Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/04daeaab-f626-38bd-b6df-939acc1e5e22.roa
File:                     04daeaab-f626-38bd-b6df-939acc1e5e22.roa (raw, json)
Hash identifier:          CpmSQs4qS7125DxKzfIe+RFOf4BCW9PSOvKRKpuCI24=
Subject key identifier:   16:F5:A4:D4:E3:45:66:8E:95:04:62:DA:8D:38:9D:FE:42:92:EB:1D
Certificate issuer:       /CN=625741fb-b66a-49be-918d-1b4752e68175
Certificate serial:       010D0C9F4328584F4973DCDDCF78F8272E07CF00
Authority key identifier: 02:52:B4:22:B0:85:94:9B:00:FD:96:6A:0A:FC:1D:33:FA:B4:14:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/04daeaab-f626-38bd-b6df-939acc1e5e22.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15038
IP address blocks:        74.116.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:dc:dd:cf:78:f8:27:2e:07:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=625741fb-b66a-49be-918d-1b4752e68175
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fff5af3b-ab19-400a-8714-e614bec0d466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a5:46:2c:d8:4d:16:cb:95:13:53:ce:16:de:
                    9e:72:8c:bd:ef:a0:14:7f:77:4e:54:88:e8:47:01:
                    e3:2f:77:eb:d6:5a:e4:f5:2d:89:1b:82:9d:b6:68:
                    0d:c1:41:12:98:37:b4:40:d0:93:6f:e6:66:30:60:
                    2f:fa:7b:68:19:e5:05:2d:f2:0f:3b:ae:4d:d6:4d:
                    79:d0:ba:ac:cb:11:cc:02:67:c7:0f:64:28:bb:6c:
                    38:66:9e:cf:66:a8:c7:a1:fb:d1:6a:95:1e:89:bd:
                    63:f7:5e:3e:4f:34:e6:13:21:ca:af:b1:ef:62:46:
                    87:86:cd:f0:14:b2:32:10:41:30:ae:b9:62:2c:ed:
                    85:e5:96:2e:ee:0f:12:01:a3:78:59:db:de:22:e9:
                    62:00:15:7c:c7:e9:0a:7c:dc:42:89:47:3f:91:9c:
                    91:be:89:51:55:2d:c8:38:b6:a7:2a:95:f5:ae:0a:
                    48:20:47:f2:1e:1b:b1:7f:07:94:da:f9:26:91:b9:
                    70:ad:7d:f4:65:41:04:f2:74:06:78:22:17:6d:ee:
                    2e:88:c2:95:69:29:5a:b9:b0:1d:a5:d9:5f:8f:61:
                    cf:70:26:42:c1:b4:bc:38:8d:c4:2b:7e:ec:04:af:
                    df:12:26:65:51:2d:d3:e3:90:56:d1:5f:a4:de:dd:
                    65:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F5:A4:D4:E3:45:66:8E:95:04:62:DA:8D:38:9D:FE:42:92:EB:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/04daeaab-f626-38bd-b6df-939acc1e5e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.crl

            X509v3 Authority Key Identifier:
                keyid:02:52:B4:22:B0:85:94:9B:00:FD:96:6A:0A:FC:1D:33:FA:B4:14:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:57:83:8c:d5:92:d3:11:a4:82:0f:d6:41:8b:e3:27:df:c9:
         19:2d:93:51:43:1c:54:2f:89:6f:b6:ff:49:87:99:ec:50:0c:
         ee:6d:53:40:51:cc:94:7c:00:bd:9c:5f:19:94:38:85:24:6d:
         d7:69:07:c9:05:34:16:3d:28:2d:02:b6:fb:2b:29:a3:8b:00:
         7f:09:70:f9:b1:03:a0:2d:23:19:a7:85:d4:da:64:9b:58:5f:
         7c:70:02:96:44:94:13:1b:7f:db:19:9b:0a:70:67:12:e9:e3:
         a7:7d:51:ab:43:60:8d:82:66:77:44:6e:e5:b4:c7:cf:a6:31:
         4e:58:36:8b:9a:f5:76:c1:ee:e6:3c:40:34:ec:e9:d9:60:cc:
         e6:cf:11:41:85:3c:63:dc:35:99:8f:ef:1b:a6:90:b8:08:e6:
         9a:7e:f8:4b:c0:6f:cd:d9:e5:59:68:a7:60:7a:91:88:0e:f0:
         d5:44:db:c3:e0:a3:d5:9b:da:9f:a9:b2:1c:e2:9e:67:5c:de:
         83:8b:da:d0:1a:0e:4f:f2:4a:17:1f:8c:78:7d:09:29:87:12:
         0c:15:40:60:c3:09:d8:20:a2:5f:1a:93:cd:46:34:0b:d4:a5:
         03:75:9e:dd:7a:b2:1a:78:61:50:61:17:02:a4:00:d8:b4:5f:
         3e:58:59:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:30:03 2026 by rpki-client