Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/8f879f1c-4d45-3eae-9b64-b6dfb54e38a1.roa
File:                     8f879f1c-4d45-3eae-9b64-b6dfb54e38a1.roa (raw, json)
Hash identifier:          MQ7Nhgv6AMoa3hwZdVnD9TLFSq9bOTR2Uu23GHKP+3Y=
Subject key identifier:   4C:14:5D:8C:49:53:8D:18:78:95:2F:DD:C5:B9:6D:00:2F:DB:D7:E3
Certificate issuer:       /CN=bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f
Certificate serial:       010D0C9F4328584DBFD05A71AEACAD5C873A7C40
Authority key identifier: E7:5A:9B:72:A0:DA:D3:14:B8:AF:D2:D5:58:D4:5B:AA:2E:62:ED:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/8f879f1c-4d45-3eae-9b64-b6dfb54e38a1.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     399761
IP address blocks:        74.117.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:5a:71:ae:ac:ad:5c:87:3a:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=0ad84981-516f-4cfe-a6b0-de1914be3361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:84:e0:f2:f8:96:f0:11:fd:82:df:71:fb:ad:
                    a0:a2:8d:05:35:4e:36:c2:f3:df:f5:cf:fb:df:df:
                    81:b3:66:c4:f1:b6:87:1c:19:15:7e:c0:c4:40:e2:
                    46:5f:f4:c6:43:60:b2:97:5a:b1:a1:bb:8f:28:cd:
                    01:6f:14:e4:00:40:07:40:3a:b9:c2:dd:18:d6:96:
                    70:52:b7:f4:38:1c:ee:9f:d8:37:96:64:6b:ed:e6:
                    bf:c0:1e:6c:b2:46:69:af:00:30:d2:92:31:5b:a9:
                    7f:e6:05:f2:53:a1:0d:54:54:ee:8d:fc:0a:28:7b:
                    09:57:8f:f2:b2:be:62:52:eb:6e:f5:36:7c:ad:ae:
                    3a:3c:94:2b:0f:04:67:5d:91:53:23:90:fb:bc:fd:
                    11:b9:20:b6:85:64:64:16:bc:b1:8b:95:c3:7f:67:
                    54:5e:fa:e7:05:40:39:5f:d2:1c:f7:21:c4:cb:3f:
                    4a:7b:b4:ca:ba:ff:09:24:2b:67:de:b0:d1:58:f6:
                    11:9c:d4:cd:d1:e7:9d:84:b2:cd:b1:51:e1:83:65:
                    8f:fd:db:06:1a:7d:d3:17:ed:4c:58:8c:4e:ba:b4:
                    dc:46:5b:a3:dc:93:6d:b1:3a:01:d0:12:b0:cf:c7:
                    41:dc:45:b7:b7:6b:13:b7:58:a7:55:66:ba:46:8d:
                    0f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:14:5D:8C:49:53:8D:18:78:95:2F:DD:C5:B9:6D:00:2F:DB:D7:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/8f879f1c-4d45-3eae-9b64-b6dfb54e38a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.crl

            X509v3 Authority Key Identifier:
                keyid:E7:5A:9B:72:A0:DA:D3:14:B8:AF:D2:D5:58:D4:5B:AA:2E:62:ED:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:2b:ee:dc:50:68:31:3e:d4:18:ce:64:55:72:05:a9:87:39:
         b3:04:ba:ec:59:71:bf:60:f6:e5:1c:d9:74:6b:ce:92:b2:94:
         da:2a:8f:31:bd:ab:39:0a:43:f2:3d:b3:20:db:67:ea:bd:98:
         29:4d:07:4b:a5:d2:96:07:72:f9:af:c2:e2:d8:04:b5:d4:d9:
         8e:31:b1:3e:1b:c7:1f:6b:98:25:ef:a1:b3:a2:f4:30:41:e7:
         4f:8d:99:15:1f:6b:9c:f8:fa:ff:97:51:be:95:ab:16:1d:2e:
         c7:57:8d:93:e5:f4:5d:c6:21:99:a2:d1:a7:6e:56:f3:8a:15:
         0e:f1:49:57:59:bf:98:f9:22:f8:79:4b:06:fc:d8:33:d9:50:
         f8:88:db:55:da:80:aa:c2:a7:66:fa:62:dd:07:27:f4:b7:88:
         cc:9c:91:6c:6f:76:17:93:15:62:85:07:62:bd:b9:2c:e9:71:
         0d:8f:cd:37:dc:52:07:37:25:42:66:cc:e1:de:0f:66:6e:e5:
         61:00:15:c5:ab:41:ac:4c:83:98:41:e5:51:db:5c:81:5a:07:
         42:26:64:31:c2:11:3b:69:ad:d7:68:82:fc:9b:1f:19:65:57:
         6e:4d:d9:6b:88:f1:df:3a:0c:07:6c:16:ff:56:7e:9f:a1:45:
         59:f2:2f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:14:48 2026 by rpki-client