Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/408f67a4-965c-3201-9f19-0975f3af94df.roa
File:                     408f67a4-965c-3201-9f19-0975f3af94df.roa (raw, json)
Hash identifier:          +cesHvnZQmprqsYc5d35Wi406WQcMDXn7DL/mrm2/GA=
Subject key identifier:   8D:86:DC:94:C7:31:F7:BA:19:6C:36:AB:C5:4C:52:67:47:AA:4C:BC
Certificate issuer:       /CN=b9ea3438-4142-4de2-a912-7b081a51b42d
Certificate serial:       010D0C9F4328584D3E001E94E728BD25DE2606C0
Authority key identifier: 24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/408f67a4-965c-3201-9f19-0975f3af94df.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     47870
IP address blocks:        74.116.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:1e:94:e7:28:bd:25:de:26:06:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ea3438-4142-4de2-a912-7b081a51b42d
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=917fdd55-c409-49f7-8176-4074587aa33e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:a1:aa:af:ac:d9:3d:a2:58:50:b4:f1:4e:
                    09:cb:16:a8:db:d2:95:74:b9:0c:0d:2b:ab:15:8b:
                    39:a9:a9:c0:d3:00:3d:32:d6:b5:0e:37:4c:1f:46:
                    c4:99:bf:d6:f9:58:bb:e5:73:a9:cf:50:14:34:dc:
                    d0:b5:37:6a:f2:e3:8c:6d:e6:8f:15:55:97:0a:73:
                    c4:3c:e7:9b:ef:57:05:4f:3d:4f:10:0d:c3:21:8e:
                    0c:5a:76:48:8a:71:ae:98:f4:b4:0b:1d:04:25:f3:
                    e6:cc:10:ae:7b:b8:73:9d:49:57:98:64:cc:0f:e0:
                    e4:98:6c:f3:ec:bd:8e:d3:b3:d1:a5:d2:13:49:c4:
                    d7:24:ee:b0:5a:96:13:ed:68:e3:23:81:03:44:85:
                    46:7a:8d:29:0a:a1:8e:ec:44:05:e8:45:19:42:7e:
                    3c:85:98:d6:bd:ad:20:c7:d6:04:bf:62:62:b2:85:
                    11:78:14:c3:53:41:cc:85:7d:36:f7:3e:95:01:0d:
                    80:9d:8c:45:d3:ca:e5:44:15:aa:79:b8:fc:ee:af:
                    a9:ce:02:27:64:fe:4e:9b:e7:77:3a:3d:f9:10:70:
                    8e:b4:75:91:18:8f:36:cf:04:1d:95:27:e0:24:e2:
                    9b:c3:4d:97:71:a8:09:8d:ef:02:64:d2:47:f5:f9:
                    11:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:86:DC:94:C7:31:F7:BA:19:6C:36:AB:C5:4C:52:67:47:AA:4C:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/408f67a4-965c-3201-9f19-0975f3af94df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl

            X509v3 Authority Key Identifier:
                keyid:24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:d1:21:33:e9:4f:f3:da:32:64:dd:97:34:99:fc:4e:ce:b1:
         94:50:b3:8c:e3:e1:7e:da:4b:3f:42:b7:86:0b:b6:6e:59:29:
         c9:37:89:cc:a8:74:35:56:d4:fd:10:7d:eb:5d:e4:6b:43:f6:
         ee:04:3e:ef:37:4c:9e:a4:70:88:2f:53:39:67:b5:f1:38:5a:
         20:c7:ac:1e:67:25:7c:51:b3:25:52:c6:62:b6:62:2c:96:21:
         f9:87:91:39:fe:2b:35:ae:ae:bb:84:e9:6c:85:26:e7:2c:54:
         06:2c:f8:e2:8c:05:c9:dd:b0:a1:25:2b:b2:15:17:80:e0:74:
         f5:4b:ba:3c:be:82:14:6f:cc:bf:58:22:44:fd:4c:08:f1:85:
         aa:47:c9:e7:f9:0c:2b:23:49:7e:46:48:5e:77:c8:f8:15:5a:
         96:d7:ec:25:86:1e:cf:73:04:92:47:bc:9f:3e:75:82:5b:ee:
         19:c3:5c:90:8e:be:20:0f:82:eb:b7:ae:6e:4d:0a:bb:97:ab:
         23:32:3b:42:d0:2d:a9:d8:df:16:1f:7e:3d:30:65:67:57:1f:
         f6:a3:86:92:69:36:09:c0:fe:33:57:c2:a0:2c:b1:2f:31:3c:
         03:8c:01:26:e9:2a:b9:7e:28:53:b6:38:ca:2f:8a:14:24:bf:
         42:9e:85:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:34:46 2026 by rpki-client