Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc17d05f-7d42-4a94-bf57-e5618bd1b580/86eaa3ef-8d4d-3716-ac1f-e0ad0dbe3880.roa
File:                     86eaa3ef-8d4d-3716-ac1f-e0ad0dbe3880.roa (raw, json)
Hash identifier:          npQOmvZhG+mv9adfAZ7vc1mtn7zA72LN6iZrAAqab4E=
Subject key identifier:   A6:73:27:17:0F:82:08:54:47:32:FF:4D:DB:05:19:D9:67:96:2B:C5
Certificate issuer:       /CN=fc17d05f-7d42-4a94-bf57-e5618bd1b580
Certificate serial:       010D0C9F4328584D300A58DD1DB1B0BD4BFE9680
Authority key identifier: 1C:09:08:4E:B7:63:70:C6:60:E6:A8:E7:91:7E:21:90:CC:40:58:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc17d05f-7d42-4a94-bf57-e5618bd1b580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc17d05f-7d42-4a94-bf57-e5618bd1b580/86eaa3ef-8d4d-3716-ac1f-e0ad0dbe3880.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     63330
IP address blocks:        69.174.224.0/20 maxlen: 24
                          74.51.176.0/20 maxlen: 24
                          2607:fba0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc17d05f-7d42-4a94-bf57-e5618bd1b580/fc17d05f-7d42-4a94-bf57-e5618bd1b580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc17d05f-7d42-4a94-bf57-e5618bd1b580/fc17d05f-7d42-4a94-bf57-e5618bd1b580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc17d05f-7d42-4a94-bf57-e5618bd1b580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:58:dd:1d:b1:b0:bd:4b:fe:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc17d05f-7d42-4a94-bf57-e5618bd1b580
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=4f094243-c625-4179-830e-899d7659e516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e8:08:b4:6f:20:4f:79:be:c9:3e:ad:bf:ee:
                    7f:e8:d0:06:dd:c1:78:01:9a:36:e3:c0:87:86:33:
                    ee:72:1a:5c:da:d5:68:ed:a9:12:33:68:9b:48:11:
                    fd:a5:28:fa:bb:a0:b0:2c:22:40:c7:3d:4e:bb:a0:
                    7b:30:10:b8:92:ee:dd:92:90:ae:21:92:fe:e2:49:
                    c5:65:90:87:b1:67:96:94:cb:f8:78:12:3e:66:47:
                    c1:f2:19:3d:74:b7:f6:03:aa:06:ae:8c:de:67:8c:
                    44:f2:13:78:fc:55:9c:1b:dc:c8:5c:53:2e:a5:ed:
                    8c:4c:56:cc:cb:ee:44:0e:b8:51:a4:63:a0:a5:28:
                    61:bc:9a:d6:83:ea:8e:87:68:57:bf:f8:9b:0f:88:
                    3b:24:f5:dd:33:d2:8f:ff:41:84:25:7c:db:4f:40:
                    20:57:7a:97:fc:34:55:c7:e1:a2:00:e1:b4:0f:5e:
                    a8:31:b4:d9:af:a3:47:bb:4b:37:41:5a:dc:37:d2:
                    da:f1:52:e3:af:43:1c:97:89:46:d0:9a:49:1d:06:
                    ac:e1:75:26:c7:15:6a:ae:cd:c6:24:56:ef:dc:96:
                    8c:28:d1:b6:17:86:cf:fe:82:fa:3e:13:44:b7:a2:
                    4f:11:0c:53:bc:88:8b:88:f5:b2:b8:b7:3e:51:73:
                    70:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:73:27:17:0F:82:08:54:47:32:FF:4D:DB:05:19:D9:67:96:2B:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc17d05f-7d42-4a94-bf57-e5618bd1b580/86eaa3ef-8d4d-3716-ac1f-e0ad0dbe3880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc17d05f-7d42-4a94-bf57-e5618bd1b580/fc17d05f-7d42-4a94-bf57-e5618bd1b580.crl

            X509v3 Authority Key Identifier:
                keyid:1C:09:08:4E:B7:63:70:C6:60:E6:A8:E7:91:7E:21:90:CC:40:58:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc17d05f-7d42-4a94-bf57-e5618bd1b580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.174.224.0/20
                  74.51.176.0/20
                IPv6:
                  2607:fba0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a2:78:1c:94:58:54:ac:77:db:fe:e2:bb:ce:ff:2f:af:30:
         89:10:5e:3a:eb:ff:f7:e2:88:09:c2:05:49:30:86:75:f3:82:
         31:23:30:67:e5:f4:a2:12:a2:61:3a:19:ff:e3:2d:0d:f9:cb:
         2e:aa:c3:b0:65:f1:2c:ad:89:fd:01:b5:10:84:f2:02:50:ed:
         78:dc:0b:14:a1:79:21:e0:27:d1:20:fa:f0:3c:08:95:66:56:
         45:e8:1b:4c:2d:6f:22:c6:b3:22:ff:b3:9f:5b:42:3e:8f:11:
         9d:a3:ea:2b:30:9e:76:c1:f7:c1:25:84:31:69:74:5b:55:a3:
         e6:00:a4:8b:f6:b0:5a:f4:85:3c:49:d7:ab:06:2a:40:ca:d5:
         7a:8d:c7:87:bd:9a:9f:0e:c8:d5:46:3b:e7:7d:06:48:cd:1b:
         99:a4:84:20:db:f6:69:9d:a1:39:c6:e3:e8:1a:2f:11:c7:86:
         d1:64:b5:68:48:72:d5:d7:4e:eb:88:82:fb:84:28:db:e4:79:
         94:f8:39:15:48:b6:d4:e1:97:18:50:3a:96:15:2f:6f:91:96:
         2d:40:24:46:57:8c:dd:ce:0b:e3:ac:65:a2:a4:62:d5:ea:da:
         37:96:59:9d:1c:0c:06:f8:19:7d:a7:dd:ac:dd:4c:b4:b7:9a:
         83:3a:8d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 00:40:44 2026 by rpki-client