Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/a6e5acc9-5bc8-349a-9aea-d0741522ed34.roa
File:                     a6e5acc9-5bc8-349a-9aea-d0741522ed34.roa (raw, json)
Hash identifier:          sNCUf6cJ3oa55HgukaBF181lCQ6VKiHNpOhYoHVbKNY=
Subject key identifier:   1B:FA:94:F3:D1:79:AC:D6:B6:DB:AD:78:3F:E4:FC:39:D1:1F:D2:4F
Certificate issuer:       /CN=e2311284-478e-4111-8d73-27148a01fa21
Certificate serial:       010D0C9F4328584D0D426A75D6F022EB83C2B030
Authority key identifier: 8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/a6e5acc9-5bc8-349a-9aea-d0741522ed34.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     17056
IP address blocks:        74.115.114.0/24 maxlen: 24
                          74.115.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:6a:75:d6:f0:22:eb:83:c2:b0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2311284-478e-4111-8d73-27148a01fa21
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=5b9d17b9-85fb-4b80-88d8-a48a008f91e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cd:dd:24:e2:db:a7:80:7e:83:91:a1:1c:7a:
                    9f:dd:3b:28:8a:09:fe:80:09:88:25:81:18:2a:6b:
                    d3:fd:1e:d0:e7:34:bf:5a:5e:a4:67:66:83:53:f5:
                    a0:0c:d2:53:2a:9b:c5:06:56:a8:0c:f8:86:93:88:
                    b2:64:f8:c6:6a:2e:b5:e1:cd:46:54:ab:79:50:1e:
                    b8:3c:2e:72:fa:90:a2:e1:a5:07:7a:10:2e:39:4e:
                    75:ba:23:df:e0:44:83:d4:f2:bd:07:d9:c9:96:e2:
                    ce:e5:3a:03:80:bb:84:af:56:c7:ee:36:11:9e:a7:
                    39:77:68:db:37:72:48:45:1d:12:0e:23:c7:5a:f6:
                    de:3a:68:61:56:50:25:da:bb:fd:21:a3:17:c8:b5:
                    d4:57:c7:4d:c8:39:a1:24:b0:57:48:df:ff:61:3b:
                    a9:cf:d8:49:71:64:06:d2:9d:ca:6a:f6:41:91:5f:
                    b7:41:cb:71:6b:46:b0:ab:f9:75:cd:d7:35:04:34:
                    31:b6:63:ef:f2:f4:f4:44:cb:25:9c:20:81:c7:dc:
                    79:0d:55:5e:67:db:f3:fb:09:34:62:40:18:a1:9d:
                    d5:2f:16:da:6a:7f:6d:30:ce:ef:c1:98:55:85:de:
                    8f:a2:2f:58:32:d2:12:8b:30:1f:4f:6d:86:48:2f:
                    de:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FA:94:F3:D1:79:AC:D6:B6:DB:AD:78:3F:E4:FC:39:D1:1F:D2:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/a6e5acc9-5bc8-349a-9aea-d0741522ed34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl

            X509v3 Authority Key Identifier:
                keyid:8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.114.0/24
                  74.115.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:f6:91:58:08:84:2b:a4:d4:20:5b:a4:81:7f:bb:f9:99:f4:
         2d:c6:39:7a:0e:59:6f:97:c3:45:47:7a:91:e0:43:2e:fd:c2:
         af:db:5e:45:d7:df:12:14:47:97:39:2f:47:d6:b7:19:f4:3f:
         30:5b:43:f1:2d:cc:4a:4f:16:9c:d1:67:88:c3:f3:38:26:14:
         a1:70:09:84:d9:80:6b:c0:66:7d:02:75:d8:1e:ca:7c:56:05:
         49:f2:a0:b0:14:79:69:2c:98:46:35:3a:e6:95:93:c4:aa:b8:
         9f:92:f6:1f:22:c2:9e:db:d1:e7:74:de:d3:3d:8e:65:aa:e8:
         6f:7f:18:64:b6:5b:4e:cb:d1:c0:d2:33:76:fc:94:c6:65:2c:
         d0:e5:2b:64:e4:0d:5f:64:04:37:f0:13:45:b5:65:cb:76:fd:
         d5:4f:b1:06:75:52:1c:20:d6:fd:d7:05:08:93:7b:b2:74:1f:
         8d:9e:38:75:14:05:b9:70:85:e5:e4:d3:10:1e:cc:ec:d2:c8:
         de:ac:62:f6:cb:f5:a7:19:d8:96:e3:2a:5a:9f:ad:d0:9e:ef:
         b7:57:38:25:85:1c:da:4e:2d:e6:b2:73:7d:8d:5d:18:60:9b:
         83:98:cd:c2:7a:7f:09:f6:d3:9e:fe:10:70:33:bc:05:8a:b1:
         37:7b:f9:19
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0NQmp11vAi64PCsDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIzMTEyODQtNDc4ZS00MTExLThkNzMtMjcxNDhhMDFm
YTIxMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk
NWI5ZDE3YjktODVmYi00YjgwLTg4ZDgtYTQ4YTAwOGY5MWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh83dJOLbp4B+g5GhHHqf3Tsoign+gAmIJYEY
KmvT/R7Q5zS/Wl6kZ2aDU/WgDNJTKpvFBlaoDPiGk4iyZPjGai614c1GVKt5UB64
PC5y+pCi4aUHehAuOU51uiPf4ESD1PK9B9nJluLO5ToDgLuEr1bH7jYRnqc5d2jb
N3JIRR0SDiPHWvbeOmhhVlAl2rv9IaMXyLXUV8dNyDmhJLBXSN//YTupz9hJcWQG
0p3KavZBkV+3Qctxa0awq/l1zdc1BDQxtmPv8vT0RMslnCCBx9x5DVVeZ9vz+wk0
YkAYoZ3VLxbaan9tMM7vwZhVhd6Poi9YMtISizAfT22GSC/eBQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBv6lPPReazWttuteD/k/DnRH9JPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lMjMx
MTI4NC00NzhlLTQxMTEtOGQ3My0yNzE0OGEwMWZhMjEvYTZlNWFjYzktNWJjOC0z
NDlhLTlhZWEtZDA3NDE1MjJlZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTIzMTEyODQtNDc4ZS00MTExLThk
NzMtMjcxNDhhMDFmYTIxL2UyMzExMjg0LTQ3OGUtNDExMS04ZDczLTI3MTQ4YTAx
ZmEyMS5jcmwwHwYDVR0jBBgwFoAUjPBojc3iLqg2nDEwEA+YdRqH274wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lMjMxMTI4NC00NzhlLTQxMTEtOGQ3My0yNzE0
OGEwMWZhMjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQASnNyAwQA
SnN1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGf2kVgIhCuk1CBbpIF/u/mZ9C3GOXoOWW+Xw0VHepHgQy79
wq/bXkXX3xIUR5c5L0fWtxn0PzBbQ/EtzEpPFpzRZ4jD8zgmFKFwCYTZgGvAZn0C
ddgeynxWBUnyoLAUeWksmEY1OuaVk8SquJ+S9h8iwp7b0ed03tM9jmWq6G9/GGS2
W07L0cDSM3b8lMZlLNDlK2TkDV9kBDfwE0W1Zct2/dVPsQZ1Uhwg1v3XBQiTe7J0
H42eOHUUBblwheXk0xAezOzSyN6sYvbL9acZ2JbjKlqfrdCe77dXOCWFHNpOLeay
c32NXRhgm4OYzcJ6fwn2057+EHAzvAWKsTd7+Rk=
-----END CERTIFICATE-----
Generated at Fri Mar 27 06:52:27 2026 by rpki-client