Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/9a269900-5295-3103-a5a9-68324448edba.roa
File:                     9a269900-5295-3103-a5a9-68324448edba.roa (raw, json)
Hash identifier:          zuPoJlrRoBK6uW9umAMwQLpKtmdVCK8fTXvIEx5wO/c=
Subject key identifier:   AF:C4:FE:F2:26:31:0D:57:02:45:3D:02:33:26:F1:66:0F:07:42:32
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584D186CFF5E4825EB65D706CE00
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/9a269900-5295-3103-a5a9-68324448edba.roa
Signing time:             Sun 08 Mar 2026 02:00:31 +0000
ROA not before:           Sun 08 Mar 2026 02:00:31 +0000
ROA not after:            Sat 06 Jun 2026 01:00:31 +0000
asID:                     9009
IP address blocks:        74.91.60.0/24 maxlen: 24
                          74.91.62.0/23 maxlen: 24
                          172.85.101.0/24 maxlen: 24
                          172.85.103.0/24 maxlen: 24
                          172.85.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:18:6c:ff:5e:48:25:eb:65:d7:06:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Mar  8 02:00:31 2026 GMT
            Not After : Jun  6 01:00:31 2026 GMT
        Subject: CN=3aa4c4ce-0290-4409-882d-39e3b4ed5a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:09:96:6f:7c:49:98:e8:ce:57:c5:d1:98:bf:
                    f6:99:9a:63:1d:9c:07:9a:dd:58:e8:65:11:bc:e9:
                    45:0f:db:81:5b:19:ee:32:2f:56:99:83:01:cc:55:
                    70:08:56:e7:83:0d:28:e6:11:2b:01:06:10:43:77:
                    6f:b7:1f:af:e8:b1:5e:ea:ca:8c:f2:0e:3f:9a:4a:
                    32:84:d9:70:36:f6:17:b7:4c:e6:ad:ab:6b:d9:c3:
                    35:cb:11:ff:19:3b:2a:b1:01:81:0e:97:c5:60:49:
                    15:02:d5:f2:b6:3e:39:25:64:26:a0:1e:61:c8:36:
                    0f:c0:94:b5:79:ea:f5:a5:0b:0c:04:0b:ff:3a:4f:
                    52:ef:89:00:05:c5:3b:da:e1:f4:77:40:a5:15:37:
                    78:1b:71:53:e7:7a:7c:ed:3e:fc:67:3e:8b:13:e4:
                    02:98:9c:7f:be:29:fb:2b:58:71:33:c5:04:67:ab:
                    20:a7:90:83:d3:38:60:bf:b9:c2:e6:bc:53:0b:2c:
                    db:37:0a:b4:01:3a:d6:93:8f:31:f1:5d:66:51:b5:
                    a3:e5:73:c1:14:02:d8:7d:e3:53:10:96:73:37:4a:
                    44:59:8c:99:dd:44:ab:3e:3b:5a:cf:14:95:0c:07:
                    66:87:64:37:aa:ea:44:df:56:44:83:1d:cc:13:c1:
                    68:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C4:FE:F2:26:31:0D:57:02:45:3D:02:33:26:F1:66:0F:07:42:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/9a269900-5295-3103-a5a9-68324448edba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.60.0/24
                  74.91.62.0/23
                  172.85.101.0/24
                  172.85.103.0/24
                  172.85.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e9:4b:1d:03:73:88:4b:dc:c6:78:5a:b7:d8:74:cb:6b:03:
         66:2d:f2:66:7c:af:26:ce:8f:08:6b:72:ab:b6:6f:da:00:63:
         3e:c7:a3:76:48:7c:a0:3d:99:47:46:c2:2b:14:04:69:ef:fe:
         ed:3f:81:72:cb:15:ce:a7:d3:dc:9a:06:7e:61:aa:c1:c8:24:
         40:32:76:fd:65:da:2c:bd:e7:19:34:ac:aa:4f:be:3a:b0:82:
         92:72:99:ec:8c:1b:db:19:d3:2b:30:4d:f6:dd:c0:b7:13:99:
         cc:5b:ae:fc:6b:5a:09:20:5b:f7:75:f1:27:63:b0:8d:5d:09:
         e3:07:ee:29:fb:fe:0f:84:31:57:fa:f2:02:f1:0f:39:8f:cd:
         42:14:6f:2c:83:1d:b0:6b:b3:b8:ef:01:58:1a:9f:ad:7a:77:
         60:c4:b6:61:41:5f:ed:97:ff:ac:3b:a4:38:ba:0b:dc:4a:e9:
         31:5d:74:96:fc:c9:50:6c:98:a4:48:01:d5:74:ec:34:df:7e:
         5d:46:a8:32:d1:eb:17:01:5b:61:e0:01:85:87:ce:ae:8f:4e:
         a1:a6:90:5b:54:9f:56:23:de:c6:fc:a5:2f:5d:1e:26:a3:16:
         19:f3:78:8a:b1:c2:55:44:c8:30:56:db:47:00:a1:5e:d8:d2:
         a4:ec:fb:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:23 2026 by rpki-client