Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/b063f877-0e80-3cc1-8508-c11793f64c6b.roa
File:                     b063f877-0e80-3cc1-8508-c11793f64c6b.roa (raw, json)
Hash identifier:          TEOcaIHuzpjaRpRl+XPudcTEDi0ll0ixkOml1a5oEW0=
Subject key identifier:   A9:51:7F:0A:A2:F9:8C:88:BC:22:B7:70:56:AF:DA:D5:B5:23:FE:49
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F4328584D8AC5376A7C2A983ACF0D6960
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/b063f877-0e80-3cc1-8508-c11793f64c6b.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     399122
IP address blocks:        74.123.96.0/24 maxlen: 24
                          2602:fcd5:2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:37:6a:7c:2a:98:3a:cf:0d:69:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=d58b7f75-664a-4516-9ea3-021e0bfdb7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:59:a2:70:79:e4:ab:99:22:bd:35:d0:e2:8a:
                    74:50:7b:90:13:e9:e0:a4:2d:f4:4e:6e:03:dd:d3:
                    75:4c:db:0b:04:5a:70:30:2f:d4:d3:40:86:ae:e6:
                    25:76:3c:07:38:e1:a0:ed:07:85:62:c6:d0:bb:85:
                    f6:39:dc:ad:1b:4a:71:70:90:b3:2f:42:86:6d:ee:
                    ba:a1:48:10:26:82:18:e0:e5:47:74:5f:5d:7c:07:
                    46:29:bf:bb:8b:e5:7d:0a:59:70:07:f7:cb:ec:a0:
                    51:00:2d:b8:9a:ad:58:84:00:bb:c7:6f:68:0a:38:
                    00:77:04:20:ef:f0:b8:8b:80:e3:28:1a:d3:c5:4b:
                    7f:a5:89:93:5b:ba:a0:20:76:51:8a:34:26:b1:d5:
                    52:a1:e8:b5:c8:11:7f:b8:cc:21:82:13:1b:2e:6b:
                    21:38:6e:cb:08:72:f0:ba:18:27:de:05:11:c8:e2:
                    72:2a:e5:a4:8b:ce:81:a8:26:d2:a7:d2:56:49:3a:
                    80:5f:3e:17:bd:86:7e:f4:9c:3f:71:d5:e9:45:37:
                    05:18:bc:44:60:27:d7:1a:23:9d:3b:ab:10:01:52:
                    5f:af:49:95:b9:f0:e4:fe:7e:08:57:8a:40:2e:91:
                    d6:8b:a8:e2:8a:77:3e:0e:79:0c:2d:e2:c0:ea:22:
                    06:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:51:7F:0A:A2:F9:8C:88:BC:22:B7:70:56:AF:DA:D5:B5:23:FE:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/b063f877-0e80-3cc1-8508-c11793f64c6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.96.0/24
                IPv6:
                  2602:fcd5:2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:0b:f8:65:3c:1b:53:b2:a2:99:b2:a0:74:17:bb:4f:63:a0:
         3b:b0:40:bc:81:98:a3:b1:68:41:21:be:49:08:c7:73:84:44:
         92:8d:fb:85:9c:25:d6:37:83:df:ba:53:a7:4a:31:7b:00:63:
         16:40:b0:71:64:9d:b0:34:5c:17:68:b6:19:3b:aa:95:ba:d7:
         c8:e2:39:4f:0d:07:ae:8e:54:37:a0:05:d3:71:70:4b:54:14:
         68:05:fd:92:84:cd:5e:87:18:d9:df:7c:5d:4b:b9:01:c5:9e:
         ab:67:bb:a3:8b:49:b0:78:cf:40:ac:0a:b1:01:cf:56:b1:ca:
         fa:bd:e5:86:3a:4b:c6:ca:55:96:c4:e8:e2:71:e3:33:92:55:
         c2:d1:6f:22:f7:6c:80:a6:8b:7f:52:6e:f1:4a:a6:cb:9d:90:
         bc:2a:1d:f3:7f:d7:98:9b:44:88:59:97:d0:5f:25:fd:e2:9b:
         01:46:1c:0c:7b:ce:04:8c:3e:22:5b:b1:ab:85:d2:47:13:62:
         6c:80:c5:62:44:88:06:3c:31:b8:d5:bd:99:e4:e7:97:77:01:
         6c:1c:d4:18:c3:7b:5e:22:0f:c7:5a:ef:3c:22:4f:f0:95:aa:
         9e:b9:6a:40:c4:c7:d3:d3:c8:d7:3b:45:7b:d9:12:58:7d:50:
         df:f0:8e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:46:19 2026 by rpki-client