Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/490e40f9-36a1-3d80-91b1-b67f36065073.roa
File:                     490e40f9-36a1-3d80-91b1-b67f36065073.roa (raw, json)
Hash identifier:          tcpeC1zrvkNO4U+T3a8MXvHHMgcr1qq6lbCR7RfUzBg=
Subject key identifier:   74:C5:08:29:FC:09:B4:8A:97:11:3D:8C:82:A5:28:5E:09:47:F6:9D
Certificate issuer:       /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
Certificate serial:       010D0C9F4328584D2A74C7AA1C233A5C63002A40
Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/490e40f9-36a1-3d80-91b1-b67f36065073.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     54668
IP address blocks:        174.137.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:c7:aa:1c:23:3a:5c:63:00:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=62cad248-7153-422d-8990-81daf12a0456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:17:d4:70:4b:eb:ff:55:9e:9f:3f:ef:ef:eb:
                    e5:5b:7d:7b:ae:fa:12:c6:45:ae:ed:17:27:66:4f:
                    67:a9:58:66:fd:ef:07:91:d4:e8:04:f4:5a:fd:ed:
                    d3:a2:dd:c2:0d:94:4a:f0:80:81:7f:bb:bf:8b:4d:
                    b4:84:c1:57:20:2e:0d:54:04:6c:67:3e:09:6d:b7:
                    1d:31:bf:72:69:ab:53:5a:d9:0e:5d:47:63:cc:41:
                    48:60:63:1a:d4:36:71:8f:99:9b:69:c5:6f:42:a9:
                    c3:f4:ac:2c:0f:6a:fe:51:a7:28:ae:85:4f:b5:ef:
                    10:24:b2:ab:65:63:e2:2b:82:03:f5:61:9e:44:e8:
                    48:89:f9:0c:69:55:b1:c6:ed:8a:a5:dc:86:48:b8:
                    c7:14:20:6e:81:67:e0:3f:e4:c9:e8:8f:69:77:ff:
                    5a:1e:92:84:0a:2d:60:11:f8:3f:3a:7d:a3:64:19:
                    35:ac:c7:d8:7f:d6:75:a7:82:aa:d3:46:fc:ac:e4:
                    bb:7d:c5:4d:ec:40:5e:35:e4:23:90:5c:ce:2d:84:
                    39:9b:6e:eb:17:5b:83:f6:ae:ea:06:69:72:bf:27:
                    90:17:a5:dd:ec:c9:b6:e6:0c:50:1e:c6:8b:f5:07:
                    43:ad:fb:ee:b5:f1:4a:b6:0e:8e:56:f5:48:57:98:
                    3a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C5:08:29:FC:09:B4:8A:97:11:3D:8C:82:A5:28:5E:09:47:F6:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/490e40f9-36a1-3d80-91b1-b67f36065073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl

            X509v3 Authority Key Identifier:
                keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:c5:7c:c7:17:3a:69:3e:5c:9f:3d:db:47:ff:6e:70:9b:f5:
         1c:71:04:f2:8c:0e:a3:de:a3:98:34:92:67:ef:6d:2e:ee:86:
         f5:21:a3:f7:3d:9c:9b:c3:8f:8d:b8:1f:6c:08:bb:99:03:64:
         f6:17:3e:d2:fd:81:11:22:80:c0:20:72:9f:2f:53:7c:c0:07:
         0c:38:d2:ce:e9:1f:d9:7c:8a:1e:2c:0a:12:81:cc:0a:a1:3d:
         3b:ad:a0:6d:5c:96:4c:d6:ed:88:11:4f:eb:6b:cc:f9:07:82:
         7f:08:8a:a0:35:2b:00:c2:c7:ef:5c:ae:4a:9c:75:53:46:14:
         6a:ed:49:70:f6:de:eb:fe:82:ef:52:15:ad:e1:1e:d7:7d:26:
         0d:91:00:c3:ba:f5:fe:4b:95:55:27:f0:50:c2:bf:2b:ff:a7:
         ff:35:0f:56:13:e6:43:86:cc:09:3e:46:9f:8d:fe:30:5b:4b:
         6a:05:34:69:48:4d:81:ac:c0:f4:00:99:4b:45:ed:13:03:a6:
         b4:3c:19:31:b2:d5:16:36:2f:e1:82:0e:1c:12:75:c8:45:0b:
         bc:10:a8:8b:dc:d9:2a:d8:63:c3:c9:78:1a:e2:94:32:42:61:
         dc:af:4a:b5:8e:c1:11:f9:43:8d:51:8a:f5:15:9d:c7:7b:1f:
         a4:f9:c3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:45:32 2026 by rpki-client