Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/5d003fa2-3876-3e07-a7c0-cc4602b2899e.roa
File:                     5d003fa2-3876-3e07-a7c0-cc4602b2899e.roa (raw, json)
Hash identifier:          FXbfI+6eq24ZxBIKKlK5TVslYcLTGIsFCgVmN5FQmYM=
Subject key identifier:   F7:35:5F:07:5D:27:9B:E0:67:3E:3D:8A:8D:49:B4:54:E8:D8:05:D6
Certificate issuer:       /CN=e06c5587-5b99-4fbf-8de6-e9c983f1495a
Certificate serial:       010D0C9F4328584D4D5A6F7893A86AD15B1B0900
Authority key identifier: 4C:4A:60:E2:E3:1C:C2:4C:C5:C0:E5:83:03:1D:66:D9:8D:55:0C:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/5d003fa2-3876-3e07-a7c0-cc4602b2899e.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        74.112.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:6f:78:93:a8:6a:d1:5b:1b:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e06c5587-5b99-4fbf-8de6-e9c983f1495a
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=048ec54b-bd87-42b6-94fe-f99419c56404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:a4:99:91:59:d1:3a:45:5b:ab:52:7a:50:
                    e1:6a:33:68:1e:0c:35:6c:58:8e:3d:fb:ef:26:ab:
                    f5:b3:32:56:1e:b5:64:a6:86:06:c7:1f:76:55:2c:
                    64:75:32:29:ed:f1:53:13:5f:38:34:06:4f:05:9e:
                    0d:6c:5d:08:f2:b6:11:02:ec:3d:9e:d8:5c:40:1c:
                    4c:7d:9d:af:74:5e:7c:64:f4:3d:7d:4a:ef:25:2a:
                    16:37:cf:d0:96:7a:c4:c4:5d:c8:85:cb:86:37:31:
                    e1:72:50:6c:20:b9:56:4b:f5:fb:a6:1c:87:a8:15:
                    0f:a1:a1:93:2d:61:b3:e6:6b:9a:44:f4:d3:e2:fd:
                    89:de:cc:af:d1:e0:34:2a:a5:dd:44:8c:59:e9:34:
                    63:cd:ca:82:8c:44:07:51:b3:6c:1c:9d:59:ee:0d:
                    b8:6e:a9:54:22:c1:25:1d:8c:d7:23:c6:35:45:49:
                    d2:d2:d5:12:1a:18:c4:5b:0a:bd:59:18:5b:e9:00:
                    14:bb:73:cd:8b:a1:6e:67:1a:7d:43:1a:c8:b4:1c:
                    3c:53:3e:39:51:12:b1:21:c0:32:e9:14:15:b6:2c:
                    2c:8e:b4:8c:79:d8:83:57:30:72:e0:ef:bf:71:b1:
                    44:e0:ed:fa:ca:d3:2b:60:08:01:9a:33:7f:69:4f:
                    f4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:35:5F:07:5D:27:9B:E0:67:3E:3D:8A:8D:49:B4:54:E8:D8:05:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/5d003fa2-3876-3e07-a7c0-cc4602b2899e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:60:E2:E3:1C:C2:4C:C5:C0:E5:83:03:1D:66:D9:8D:55:0C:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:79:3d:12:f0:86:e5:e4:3b:49:cc:73:59:94:d7:d9:00:df:
         a7:59:15:de:a2:ae:3c:f5:08:b9:d0:ce:7f:ca:35:49:cc:8e:
         f1:f9:40:3a:4a:ca:67:87:aa:0f:83:b2:32:41:81:f0:97:76:
         19:80:fe:f2:20:33:c2:fc:fd:20:bf:ea:98:f1:f4:af:8e:5d:
         2b:9f:18:ad:0b:47:a6:db:c1:b4:27:ae:24:4e:71:3e:01:7a:
         36:ee:3a:ca:b6:ff:10:f3:02:ce:33:f2:2b:93:6b:93:fa:ef:
         00:32:af:7b:15:78:d5:68:d2:59:85:b6:a5:0e:8b:7a:11:20:
         2e:ed:23:9d:cf:89:98:66:ad:53:32:b3:6b:8e:e8:42:7f:1d:
         af:98:02:cd:47:7d:3c:8a:e9:5c:45:a4:71:05:24:7d:e4:cb:
         b2:8e:9a:c5:c4:9f:f9:a1:76:8a:7a:86:ae:df:63:14:48:13:
         9b:f0:1e:f8:34:c2:38:35:6c:8c:f6:09:1b:27:91:e4:ef:11:
         e9:e5:6b:38:d5:e1:8a:57:c6:51:89:cf:75:cd:ed:35:0c:70:
         54:23:f7:e1:03:62:4b:e5:bc:52:6a:51:6c:7d:a1:9a:f2:70:
         d8:a2:fc:7a:10:14:f1:a1:6c:5d:ee:ed:64:85:b4:76:57:72:
         72:18:ec:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 16:16:57 2026 by rpki-client