Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa
File:                     2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa (raw, json)
Hash identifier:          uesY09tCWfxmLN04AKRYewZHommAUWbzLmah8AZUYQI=
Subject key identifier:   77:4F:D2:EE:FA:67:DF:DB:FE:0C:74:24:11:C3:63:6B:73:CE:13:B6
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584E35FF1D478C232E7F80443600
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     8560
IP address blocks:        74.208.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:1d:47:8c:23:2e:7f:80:44:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=648697be-6595-410f-9c32-635a01f365ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a8:0b:de:de:73:65:88:c7:3a:b8:e7:55:69:
                    23:6d:58:39:94:bc:e8:3b:e5:c6:c1:dd:2f:42:0c:
                    22:8b:a3:9c:64:66:5b:0f:05:17:79:de:e4:b3:3e:
                    6e:24:06:74:c9:83:44:be:51:75:20:a1:a2:a2:70:
                    1d:9e:9b:87:b3:ea:17:51:d0:c2:7c:f6:43:9c:5a:
                    bf:8b:7e:b8:f1:08:bb:17:7f:e1:34:79:87:24:b1:
                    71:f9:95:aa:c7:2a:4f:8d:5c:d4:51:79:72:31:f3:
                    3d:57:54:af:f8:4e:20:e6:89:ae:73:8b:63:ca:b2:
                    90:c6:1f:9d:67:b7:ee:38:27:e8:8e:ef:38:9f:f5:
                    49:75:76:43:d9:96:98:69:cd:71:79:69:94:b8:14:
                    1f:d5:1f:99:d7:7e:48:c5:83:4b:ee:46:6a:2a:82:
                    27:16:89:e7:22:5a:14:6b:f7:65:1a:6d:f6:61:4c:
                    b9:27:63:ea:44:cf:ee:8d:c4:98:b1:c1:97:b6:c5:
                    97:14:61:17:88:e1:ae:85:70:ad:c3:8e:6a:a2:dc:
                    e7:e0:c3:34:d4:58:01:a4:7b:ac:6a:4f:9f:28:ee:
                    3d:72:6e:05:36:47:72:44:b2:66:2a:dd:eb:32:b3:
                    22:02:9a:5e:5c:53:bf:06:9e:28:b0:f0:a1:5d:c1:
                    3b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4F:D2:EE:FA:67:DF:DB:FE:0C:74:24:11:C3:63:6B:73:CE:13:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.208.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:43:47:4d:9f:41:4b:a1:90:93:af:a6:88:c8:4f:2c:91:74:
         0f:25:02:e3:9e:77:42:47:3d:37:9f:51:b3:53:c2:ea:e5:4e:
         a3:a7:15:82:c2:ca:aa:f8:21:58:18:a6:5e:fb:e0:a6:3a:89:
         2c:62:2f:60:0f:d6:1b:35:0f:56:0e:e3:3a:fa:33:b5:cc:75:
         5e:55:34:9d:64:ee:de:46:0d:54:67:44:5f:94:77:ee:a9:3b:
         c7:44:7b:73:60:5a:32:17:40:2a:e4:ee:7b:e4:36:84:ce:ff:
         56:e4:19:a8:8b:17:76:d2:3f:a1:4e:61:20:1d:3e:ed:a5:c1:
         20:3b:eb:eb:50:c8:3b:e4:a2:91:77:6a:83:eb:df:c6:76:96:
         d5:dd:df:e6:5e:59:e2:d7:15:66:e6:21:4e:71:b5:f0:a0:03:
         df:d0:dc:3c:c4:e2:b3:46:f1:a9:a3:2c:94:04:11:98:93:43:
         31:cc:8c:ed:12:58:c8:d5:b2:4e:e0:4b:89:c8:0e:c4:e8:f0:
         67:7f:e7:30:48:87:fe:59:b4:f2:06:ad:3e:22:e7:ad:07:64:
         ea:00:2f:f1:7d:e2:ea:6f:ab:b8:b0:64:67:72:9f:17:af:c4:
         ca:06:10:3d:c1:16:ea:dd:4c:69:bd:5e:aa:75:b6:79:18:37:
         b1:3b:92:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:04:07 2026 by rpki-client