Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/e81fa278-9b3b-35b1-aedc-6e34d2e22243.roa
File:                     e81fa278-9b3b-35b1-aedc-6e34d2e22243.roa (raw, json)
Hash identifier:          8tW6bJe6lurPAVm9MCYpjpauEH9lpv/sy8tg2cCYnvs=
Subject key identifier:   8E:8A:E1:99:21:BA:0E:51:28:53:FB:E9:4A:3A:D8:66:2A:49:54:DD
Certificate issuer:       /CN=9fb6ebd5-02ff-4a14-8559-e09bdf5de60f
Certificate serial:       010D0C9F4328584FC301261A652B34A5592D9FC0
Authority key identifier: 07:FD:E2:DF:53:CD:29:B6:88:CF:CF:1B:03:16:94:BF:4A:EF:B0:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/e81fa278-9b3b-35b1-aedc-6e34d2e22243.roa
Signing time:             Sat 07 Nov 2026 14:00:12 +0000
ROA not before:           Sat 07 Nov 2026 14:00:12 +0000
ROA not after:            Fri 05 Feb 2027 14:00:12 +0000
asID:                     8075
IP address blocks:        74.200.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c3:01:26:1a:65:2b:34:a5:59:2d:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb6ebd5-02ff-4a14-8559-e09bdf5de60f
        Validity
            Not Before: Nov  7 14:00:12 2026 GMT
            Not After : Feb  5 14:00:12 2027 GMT
        Subject: CN=4809f2cf-3e50-4533-8a0b-92ab6f4b95ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9f:09:27:49:d7:55:cf:76:64:0f:d4:fc:7d:
                    2a:1a:e8:42:da:6f:a1:2a:c2:5c:7e:11:f9:10:bb:
                    bd:7b:a9:1e:2c:ee:d3:75:69:70:b8:96:aa:9a:95:
                    0a:7c:7a:4e:46:03:c4:88:21:f1:1e:93:dd:6d:3e:
                    40:ef:d6:7e:57:30:08:59:ab:c3:95:e1:09:13:20:
                    ee:32:84:cb:19:bb:2f:b6:0c:13:ec:e1:cf:dd:ab:
                    4e:58:69:1d:c9:66:95:38:e2:42:6f:70:aa:9d:1a:
                    88:a0:7b:77:fd:f7:1a:eb:72:62:3d:75:dc:78:89:
                    72:d0:59:b0:2f:bb:ef:fa:92:3d:b0:49:96:eb:a7:
                    84:2b:b2:c0:f6:e7:47:7e:d3:03:4b:4a:f3:70:95:
                    60:9d:0b:3d:f6:52:62:48:33:dc:91:bb:fb:82:c6:
                    f3:16:2b:88:18:c5:ad:85:1f:d7:5a:11:1d:d3:b5:
                    99:53:95:5b:27:ae:45:67:e4:cb:e8:39:ee:14:4f:
                    e0:8d:9f:ca:f6:a1:18:b0:13:e1:36:5d:33:b0:ff:
                    6d:6d:eb:5c:00:db:44:9e:4d:72:f7:d7:df:30:1b:
                    bd:df:b9:3f:ab:c9:1a:b1:01:ab:83:89:fd:9e:f2:
                    8c:3a:72:f5:64:70:1c:f1:1c:09:53:b6:7e:2a:c6:
                    d0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8A:E1:99:21:BA:0E:51:28:53:FB:E9:4A:3A:D8:66:2A:49:54:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/e81fa278-9b3b-35b1-aedc-6e34d2e22243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.crl

            X509v3 Authority Key Identifier:
                keyid:07:FD:E2:DF:53:CD:29:B6:88:CF:CF:1B:03:16:94:BF:4A:EF:B0:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fb6ebd5-02ff-4a14-8559-e09bdf5de60f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.200.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:bf:fe:38:f8:7d:5e:e4:99:b4:cd:a9:83:e9:78:72:84:eb:
         bf:bd:4a:68:0b:9d:ed:3e:64:66:5a:5b:cd:58:82:20:d4:fc:
         2a:6d:f6:9e:d8:9d:f4:80:30:b3:f9:c4:c1:8d:c9:f5:8d:86:
         c9:0b:84:7a:6e:ad:96:b1:4f:e0:03:91:8e:3f:2a:c4:ef:cf:
         d3:47:d0:1b:09:68:ed:43:da:d1:3f:70:59:94:3b:ac:55:14:
         47:ba:13:61:54:17:b7:48:17:e2:8c:43:f2:08:0a:c5:da:7d:
         f7:17:55:e2:9a:d3:8c:a1:39:75:44:25:69:51:b5:5e:1d:45:
         d5:3a:cc:86:ef:cc:2a:1c:29:87:cc:2b:e5:4b:81:5a:43:0a:
         80:48:f9:38:99:cc:c9:98:c3:6e:0b:4f:e6:97:d1:aa:04:d7:
         c7:13:8a:7f:c6:56:6d:78:29:83:36:be:a4:46:7e:99:4e:c7:
         72:6a:a3:8c:6d:dc:23:22:d1:ee:37:47:d8:55:bb:7e:db:08:
         f4:5b:90:32:db:c8:40:46:af:67:64:44:16:3d:5e:e4:c8:4a:
         4d:5c:5d:3b:eb:43:87:a1:2b:bd:df:35:ba:da:68:1d:43:3e:
         12:d0:ba:c7:3f:de:57:58:9a:93:f2:e9:9d:5f:2b:84:03:c9:
         2c:7b:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:47:27 2026 by rpki-client