Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aa474ad-7ba1-335c-9aa8-663244a42c56.roa
File:                     3aa474ad-7ba1-335c-9aa8-663244a42c56.roa (raw, json)
Hash identifier:          swcAndpEaKB1sLwLXptDdftlZsHGBHKm1yn5pGT8tg8=
Subject key identifier:   FA:C6:5C:8A:F7:90:1B:2E:79:B9:4A:41:BE:97:DC:8E:4B:14:2B:1E
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584F5B9804FE48F947D2A0EAD680
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aa474ad-7ba1-335c-9aa8-663244a42c56.roa
Signing time:             Thu 01 Oct 2026 13:00:12 +0000
ROA not before:           Thu 01 Oct 2026 13:00:12 +0000
ROA not after:            Wed 30 Dec 2026 14:00:12 +0000
asID:                     16740
IP address blocks:        74.126.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:98:04:fe:48:f9:47:d2:a0:ea:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Oct  1 13:00:12 2026 GMT
            Not After : Dec 30 14:00:12 2026 GMT
        Subject: CN=646d09af-df54-42c7-b3b7-28e6749edd8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:54:2c:4b:1c:7f:45:b7:1c:fe:18:08:f8:78:
                    42:c0:8f:08:e2:ba:a0:4b:f4:bd:42:69:42:09:b6:
                    7f:fa:ec:78:a1:f7:22:94:bf:8a:2c:09:a1:38:24:
                    bb:a1:90:8b:5f:5e:d1:7c:62:5c:2d:34:4a:ef:eb:
                    a4:98:64:81:fe:86:89:61:98:5f:39:de:fc:65:7c:
                    23:15:17:2e:5d:45:8c:9f:3a:13:f2:8d:cb:68:9e:
                    79:e0:f9:d1:14:4b:43:09:c4:bd:45:e2:0b:cd:b7:
                    bb:92:b4:40:2c:30:fd:4e:5a:0c:cb:1e:8b:32:22:
                    3c:82:48:51:01:1c:43:19:e3:29:e7:ae:47:4d:8e:
                    3a:9a:ef:65:41:da:fe:d9:50:af:33:c3:16:39:61:
                    a7:e9:5d:67:01:87:b0:1c:ad:a3:53:c8:8a:62:f2:
                    54:b6:f9:f4:ef:e2:6f:dd:8a:49:1c:f8:cb:be:ba:
                    df:2b:39:f2:33:1d:bd:5c:35:a5:d5:11:53:87:15:
                    80:9e:0e:6f:e5:d4:d0:3e:fc:a1:aa:56:f9:b0:69:
                    65:c2:3a:b9:e4:ef:76:1e:76:18:b4:8f:96:4c:2b:
                    df:73:c1:eb:33:c5:a5:43:92:e7:49:d9:25:71:0c:
                    9e:24:7a:8a:c6:1e:44:65:11:74:68:19:4c:d1:df:
                    e9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C6:5C:8A:F7:90:1B:2E:79:B9:4A:41:BE:97:DC:8E:4B:14:2B:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aa474ad-7ba1-335c-9aa8-663244a42c56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:a1:f8:4b:74:24:7a:85:6d:d2:4a:c1:7e:0e:40:1a:dd:39:
         22:77:16:11:45:50:c9:ab:18:10:97:ac:29:df:29:d5:94:7c:
         7b:1f:ba:f5:5f:7c:e1:20:64:c7:2d:de:6d:83:d7:2b:f4:8d:
         bb:4a:38:00:2c:d1:56:8c:ef:dc:c5:1f:26:81:d7:a7:14:47:
         d6:f1:f6:5f:ae:ec:c9:cb:e3:59:00:d4:9f:aa:08:50:20:80:
         45:84:fc:5c:82:1d:35:08:63:1c:88:6f:7f:7c:79:77:a1:b8:
         44:55:e0:ae:b4:a0:93:dc:60:99:49:85:56:83:58:56:59:c7:
         ce:b7:6c:30:f9:f5:c0:ae:ac:93:90:5d:d6:ff:9d:32:6b:88:
         b4:13:f6:e8:0f:fa:ad:6e:be:a8:3a:06:7b:b5:4b:7e:67:a7:
         fe:29:71:f8:33:0c:25:29:f7:83:dc:1c:47:cb:7c:1a:94:91:
         e1:4c:6c:06:f0:16:3f:94:c6:d3:0c:fb:a8:90:ae:5c:3e:fe:
         d0:d3:50:a3:24:a5:89:27:5b:a2:eb:00:f9:60:28:f0:97:23:
         90:5e:68:e5:ae:80:9c:b0:6c:37:fe:98:e0:03:79:3f:f3:b4:
         cf:3f:48:b6:09:e6:c9:47:6d:b1:97:6e:10:39:e1:66:60:bb:
         7e:fe:eb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:05:42 2026 by rpki-client