Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/04daeaab-f626-38bd-b6df-939acc1e5e22.roa
File:                     04daeaab-f626-38bd-b6df-939acc1e5e22.roa (raw, json)
Hash identifier:          Msq8v2AMz0f7sHd+4QXgll1PBph8/1Nms7+WgiLlmnw=
Subject key identifier:   CD:EE:6C:E8:7A:45:BE:BC:29:C0:6B:EB:5A:C1:7D:0D:3D:57:FB:05
Certificate issuer:       /CN=625741fb-b66a-49be-918d-1b4752e68175
Certificate serial:       010D0C9F4328584DCDC5A35E6415598476B6A3C0
Authority key identifier: 02:52:B4:22:B0:85:94:9B:00:FD:96:6A:0A:FC:1D:33:FA:B4:14:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/04daeaab-f626-38bd-b6df-939acc1e5e22.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     15038
IP address blocks:        74.116.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:a3:5e:64:15:59:84:76:b6:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=625741fb-b66a-49be-918d-1b4752e68175
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=f5db5c37-86d9-4ced-901b-514bd61fc64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:19:07:f6:10:c5:9a:31:0e:f5:42:71:ce:
                    74:f9:bc:33:90:ed:7a:17:ae:d9:c7:d3:d1:54:2b:
                    ac:93:dd:78:c8:bd:4a:6a:72:be:7d:f1:72:ca:2e:
                    9f:d7:c2:71:e2:18:f8:90:e4:e2:f4:d5:a5:74:23:
                    3a:19:7b:2d:64:8d:ed:34:49:97:e9:38:da:09:aa:
                    4d:f8:c3:cf:1e:cd:27:a8:d2:12:7c:d4:bc:2a:c0:
                    27:93:9f:bb:6b:12:07:7a:d2:b3:9d:3f:c2:4e:2d:
                    ce:b1:d3:d4:59:52:13:ff:af:28:88:40:69:ed:cd:
                    5d:67:20:23:6b:76:64:76:73:36:8f:0b:a2:6c:74:
                    24:6e:ff:56:ed:24:25:a0:d6:40:29:2b:77:d7:db:
                    20:f7:29:aa:85:71:1d:5b:4b:bf:06:42:e6:a3:0e:
                    22:b0:e5:34:32:f4:97:44:eb:07:9c:b0:9e:22:89:
                    fb:6c:2f:e1:3f:8b:54:89:4e:f3:ca:6c:1a:7f:5a:
                    ef:f5:3f:35:ea:75:16:b6:4d:95:38:77:a4:e0:5e:
                    cc:f5:1c:fe:08:de:af:be:eb:89:8f:37:2e:8d:3c:
                    26:b7:e0:5a:9b:53:a9:ee:f0:8d:68:22:45:a9:49:
                    84:98:5f:f1:2d:ed:c1:51:da:85:34:45:8f:83:c1:
                    e8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EE:6C:E8:7A:45:BE:BC:29:C0:6B:EB:5A:C1:7D:0D:3D:57:FB:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/04daeaab-f626-38bd-b6df-939acc1e5e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.crl

            X509v3 Authority Key Identifier:
                keyid:02:52:B4:22:B0:85:94:9B:00:FD:96:6A:0A:FC:1D:33:FA:B4:14:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:09:a3:93:9d:88:30:f0:47:b4:b9:2b:9c:2d:1c:c3:a0:e3:
         62:69:5d:aa:33:f3:5f:d8:6e:ec:b0:11:87:be:f6:5a:79:4e:
         dd:09:f1:d0:4c:f3:33:6b:68:20:2e:c3:90:83:bf:fd:2c:c0:
         15:1a:c6:0b:43:3d:48:57:9d:eb:2e:73:62:e4:2d:c7:5a:a3:
         1e:e5:67:75:97:c1:bc:4c:02:03:e5:ae:5d:5b:5b:d4:da:ff:
         73:04:13:00:d7:e3:58:26:c8:47:2e:48:69:1a:9c:b6:3e:56:
         48:e4:b2:3a:0e:a9:f0:92:0d:f2:85:dd:ce:e9:68:36:d3:bf:
         46:0e:04:b8:07:f7:99:73:4b:3d:9a:49:1c:5c:27:e2:9d:a0:
         94:f8:43:26:63:ac:03:00:5b:a9:00:96:fc:7a:b5:5a:37:46:
         7a:d1:69:71:9b:e2:ee:aa:07:6e:42:04:c6:51:6b:8e:6f:35:
         8c:72:8d:6c:33:f3:bd:e6:8c:ed:0f:ab:f7:45:fb:77:99:1a:
         77:cd:10:a4:06:c8:de:43:67:75:32:c0:9a:03:fe:ba:4e:27:
         28:f6:bd:c0:97:93:cf:47:4c:f7:96:5e:7b:c3:63:74:52:6e:
         f9:12:54:c2:26:58:08:8b:04:bd:95:7f:25:79:bf:1f:a5:25:
         fe:2a:0e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:21:32 2026 by rpki-client