Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8e3f2098-dd16-3cb2-9293-b0e30b1fd323.roa
File:                     8e3f2098-dd16-3cb2-9293-b0e30b1fd323.roa (raw, json)
Hash identifier:          YWLi7nGs4BFXXsscsN/+R2jf+B0XntV+aj5gAaKidGo=
Subject key identifier:   43:19:FE:5A:6A:2B:07:F0:95:F4:DD:96:0F:EB:EE:B3:84:34:3B:95
Certificate issuer:       /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial:       010D0C9F4328584ED001DDDA7FAC9023E70B0760
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8e3f2098-dd16-3cb2-9293-b0e30b1fd323.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     7782
IP address blocks:        74.124.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:dd:da:7f:ac:90:23:e7:0b:07:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=415ae537-9109-43f3-b126-8fa8e0d5fa05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d7:d3:ed:26:71:16:5f:4e:ff:0b:d5:41:dc:
                    8e:1c:55:e8:36:d3:35:19:f9:ad:0a:91:80:eb:1a:
                    21:df:2e:96:25:fa:4a:0e:d5:88:4e:98:f9:ca:54:
                    62:d7:cc:bf:c9:77:02:9e:da:7b:f4:4a:ac:54:f0:
                    6a:4d:58:f6:eb:05:7e:d1:e4:83:af:68:3e:c3:b9:
                    fb:89:aa:8b:f8:c4:9a:3a:a2:d2:67:65:e0:b7:ce:
                    13:b1:75:14:42:49:c8:95:6a:eb:e8:89:74:4f:c8:
                    89:a7:4a:ab:7e:5e:7b:50:9b:4f:1a:8f:d8:ea:97:
                    21:70:f2:dd:62:15:c0:a3:ed:af:80:dc:0d:78:df:
                    5d:02:57:91:f7:a7:84:a8:3e:e1:f0:33:f6:69:97:
                    23:96:f6:19:61:28:9f:89:5f:11:1a:87:e7:2c:4c:
                    66:b6:82:65:5c:d1:45:6a:dc:18:78:fa:f8:8c:f5:
                    98:f9:28:63:1d:ba:b1:61:5c:1b:c3:2b:9b:0d:c1:
                    57:1c:2b:5f:c1:b4:e9:b6:b0:cd:95:aa:f5:86:69:
                    3a:ca:ec:06:88:2e:29:ac:18:8d:45:9b:fd:73:41:
                    b0:7a:75:88:58:d5:19:2c:b4:da:a2:41:58:27:ea:
                    ad:59:20:0a:cf:b7:f5:d5:43:20:ec:63:f9:c5:b9:
                    16:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:19:FE:5A:6A:2B:07:F0:95:F4:DD:96:0F:EB:EE:B3:84:34:3B:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8e3f2098-dd16-3cb2-9293-b0e30b1fd323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl

            X509v3 Authority Key Identifier:
                keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:07:e4:01:28:82:09:42:81:f0:f2:13:74:d0:c1:a6:1d:dd:
         b1:1c:f6:37:b9:3f:ac:ad:d6:af:cc:25:72:28:1a:0b:fb:a7:
         f6:fd:67:b3:fe:e9:e2:e8:2e:e6:b2:19:38:ed:c1:c5:61:b0:
         5d:22:f8:8c:1e:92:ce:72:4c:3d:03:87:8f:85:77:6a:7d:fc:
         d6:65:48:b0:49:ca:0e:53:1b:f8:5a:86:21:c4:b9:de:97:d8:
         6e:3e:1b:14:06:ea:8c:c7:32:74:7d:e1:c1:2e:a3:69:38:36:
         77:6b:b3:d1:fa:c3:5e:9d:6e:5f:b8:93:4d:1f:a2:7c:e6:0f:
         df:50:ae:31:14:e0:3a:72:dc:8b:19:04:62:7c:3c:4c:6e:b4:
         5e:9d:92:92:be:bd:95:d9:20:bc:6e:3e:31:e8:28:ee:a0:0a:
         6d:44:d4:bd:19:52:42:31:bb:83:5d:92:8c:c6:50:e3:0b:cb:
         e9:64:18:8f:4e:fe:62:b7:ed:64:99:47:17:8d:93:3c:b3:98:
         30:03:7f:41:47:17:2b:58:b9:45:c0:f8:ac:e4:ad:2f:9b:a0:
         7b:b3:2f:4d:2f:46:93:53:15:ca:15:96:cf:77:ef:36:94:a5:
         56:08:41:c2:6c:8e:05:62:74:13:4e:ee:ca:4d:dd:be:bc:f9:
         b0:06:25:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:48:40 2026 by rpki-client