Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f1a73c44-5e2f-3d55-be64-76583a4fc258.roa
File:                     f1a73c44-5e2f-3d55-be64-76583a4fc258.roa (raw, json)
Hash identifier:          I9CxvPEpJ1Kzf9tDqE69j66YDRxUafXfK71FmlJLQLE=
Subject key identifier:   F7:A9:AA:E2:9A:40:25:A3:27:B6:DD:FD:09:72:20:FB:45:54:BA:8E
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F4328584D95F0036101CA9B9C48FD8D00
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f1a73c44-5e2f-3d55-be64-76583a4fc258.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     33392
IP address blocks:        74.116.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:03:61:01:ca:9b:9c:48:fd:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=60a195e9-d189-4c83-9e7b-a31f699981f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:dc:89:94:50:29:ef:ba:83:58:43:81:ed:bf:
                    e8:b5:b1:94:15:95:26:0d:ea:28:95:ac:51:e6:53:
                    48:f3:c5:40:37:4d:da:83:4c:5b:9e:70:2f:72:79:
                    ea:7d:9e:db:f8:ea:33:85:cb:2c:92:55:8a:04:0a:
                    10:e8:65:57:3a:46:49:70:c5:84:44:65:0b:9d:c1:
                    85:9c:02:f8:8f:4c:34:6e:b6:b2:c2:16:94:1b:aa:
                    a3:21:5e:bf:2c:6f:16:e6:96:93:1f:08:a1:f9:18:
                    b8:1d:5d:97:cc:b7:fa:98:d3:cd:71:a2:9d:ba:95:
                    65:8f:28:b4:9c:6e:53:ec:06:8b:f4:ba:d9:27:2c:
                    4a:6a:ac:77:a1:2a:91:73:4b:b4:e8:86:fd:75:3c:
                    eb:5e:a3:f0:65:da:c6:10:bc:d4:fd:62:6b:45:d7:
                    25:b8:0e:6a:dc:10:4d:0c:9c:70:da:6b:14:b1:c6:
                    a7:8a:ea:49:95:83:00:dd:f8:2f:71:a5:c3:62:ac:
                    86:3a:5d:3f:11:d1:ae:c4:3f:b0:28:27:fe:5b:34:
                    24:8d:3c:a7:bd:2f:23:2f:c8:98:6a:e0:44:2d:1c:
                    6b:38:a1:09:af:d0:2c:36:2e:07:a5:13:13:29:a1:
                    d2:ac:c9:f2:5b:1b:09:bc:d9:a7:2b:e5:26:3f:36:
                    18:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A9:AA:E2:9A:40:25:A3:27:B6:DD:FD:09:72:20:FB:45:54:BA:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f1a73c44-5e2f-3d55-be64-76583a4fc258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:cb:9e:15:9b:cf:b5:69:80:28:f5:bc:c2:5e:bf:35:c8:39:
         9f:90:be:5d:ba:c6:52:4e:76:76:73:70:ae:f9:86:ed:43:2c:
         6e:57:b7:ea:09:b0:75:72:ce:aa:a8:3e:19:4f:3c:9f:f4:a1:
         b5:72:d4:ef:2e:98:9a:bb:f2:a1:04:8a:68:f7:db:c2:11:7c:
         31:45:dd:92:93:cd:ee:6a:97:78:78:a8:fc:1f:9c:31:a4:f5:
         7a:42:57:6e:91:b8:3e:0a:cd:3d:92:d2:91:e8:b8:6a:7d:06:
         d0:3d:bb:a1:14:b0:f0:49:5c:1d:0f:d3:77:78:fc:3b:83:ce:
         e8:04:14:4b:3e:45:62:d4:c1:09:b9:fb:50:7f:e0:85:d9:24:
         bd:7e:e7:ea:30:5d:41:37:d0:fc:07:a2:52:1c:33:03:c8:09:
         c8:d9:7d:9c:fb:91:47:73:4c:ae:db:bb:f8:a4:27:be:64:b2:
         95:57:f0:84:42:66:d3:b4:47:72:e7:ba:3c:a0:e0:7d:a2:6d:
         da:c7:8f:1b:92:3e:bf:24:2d:b4:58:57:d5:8a:c6:43:a7:61:
         f9:e8:0d:17:39:0d:42:28:19:17:f9:5d:2b:b7:1a:b3:5e:10:
         9c:e3:f9:a3:c3:8c:cc:e3:bd:f8:7a:b9:59:3e:cf:9d:cd:01:
         2c:5a:2b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:33:42 2026 by rpki-client