ac:07:f5:d8:10:2b:f4:55:
                    af:18:8c:a2:e4:7d:cf:09:9a:09:d4:b3:1a:0f:06:
                    a0:cc:5b:e3:18:52:ac:fc:43:45:40:fc:2d:88:55:
                    46:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7B:6C:C2:8D:18:8D:1C:31:07:FB:0B:B4:43:AF:0D:EB:74:E2:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/91c66afb-9ac4-3017-8aef-fec8356787b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl

            X509v3 Authority Key Identifier:
                keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:07:d6:45:be:c5:79:78:df:ed:9c:32:88:48:ab:b6:4a:92:
         05:02:92:5f:3c:bd:73:37:bb:62:3a:81:5e:36:1f:6f:0c:2b:
         d7:ce:98:ec:6d:dc:a6:24:3f:c7:1a:89:75:66:22:ab:a5:d0:
         2e:9a:9f:7c:67:cc:c2:be:a4:a3:21:23:d3:28:56:c4:08:0f:
         e6:7c:54:af:35:6a:6d:d8:3d:eb:b9:fe:fa:d5:0a:7a:ee:db:
         b5:0d:8a:95:58:93:04:b5:2c:f5:d5:35:13:e0:7b:2d:69:61:
         e8:96:56:2e:c7:3b:e1:0d:f3:96:e7:b5:fb:88:b3:66:3a:70:
         61:17:3d:13:7b:b4:25:87:ac:d5:c2:cc:f6:db:f3:7f:16:34:
         54:2c:25:e2:86:88:99:d8:dc:a7:17:e9:7a:45:56:98:83:6a:
         9f:04:4e:54:52:5f:5a:4a:e2:b8:b1:13:ea:33:24:58:e2:fc:
         60:68:af:8c:89:aa:80:bf:7a:29:ee:bf:f2:44:43:f4:d6:02:
         16:e5:a1:2e:09:dc:76:bc:5a:aa:5a:31:eb:c9:6b:bf:b0:f3:
         07:3a:62:3d:88:d4:40:45:5a:31:b9:83:7d:13:cc:fc:a1:d5:
         8e:02:d6:a2:0f:fd:11:d2:0a:93:86:ca:42:41:f3:2c:a6:e6:
         12:d6:52:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:22:01 2026 by rpki-client