Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa
File:                     bdf6a7d1-a324-35af-8414-d2ae101242c2.roa (raw, json)
Hash identifier:          X3ZNSbtk0XuIa+UaQYCDxf6UUy0ap8UBQMBmzChQX4U=
Subject key identifier:   B9:41:B6:AE:6A:82:64:13:C8:F5:92:64:45:66:3D:C1:AC:F8:F5:56
Certificate issuer:       /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
Certificate serial:       010D0C9F4328584D44FA4170357E1C5E7C169F80
Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     19528
IP address blocks:        74.209.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:41:70:35:7e:1c:5e:7c:16:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=6eb94faa-2e0a-48e5-be19-57480f70c5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f1:8c:49:fe:68:3c:af:fa:41:92:bb:28:52:
                    d4:c9:bd:c5:78:25:df:33:6a:b1:ac:6d:c6:b5:53:
                    f9:6c:77:cf:cd:ac:a1:84:25:f1:bd:89:3c:d2:bd:
                    45:f4:04:ee:1f:4d:6f:c9:7b:15:b8:1b:62:84:ef:
                    7e:4e:0a:69:c7:58:62:28:ad:b7:bd:6d:94:a8:16:
                    f0:88:24:40:f6:ad:63:03:de:67:64:73:a8:49:9b:
                    99:6f:16:08:40:32:60:fc:6f:f1:bd:98:8b:7b:fb:
                    69:79:60:72:40:ae:e2:ec:69:0e:2d:33:1b:b3:5d:
                    b3:b6:6b:29:bf:93:8a:7d:b4:bd:51:6d:03:90:9b:
                    13:fb:01:5e:61:a5:38:b1:91:28:fd:22:24:0c:0b:
                    d6:84:88:fd:3f:96:61:93:7f:08:74:0d:6b:3d:4d:
                    3c:d1:fa:af:07:05:1f:fd:00:bc:95:42:d4:59:df:
                    60:cc:c8:3c:77:a3:c4:5e:14:03:4a:6b:c5:d4:46:
                    bf:39:22:46:73:79:94:94:26:cd:02:12:80:1a:1d:
                    24:2f:b5:c1:89:fe:7f:08:86:a8:99:70:fa:1e:f4:
                    55:6a:39:6a:07:38:62:87:31:45:80:fe:f8:38:f5:
                    25:c5:f8:2a:88:dd:79:a1:48:49:1e:46:f0:9b:31:
                    3b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:41:B6:AE:6A:82:64:13:C8:F5:92:64:45:66:3D:C1:AC:F8:F5:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl

            X509v3 Authority Key Identifier:
                keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.209.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:03:c8:49:6e:2f:0c:37:b6:77:c0:19:b3:5f:25:49:f0:58:
         a0:19:2a:6e:8e:2f:6b:4e:6c:1b:a4:d5:d1:15:fd:2a:0f:a1:
         ab:03:6a:62:e9:10:27:d3:95:bb:6c:7f:b6:4a:c8:c3:f2:e8:
         35:fb:36:2f:f5:b2:20:7e:17:a3:3f:68:50:b1:90:79:5d:2d:
         50:1b:27:b6:52:62:54:5a:16:79:39:83:b2:64:b3:a1:2f:89:
         89:e4:2b:19:2b:eb:ab:38:d1:55:0e:b4:ec:3b:b4:d1:ab:f3:
         b4:47:d4:b3:8f:3a:6a:8f:d7:40:a2:69:a1:22:7b:32:4b:37:
         b8:97:a9:4e:e6:a4:e3:7a:23:35:72:51:3c:08:ea:af:40:4c:
         c5:2a:a2:67:1c:0d:41:f5:a8:bd:d0:0d:8b:46:5c:c9:19:22:
         26:63:f1:76:0a:a8:18:02:94:5d:85:66:fa:14:51:cc:c7:1d:
         33:8a:f7:bb:0d:34:ed:79:51:89:14:de:e3:52:f5:f3:0d:68:
         67:2a:2e:6c:c9:dd:e7:1b:a1:41:fb:1e:d2:54:56:7e:5e:1c:
         c3:cf:f2:f5:71:90:d5:ae:31:1d:74:6c:f4:ea:fc:22:23:00:
         b0:92:09:c5:56:a2:10:34:22:5d:14:68:51:bf:9c:39:7b:4f:
         e3:4d:c6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:09:32 2026 by rpki-client