Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/4a0a8425-216c-35cc-813a-362b9fe28985.roa
File:                     4a0a8425-216c-35cc-813a-362b9fe28985.roa (raw, json)
Hash identifier:          6BRqGtSjwsaTHAYvpcP/P3tvsuMobCtQmaZVuZTnczU=
Subject key identifier:   AE:36:B0:71:A5:7C:B5:C2:66:CF:E8:A7:AF:EB:F2:07:20:25:E2:7D
Certificate issuer:       /CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Certificate serial:       010D0C9F4328584DCDC5A5F3BE82B48E3C011380
Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/4a0a8425-216c-35cc-813a-362b9fe28985.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     19503
IP address blocks:        74.113.149.0/24 maxlen: 24
                          2620:7d:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:a5:f3:be:82:b4:8e:3c:01:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=bcb901de-7658-4d2c-9b64-a02b13569959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0d:07:20:5b:ad:58:08:66:44:30:ff:9c:98:
                    49:1a:b8:f4:b4:b1:9e:d5:df:ad:85:69:0b:f4:1c:
                    bd:82:78:ca:ef:46:f1:01:a5:00:30:fb:4c:42:fd:
                    f2:4c:31:65:88:17:9a:bc:26:a4:55:62:ad:27:a5:
                    0a:f5:dc:b9:44:70:14:d8:78:d0:92:dd:aa:95:39:
                    ca:55:90:10:1e:84:48:08:6b:bd:4d:a3:23:eb:08:
                    8f:29:d2:23:74:15:37:18:0b:93:af:4b:84:4b:41:
                    68:f4:94:5f:63:39:dc:e3:be:11:85:21:6f:61:b5:
                    44:61:8b:e3:80:81:48:8d:1b:03:8e:ec:b1:1b:27:
                    eb:12:91:5e:31:ff:36:6d:0e:c1:2f:1b:fe:a9:5e:
                    b9:61:c6:92:dc:ad:a4:c9:3a:4f:48:69:71:13:80:
                    34:96:cc:2a:4a:7d:29:5a:29:06:0a:d1:b8:a6:42:
                    56:0c:fd:2b:53:23:c2:55:80:b6:bb:66:c4:8b:cb:
                    5a:92:76:5e:62:14:08:11:a4:81:0b:22:f5:3a:53:
                    2a:e6:56:d7:65:32:69:d7:2a:ab:fb:d5:d0:f4:bd:
                    7a:87:02:a3:dd:7d:1c:4a:24:15:de:79:5d:4a:9a:
                    b5:4d:c7:35:53:b0:bb:5f:f2:3c:4c:f5:0f:c5:24:
                    af:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:36:B0:71:A5:7C:B5:C2:66:CF:E8:A7:AF:EB:F2:07:20:25:E2:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/4a0a8425-216c-35cc-813a-362b9fe28985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl

            X509v3 Authority Key Identifier:
                keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.149.0/24
                IPv6:
                  2620:7d:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:6b:f8:03:6b:25:57:ca:7c:d6:f1:8a:06:88:42:0d:2c:46:
         44:df:e2:7a:7f:38:76:2d:e0:cd:4e:9b:20:ac:ad:da:9f:dc:
         e6:4a:06:e5:7c:f4:27:7e:50:8b:27:93:e8:ef:10:e0:f0:10:
         9e:60:e3:1b:93:2c:d7:93:ac:0b:04:47:51:f4:e8:26:07:49:
         ef:63:73:e9:b9:d0:33:c6:ba:4f:af:04:94:d3:d7:98:04:27:
         f3:00:a9:e3:0a:d0:78:bd:2c:84:47:8d:15:a2:7b:7c:1b:fe:
         4d:79:94:93:12:04:f6:a8:87:89:98:6d:ac:d4:bd:f0:1f:9c:
         39:4d:30:32:5c:1b:1a:57:9e:be:2d:1e:db:9b:0c:51:a8:2f:
         c5:6a:5b:1a:03:93:94:42:c4:22:1a:75:91:92:0f:e3:55:78:
         63:dd:06:3f:21:19:9b:35:03:70:7b:a1:b8:45:82:27:2b:bc:
         fb:5c:b6:01:c0:77:e8:c7:c2:a5:ab:ca:f2:0a:8d:1e:41:33:
         c7:09:a5:c7:d8:0d:09:9c:c2:dd:31:11:d3:16:7c:7e:c3:80:
         76:1d:56:9c:b8:6e:cf:4e:8c:b5:53:b1:58:3e:cc:39:b4:7f:
         de:2d:b4:b1:0f:ba:f1:68:3e:ae:77:4e:b1:f0:b9:c5:63:da:
         1a:6a:fb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:49:46 2026 by rpki-client