Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/61a410ff-da2c-371a-ba6e-9ba5c3d63964.roa
File:                     61a410ff-da2c-371a-ba6e-9ba5c3d63964.roa (raw, json)
Hash identifier:          KYbGnEmAd8kefnINfX1SafVh4vwptFsjJTYSO3Jys10=
Subject key identifier:   8D:AC:F3:63:24:2F:1D:39:C6:51:26:17:D7:93:71:D9:A5:B1:A8:1F
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584DBA3AFF64C75C75A3FAB55C00
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/61a410ff-da2c-371a-ba6e-9ba5c3d63964.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     11290
IP address blocks:        74.210.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:ff:64:c7:5c:75:a3:fa:b5:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=8230a8d9-c85a-4e22-b415-ddbec2458ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7a:61:f9:d6:6d:87:08:f9:53:98:1b:69:b9:
                    6a:a3:58:43:1a:40:3f:35:83:de:f3:a0:ad:2a:e4:
                    0b:9b:d7:67:fb:82:d4:76:be:fd:ac:41:8d:60:60:
                    62:1d:12:5f:0f:25:a6:fe:38:18:6c:3a:c0:23:9e:
                    e0:eb:eb:fd:98:42:27:1e:63:48:7d:8a:f1:a0:de:
                    c3:32:1b:0e:3a:dd:7f:a4:68:c9:d5:a5:63:ef:b0:
                    61:ba:3c:6a:6d:73:21:6f:8f:3e:ef:d7:36:d9:a6:
                    1d:e6:ac:2e:dc:47:5e:bb:06:b7:85:43:a0:cc:4b:
                    25:20:ea:c9:50:b1:bb:01:7a:e7:e3:be:e7:8c:3e:
                    47:4b:ee:24:17:07:83:8d:b7:21:67:d9:69:84:39:
                    e2:18:7a:ee:2c:10:b4:c0:29:23:2f:0a:5f:f7:56:
                    ae:40:43:83:0e:1b:88:ce:ee:be:19:cc:13:6a:e3:
                    48:26:a7:7c:7d:62:ef:52:b5:58:ce:e3:31:57:e3:
                    22:29:8d:46:39:4e:e7:d8:21:bc:06:37:8c:e7:37:
                    16:15:81:42:75:3a:87:91:70:7d:d4:a9:44:a1:ff:
                    c6:d5:e9:00:90:94:c2:7d:b8:58:04:35:ab:54:f1:
                    c5:ba:6b:be:70:1f:66:de:76:b4:30:d1:ff:1a:a7:
                    97:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AC:F3:63:24:2F:1D:39:C6:51:26:17:D7:93:71:D9:A5:B1:A8:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/61a410ff-da2c-371a-ba6e-9ba5c3d63964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.210.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:69:df:74:e8:2c:a7:29:99:c8:53:cb:e1:fc:95:32:38:05:
         74:b6:f3:ba:6f:90:75:1c:1c:5f:5f:15:8c:7b:e2:eb:e3:0f:
         24:6b:c4:c8:af:0a:32:8c:13:c3:05:3e:64:83:40:09:dd:fb:
         dd:ad:64:4d:aa:0b:3f:49:5c:b4:2f:2d:40:5e:de:8a:70:e9:
         3e:b4:e2:28:e9:0e:a3:8d:1e:2f:30:0f:d8:13:17:db:fb:29:
         49:9c:3b:17:87:27:8b:a5:11:95:b6:70:fa:17:47:bf:3e:d2:
         23:9a:48:60:8b:bc:ce:6f:ce:bc:ca:e9:ef:78:2a:0a:5e:e9:
         11:09:2f:8d:28:93:04:33:22:e7:92:ba:d7:20:38:27:c8:c5:
         39:4f:b2:ba:ac:48:68:26:33:57:7d:17:1a:69:3c:c1:8a:75:
         97:57:9e:fb:d7:05:9f:8b:a1:e8:30:2e:48:a7:7c:5f:59:af:
         e9:d1:75:3f:c4:c7:82:cc:fc:2c:92:21:a0:a7:e8:d8:00:01:
         92:93:8b:b0:01:51:3b:4f:c6:54:1f:5b:82:56:ac:01:65:f1:
         33:5e:4c:b5:c5:93:53:95:65:eb:cd:80:3d:bf:e1:97:55:27:
         6c:4b:eb:d5:d3:e2:81:8d:b9:0e:b4:2d:85:9b:dd:90:bd:2b:
         df:8f:b3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:08:25 2026 by rpki-client