Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa
File:                     74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa (raw, json)
Hash identifier:          s/9eWLR/4rzamQRGoY6IZNE+FJ58DGjAF4SYXvbUrr8=
Subject key identifier:   BE:31:1C:53:CC:9F:8F:F3:7E:F7:D4:5E:A6:BD:E9:6F:7A:09:FC:10
Certificate issuer:       /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
Certificate serial:       010D0C9F4328584E7E94E9F26F5A8D8AA9BF5540
Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     53904
IP address blocks:        162.244.229.0/24 maxlen: 24
                          205.189.33.0/24 maxlen: 24
                          2001:410:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:e9:f2:6f:5a:8d:8a:a9:bf:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=4868a8d5-5595-4e62-82d6-927aea541b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:0a:ba:35:76:fe:a4:25:a7:a8:d5:fb:13:
                    d7:74:bf:6b:19:bf:78:9f:0c:01:0e:9c:18:aa:88:
                    e5:89:58:23:c9:84:26:16:25:c5:04:e2:ac:49:0c:
                    cf:ec:0f:ed:09:f9:17:e8:23:27:35:29:0b:12:36:
                    0e:c6:a9:c2:e7:6b:0a:98:e2:92:b4:de:7e:90:d7:
                    ce:e0:e8:fa:9d:a9:a3:ec:1f:b7:0b:e4:c0:69:5f:
                    03:51:3b:b8:58:db:0b:f3:81:9d:04:e8:99:5d:47:
                    e8:57:17:a3:f2:00:94:fd:c0:89:62:63:73:15:84:
                    13:2b:09:c0:b5:c3:07:84:79:71:ca:a4:40:ff:75:
                    c1:fe:80:a8:ae:d6:9c:dd:41:b8:20:8c:7d:4e:8a:
                    0e:05:10:ac:15:cf:98:a7:ea:8d:86:58:97:32:a6:
                    9b:11:e2:c5:c4:87:19:41:cd:c6:6b:62:bd:fa:09:
                    96:87:78:ea:a2:35:e9:4a:14:5f:cb:76:71:5c:e0:
                    79:6e:46:10:e5:ee:fb:d5:f4:98:27:ff:49:b1:6a:
                    00:92:14:45:2d:6b:bc:01:98:ca:f5:af:83:8c:ad:
                    b0:67:c6:9b:65:0d:31:a7:8e:96:ba:04:b5:c5:57:
                    0e:44:95:7f:c7:9b:7f:98:dd:17:03:6d:b2:71:7f:
                    58:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:31:1C:53:CC:9F:8F:F3:7E:F7:D4:5E:A6:BD:E9:6F:7A:09:FC:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl

            X509v3 Authority Key Identifier:
                keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.229.0/24
                  205.189.33.0/24
                IPv6:
                  2001:410:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:34:e7:76:31:94:af:94:fa:ab:27:49:d2:c7:7e:0c:c6:1b:
         76:aa:8b:39:8d:6a:33:d4:b0:3b:d0:6a:d8:8b:42:77:23:f1:
         34:f6:ff:6a:dd:4c:51:2c:5a:66:3b:e7:6a:ed:65:93:c5:f1:
         f7:24:39:49:29:f9:ff:2c:ab:cd:a3:ec:83:6f:f4:78:c0:c1:
         b4:d9:92:5a:58:28:19:80:37:1a:4e:a4:bf:28:39:5c:24:49:
         88:49:cd:6d:90:6a:4a:b3:47:b1:83:0b:9b:fa:9d:ea:51:40:
         81:0b:e4:11:9b:2b:a2:a4:d8:a6:d0:d1:99:a3:77:aa:16:13:
         e3:d1:4e:b6:71:20:51:aa:32:47:48:13:1c:81:b9:dc:7b:6d:
         a0:7e:e1:2d:1f:79:f3:40:02:0b:9b:a1:1d:2d:63:49:e1:21:
         e0:15:a3:08:31:a5:8a:a9:5b:c9:d8:a6:4d:fb:d8:19:c8:27:
         36:02:62:26:b2:12:17:9c:e3:2c:22:02:8c:e1:af:59:a4:0a:
         e5:30:7b:d2:0c:eb:91:86:eb:5f:10:d0:6d:63:cd:40:f8:e1:
         cc:03:44:b6:d9:14:65:9f:9b:61:d4:43:da:89:05:98:29:62:
         6d:fb:3a:2c:03:ab:7c:4b:bd:8b:eb:f5:87:98:c5:55:71:eb:
         b6:8b:35:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:35 2026 by rpki-client