Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0a18e11b-eb11-43e4-a2cf-385b30d85609/8b00d9c8-0891-386e-b348-714d00250bd0.roa
File:                     8b00d9c8-0891-386e-b348-714d00250bd0.roa (raw, json)
Hash identifier:          PHpMdhF/SXhQBmCBMLZWLT2eUOrSA82mx+Sj6AHMSVk=
Subject key identifier:   FF:CE:FD:A1:57:8C:C2:31:3F:DD:41:90:C6:2C:80:EB:3C:5D:BF:60
Certificate issuer:       /CN=0a18e11b-eb11-43e4-a2cf-385b30d85609
Certificate serial:       010D0C9F4328584E8DEFA573447AD158BEDC0880
Authority key identifier: 42:F4:E1:3C:91:5F:08:7E:3D:BA:FD:2A:5F:32:51:93:F5:33:BF:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0a18e11b-eb11-43e4-a2cf-385b30d85609.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0a18e11b-eb11-43e4-a2cf-385b30d85609/8b00d9c8-0891-386e-b348-714d00250bd0.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     32987
IP address blocks:        74.114.148.0/24 maxlen: 24
                          74.114.149.0/24 maxlen: 24
                          74.114.150.0/24 maxlen: 24
                          74.114.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0a18e11b-eb11-43e4-a2cf-385b30d85609/0a18e11b-eb11-43e4-a2cf-385b30d85609.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0a18e11b-eb11-43e4-a2cf-385b30d85609/0a18e11b-eb11-43e4-a2cf-385b30d85609.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0a18e11b-eb11-43e4-a2cf-385b30d85609.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:a5:73:44:7a:d1:58:be:dc:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a18e11b-eb11-43e4-a2cf-385b30d85609
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=0f36a90c-2d17-4180-8ac5-1c46c42b3796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a9:93:fd:f3:cd:29:e5:b2:a8:cf:fb:73:22:
                    e2:9d:38:89:be:3d:93:f9:b2:d0:d0:33:5e:54:4d:
                    dc:f8:15:aa:52:fb:47:41:33:a3:0f:9a:d1:8f:cd:
                    65:57:84:d5:a2:bd:b0:b9:4a:fd:07:22:bd:12:47:
                    6d:f5:f2:a4:bc:4d:54:2a:25:20:67:68:8e:39:42:
                    86:3a:9f:f7:e5:12:1a:cf:d4:00:d1:4f:99:b3:54:
                    12:cc:cb:e4:69:e3:05:cd:41:35:c4:a8:61:54:1d:
                    9b:ab:d5:b3:52:c4:d2:01:6f:7f:50:91:70:35:a9:
                    62:ea:61:46:28:44:bc:35:da:f9:c3:1c:4f:7e:99:
                    93:5c:ff:21:c7:df:12:54:4c:ab:46:8f:75:f7:ea:
                    1c:2a:f8:54:10:2a:01:6b:ea:98:25:1b:b4:60:2c:
                    cd:54:47:2d:48:22:fe:b6:ce:f3:fa:34:ca:3d:39:
                    45:29:2a:fc:c7:9c:f2:a2:2f:ee:6a:d9:07:82:be:
                    58:34:ba:e4:64:6b:7b:cf:47:56:76:4e:1f:66:f5:
                    32:72:0a:15:94:69:6d:03:73:00:1d:7a:58:0e:dd:
                    ef:65:50:43:f8:98:8c:21:43:84:db:44:b7:5a:5d:
                    d6:a5:c6:32:57:67:eb:3a:a7:dc:a7:c4:0e:11:a5:
                    46:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CE:FD:A1:57:8C:C2:31:3F:DD:41:90:C6:2C:80:EB:3C:5D:BF:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0a18e11b-eb11-43e4-a2cf-385b30d85609/8b00d9c8-0891-386e-b348-714d00250bd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0a18e11b-eb11-43e4-a2cf-385b30d85609/0a18e11b-eb11-43e4-a2cf-385b30d85609.crl

            X509v3 Authority Key Identifier:
                keyid:42:F4:E1:3C:91:5F:08:7E:3D:BA:FD:2A:5F:32:51:93:F5:33:BF:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0a18e11b-eb11-43e4-a2cf-385b30d85609.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b7:b4:0e:18:9e:10:b6:bc:79:d2:4d:72:ec:2f:1d:bc:15:
         84:e2:b3:1a:2f:01:a3:95:91:23:55:79:13:4f:f7:18:55:a2:
         da:d2:0c:58:a9:6a:58:4b:aa:7e:42:e4:f0:64:73:4e:66:20:
         bf:5e:15:45:0c:80:7a:4a:b0:b3:ca:7b:d7:da:62:a6:6f:1d:
         15:13:d5:70:31:91:67:44:13:42:58:aa:dd:2b:36:f2:fa:1b:
         64:6f:ed:e7:f7:ba:1e:7e:2e:ad:a9:67:6a:18:a7:26:9b:3f:
         07:45:ff:f4:3c:36:58:ff:7a:f4:07:55:51:6d:99:39:5b:cd:
         a2:a0:c0:48:df:7c:d6:4f:c1:ec:4e:c6:ca:4f:8e:57:b7:a7:
         55:6a:f9:a4:76:a1:3d:8a:80:4a:f4:60:09:87:de:56:7f:04:
         5a:bd:e2:55:68:c2:bc:4a:7c:32:0d:71:fe:05:73:97:45:87:
         44:54:72:a0:f7:86:b1:08:cb:92:9b:5e:36:df:e4:d2:c7:bb:
         f8:d0:9d:20:8a:12:3f:3e:28:eb:05:39:49:df:1f:24:a4:54:
         ac:9b:db:6e:fc:63:4f:e7:9f:75:90:fd:43:d5:76:0a:48:62:
         20:6b:c7:5f:f9:6b:cc:b6:fb:cd:a1:b4:c1:b2:e6:c4:2a:6e:
         54:7e:54:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:22 2026 by rpki-client