Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/1aaec51b-2152-3168-9852-cba07d173eb3.roa
File:                     1aaec51b-2152-3168-9852-cba07d173eb3.roa (raw, json)
Hash identifier:          7MOGHsqsTH8LOtfGGIetfuGmQNJ8ZoME2NLcOqMsXaQ=
Subject key identifier:   5F:7D:C0:5F:D6:80:9F:4C:9A:16:7D:95:CA:D3:C7:65:A2:DB:B6:0D
Certificate issuer:       /CN=e06c5587-5b99-4fbf-8de6-e9c983f1495a
Certificate serial:       010D0C9F4328584ECD3726972F0E0F4BE6AEC0E0
Authority key identifier: 4C:4A:60:E2:E3:1C:C2:4C:C5:C0:E5:83:03:1D:66:D9:8D:55:0C:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/1aaec51b-2152-3168-9852-cba07d173eb3.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        74.112.132.0/24 maxlen: 24
                          74.112.133.0/24 maxlen: 24
                          74.112.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:26:97:2f:0e:0f:4b:e6:ae:c0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e06c5587-5b99-4fbf-8de6-e9c983f1495a
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=15347a48-337a-490f-a448-0351e1e79e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:51:7d:f3:5c:59:67:a3:ba:93:3a:61:4f:e4:
                    2b:24:7d:42:fb:de:c1:68:6b:41:32:65:26:ea:36:
                    f0:87:1b:14:6d:54:74:e0:7d:21:ea:75:ce:87:69:
                    18:32:a5:af:60:95:87:08:1e:c6:62:82:27:51:95:
                    a0:05:3e:06:f6:ea:2f:dc:6d:dd:71:29:83:eb:37:
                    0e:7b:bb:3b:8c:6a:16:93:4d:a9:b9:5a:7e:d3:2b:
                    b2:7d:32:35:7c:23:0f:a8:c6:af:4b:90:c2:47:ba:
                    ef:46:0c:ca:68:c4:91:64:2c:95:e3:54:7b:88:67:
                    8c:77:cd:da:f3:7a:e5:87:00:2a:e4:d3:81:f9:ee:
                    e1:c8:bc:75:24:5f:f8:1e:4b:a2:3d:87:02:6c:a8:
                    15:46:66:7e:62:39:34:db:df:a2:de:94:92:5a:2b:
                    39:24:42:91:3c:48:13:7b:52:62:60:0f:e5:fd:3b:
                    56:5c:88:bf:a4:ac:ab:37:0a:cd:93:a0:b1:90:b2:
                    8f:84:1b:2f:57:ea:2c:16:ea:cd:fa:45:91:30:d8:
                    1a:e2:18:2e:1b:e5:90:35:00:e9:05:0d:29:ed:50:
                    58:f1:d0:bb:0f:82:b7:d2:be:50:3d:29:32:e0:b8:
                    e9:63:a9:3b:3e:f9:fb:5f:c6:4e:5e:eb:2b:19:ec:
                    a5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7D:C0:5F:D6:80:9F:4C:9A:16:7D:95:CA:D3:C7:65:A2:DB:B6:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/1aaec51b-2152-3168-9852-cba07d173eb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:60:E2:E3:1C:C2:4C:C5:C0:E5:83:03:1D:66:D9:8D:55:0C:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.132.0-74.112.134.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:92:95:36:0d:34:37:7a:25:ec:12:12:49:da:fd:36:ac:d1:
         79:26:e8:01:53:92:a5:d0:9e:5a:80:6d:72:8c:c7:5c:10:7b:
         76:f1:b9:6d:f6:2b:a5:c7:19:67:6c:17:8b:c6:fa:fd:c8:34:
         58:5a:77:d7:a4:6d:53:6c:ce:24:be:e6:2d:ec:3e:22:42:ef:
         e5:63:34:11:69:23:f1:48:99:64:0b:32:65:7c:67:c3:3c:36:
         1c:7f:4c:f5:9d:9a:7e:79:b2:47:46:87:55:ff:7f:09:7a:2f:
         c5:71:84:f4:cc:64:7d:2f:0a:af:5c:51:8f:ce:f2:41:2e:5d:
         ad:e4:12:00:4c:f4:a0:7b:fa:1c:4d:80:c7:39:f7:83:b4:bf:
         cb:79:4b:87:52:e1:8a:b1:e8:72:2a:9a:2a:28:79:54:ee:29:
         42:04:45:44:78:9c:5a:4c:cf:8a:88:55:53:60:86:1b:02:0e:
         08:76:14:58:07:13:5c:60:42:d1:1c:ff:f2:cd:80:f6:e7:4a:
         88:3d:20:2a:82:d8:4c:5f:d8:b6:ac:88:ff:09:85:6d:7d:11:
         56:e9:2c:c9:07:22:58:b7:7d:89:66:4b:e6:8f:7f:e2:02:02:
         ee:ee:4e:d5:54:b5:31:1a:39:2e:57:3b:29:4b:7a:8b:12:99:
         3f:e9:11:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:45 2026 by rpki-client