Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/74a53bf6-3784-3907-8de9-6c6a2dcad5f9.roa
File:                     74a53bf6-3784-3907-8de9-6c6a2dcad5f9.roa (raw, json)
Hash identifier:          zOakGJ/sgtsT1tSJ0TrUMBJ1BRQnE7RQxTh+Bacb1bE=
Subject key identifier:   ED:DC:40:98:B6:A5:82:F7:C8:94:BA:6E:E9:57:D3:22:7B:07:33:55
Certificate issuer:       /CN=0699cec8-3851-41f8-aee8-2e225865699c
Certificate serial:       010D0C9F4328584D297AA5BAB12E0CB8EF485680
Authority key identifier: 04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/74a53bf6-3784-3907-8de9-6c6a2dcad5f9.roa
Signing time:             Sat 14 Mar 2026 04:36:50 +0000
ROA not before:           Sat 14 Mar 2026 04:36:50 +0000
ROA not after:            Fri 12 Jun 2026 04:36:50 +0000
asID:                     11911
IP address blocks:        170.61.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:29:7a:a5:ba:b1:2e:0c:b8:ef:48:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0699cec8-3851-41f8-aee8-2e225865699c
        Validity
            Not Before: Mar 14 04:36:50 2026 GMT
            Not After : Jun 12 04:36:50 2026 GMT
        Subject: CN=ba6f91df-d0e6-46b1-bf52-b41c95bd2f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cc:9c:4c:18:ff:35:d8:4f:09:c4:2f:60:7c:
                    45:ad:fe:8d:0e:ec:b4:23:9e:29:ab:19:29:ed:27:
                    71:a4:4a:bb:c3:7d:a2:cb:11:53:13:3b:bb:fd:fc:
                    28:20:5b:4d:77:87:9d:c5:8c:48:0e:84:ac:e9:f8:
                    b7:08:8b:a4:db:7c:19:0b:45:bc:4a:76:ef:d2:e2:
                    d7:3b:4f:ab:1f:4a:b3:15:27:89:4d:31:8d:1f:c6:
                    d7:41:9a:63:f9:85:12:b7:cd:f5:70:ab:04:61:c5:
                    eb:73:b4:07:35:29:e1:a5:a2:1a:5e:69:af:72:0c:
                    29:8d:fe:65:b8:d0:67:c9:57:8f:ed:0c:46:48:60:
                    9c:16:da:30:3b:ff:38:76:70:04:58:0c:52:4c:50:
                    66:4f:d6:07:23:ab:96:e9:d2:e3:32:82:e9:a6:d6:
                    e2:12:8b:57:ae:c5:ae:62:49:a9:38:0c:64:85:be:
                    6c:68:e0:be:f8:dc:9a:9b:33:be:65:d9:91:18:af:
                    c6:3f:24:73:d2:65:03:06:1c:cd:bb:95:f8:5f:03:
                    65:7e:a6:fa:26:5d:2a:dd:37:55:d3:63:26:73:0a:
                    20:b3:a2:f5:de:b3:73:bf:e6:d8:c0:1e:f1:e2:2c:
                    a5:75:4a:bb:05:69:40:a5:a6:14:cf:68:f4:7f:b6:
                    14:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DC:40:98:B6:A5:82:F7:C8:94:BA:6E:E9:57:D3:22:7B:07:33:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/74a53bf6-3784-3907-8de9-6c6a2dcad5f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl

            X509v3 Authority Key Identifier:
                keyid:04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.61.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:95:5b:74:30:a5:e8:c5:62:2a:28:95:37:53:a1:9a:52:ca:
         04:64:10:65:d7:e3:c6:76:81:65:cb:27:67:bf:ac:38:ab:8a:
         93:d8:4c:81:92:d9:df:51:e0:b3:3b:a6:eb:83:3b:14:fe:99:
         14:91:a5:f8:fa:95:27:72:54:9d:dd:b6:48:72:5e:95:77:da:
         e3:ae:7d:d8:1a:ca:5f:91:33:cc:a8:4d:67:5d:df:eb:c2:ab:
         39:20:12:e0:ea:c3:7e:a7:d6:91:ce:08:3f:82:31:00:9e:6c:
         09:7c:88:c0:75:4b:8b:af:c7:74:a7:f1:71:c9:aa:8f:e9:37:
         60:c9:66:a1:fe:b7:9c:28:e9:a8:1c:c8:3b:99:10:b0:8d:61:
         78:3d:b4:b4:43:cc:c3:cb:e5:a6:e0:a4:2f:77:99:11:8f:a1:
         43:2d:09:da:d9:2e:79:34:fe:6d:c9:de:4f:6d:92:81:1c:6d:
         f5:e5:b5:25:c4:ff:d5:d9:a2:0a:1d:73:25:03:f9:7e:1d:16:
         51:aa:85:4a:18:00:84:6a:c0:89:40:fa:86:c1:9c:e8:10:53:
         07:ec:eb:29:de:61:72:d3:ae:2f:77:4e:b0:0e:70:d2:44:6c:
         fd:be:2c:38:e6:17:89:5b:5b:80:2c:81:ba:6f:34:12:9d:e8:
         93:a9:b9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:56 2026 by rpki-client