Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/fd3ea4a4-fe45-3c6b-bc51-7f53182106f7.roa
File:                     fd3ea4a4-fe45-3c6b-bc51-7f53182106f7.roa (raw, json)
Hash identifier:          eAU8rWKawbDs+IjJvjLqLIhK8Ab6yWKAvkQVCu5sn2A=
Subject key identifier:   E8:14:CD:90:BC:82:51:54:4F:CF:EC:65:90:93:F4:34:E1:BB:4F:AF
Certificate issuer:       /CN=6038e2ed-90e4-4896-8a5b-2db43376a32c
Certificate serial:       010D0C9F4328584D386A4B6698D045D5BA1FE900
Authority key identifier: 29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/fd3ea4a4-fe45-3c6b-bc51-7f53182106f7.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     21723
IP address blocks:        74.49.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:4b:66:98:d0:45:d5:ba:1f:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6038e2ed-90e4-4896-8a5b-2db43376a32c
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=58783ae5-e2be-421f-b0c1-8f01b6d24ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d2:7c:41:ac:46:81:08:81:ff:c1:a2:70:33:
                    b1:49:43:8c:72:a9:d6:14:2e:66:db:ae:ab:cd:c3:
                    a3:fc:b3:57:a9:8f:d1:76:e4:a0:6c:ee:72:a5:21:
                    db:da:18:db:5f:12:c4:a7:a3:65:7a:3e:fa:24:98:
                    09:a2:af:00:72:c7:6d:c8:8b:fa:fe:88:d4:cf:d2:
                    53:e5:76:31:91:a0:68:c4:e0:fd:7c:9b:ff:b2:e6:
                    8e:db:8c:6b:a9:f9:22:32:ec:8c:48:8f:42:68:12:
                    50:4b:64:28:62:ca:2d:1c:bf:de:57:84:4b:63:78:
                    19:6f:16:36:da:64:9d:fd:d6:bd:cf:ad:67:77:b5:
                    3b:a4:06:e3:7d:31:17:d1:f7:ad:f2:c2:22:7c:ea:
                    65:4e:6f:05:85:17:60:ae:46:f3:69:47:ba:e3:24:
                    9c:9c:8a:45:d5:0e:e6:48:9c:cd:17:67:ce:3b:e4:
                    f7:9f:90:9c:e5:50:9e:60:fb:58:9d:af:65:f0:6e:
                    70:a4:d2:d3:7b:91:76:dc:98:80:b0:cb:55:57:64:
                    a7:5f:86:7d:f2:cd:1a:77:78:76:12:34:30:1e:9a:
                    31:f7:78:85:c8:a9:a2:a9:d9:cd:68:72:4a:f7:55:
                    d3:f8:03:af:57:a6:c3:a5:99:23:88:9b:f3:a3:e1:
                    98:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:14:CD:90:BC:82:51:54:4F:CF:EC:65:90:93:F4:34:E1:BB:4F:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/fd3ea4a4-fe45-3c6b-bc51-7f53182106f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl

            X509v3 Authority Key Identifier:
                keyid:29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.49.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:3d:62:d4:c6:a6:c2:d4:19:88:8f:9c:8a:bc:dc:d0:08:0b:
         78:57:eb:ac:08:87:95:ad:f9:3c:09:f6:15:08:82:2b:be:dc:
         a8:00:ff:0d:0c:65:46:f0:58:3b:f3:2e:7b:a9:d4:66:a0:53:
         43:41:57:c8:c8:ac:c5:98:ea:ca:df:87:fb:3a:d1:07:e4:62:
         25:a2:ae:cd:54:c5:8f:23:2e:52:fc:0b:96:c5:ab:97:c1:97:
         44:53:52:2b:27:b8:ec:07:8b:52:ab:ac:d4:b1:3b:2c:f0:71:
         eb:3b:a7:eb:00:af:75:9d:0b:4f:b2:bc:c2:1f:ac:a5:9c:eb:
         f7:30:6f:2d:7c:b7:19:ba:bf:fd:56:5e:9e:fe:64:42:28:87:
         7b:e8:14:9b:4a:b5:3d:65:b2:07:2b:c5:e6:16:2d:5d:d0:cd:
         6e:a5:ba:c2:dd:e5:82:bd:8f:c2:c5:ba:54:ed:02:ce:61:35:
         52:ec:3e:e1:91:7b:2c:af:07:76:9d:02:8a:bb:54:d6:43:89:
         61:fd:6c:b3:53:ed:7a:1e:ad:05:a6:78:1b:5b:71:b6:5f:51:
         c3:ef:e4:85:3e:fb:12:10:c4:d1:a2:b4:f4:cd:03:47:29:a8:
         f2:71:02:4c:e1:ca:18:39:00:37:bb:7c:51:89:a4:d2:9b:43:
         dd:be:71:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:21:53 2026 by rpki-client