Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/f75a4e02-8507-3c2d-8626-a4939f673e3a.roa
File:                     f75a4e02-8507-3c2d-8626-a4939f673e3a.roa (raw, json)
Hash identifier:          A3xxr4FiK75h8S2ibJl6u+kZZa2kqQFNXcEKLci+Oh8=
Subject key identifier:   E7:3F:D3:3D:D6:14:F2:AE:A8:36:C5:16:D3:41:31:08:71:DB:2B:6F
Certificate issuer:       /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial:       010D0C9F4328584D24DF984E5A1A89EFDA7886F0
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/f75a4e02-8507-3c2d-8626-a4939f673e3a.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     6079
IP address blocks:        74.118.171.0/24 maxlen: 24
                          74.118.173.0/24 maxlen: 24
                          74.118.174.0/24 maxlen: 24
                          74.118.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:98:4e:5a:1a:89:ef:da:78:86:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=6ae42c43-3e71-4155-a8ce-8c0ff535ac6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1c:99:5d:a2:a6:3f:3e:32:37:63:ad:25:11:
                    10:a5:8b:00:55:98:e6:93:57:38:c6:72:fb:86:e6:
                    30:6b:4b:6f:11:aa:3d:df:01:11:4f:67:cb:2f:83:
                    57:84:01:ca:f2:76:19:92:51:9e:69:c4:3c:ca:33:
                    58:a8:6d:ce:e2:99:1c:c1:5a:58:54:01:5e:1d:4d:
                    b7:f0:16:c7:8f:1a:17:67:96:bd:fb:0a:60:b3:db:
                    8c:b3:50:53:fe:ee:00:27:f2:b5:a0:ba:f9:e0:15:
                    f6:39:42:da:70:9c:be:b9:51:fa:d4:b3:a1:a6:c7:
                    e4:cd:d0:16:d2:9e:f4:19:31:37:3b:30:2e:40:95:
                    3f:d6:cf:94:91:a3:d5:49:e3:3a:a2:01:82:b4:09:
                    18:5b:4c:bb:70:93:42:5a:cb:25:81:1a:29:9f:9e:
                    c2:7a:a8:0b:c6:f2:15:b3:56:0b:51:f3:9e:66:09:
                    ca:ab:10:ae:52:fd:94:e0:9f:9e:4f:6b:11:14:54:
                    51:58:bc:6e:d7:9e:0a:21:6d:bc:29:68:f3:28:70:
                    bd:21:57:f4:c2:2d:8a:62:5d:63:d5:ae:e7:04:82:
                    e7:61:97:31:8a:3c:f0:c7:52:d2:37:e1:7b:29:44:
                    6a:c8:6b:2e:61:ac:e0:ef:9d:38:5a:7a:3a:45:df:
                    05:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3F:D3:3D:D6:14:F2:AE:A8:36:C5:16:D3:41:31:08:71:DB:2B:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/f75a4e02-8507-3c2d-8626-a4939f673e3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl

            X509v3 Authority Key Identifier:
                keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.171.0/24
                  74.118.173.0-74.118.175.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:50:d1:ab:78:bd:eb:25:3a:12:b5:f5:5a:24:65:62:26:40:
         22:7b:76:25:8f:b3:2f:90:b6:e2:1f:46:c8:07:f5:b3:1f:24:
         da:97:d7:d4:e8:bd:6b:cf:3f:17:4b:13:d2:8a:6b:8c:60:11:
         8a:4b:82:0e:63:50:66:48:d4:0e:88:40:2a:ed:0f:72:8f:b3:
         b6:0b:6c:d7:eb:e1:b3:d5:00:46:e1:94:8f:bf:4b:29:04:e0:
         33:ae:1c:47:e1:68:66:79:32:35:19:05:e7:75:60:36:21:7a:
         e6:ef:0a:a9:a2:f5:d5:6c:f8:bb:be:74:a5:ba:92:18:22:98:
         6a:68:24:75:ba:f5:f4:39:01:30:20:0e:8b:9f:6c:e0:9a:6c:
         c2:ce:06:75:7d:40:81:65:4a:78:3d:cc:8a:9d:45:63:82:0c:
         b4:40:b1:b0:8f:18:c9:fd:8e:ae:e2:01:85:63:32:41:25:b1:
         df:c0:f8:eb:aa:d0:81:5a:05:df:67:9d:a5:df:14:1e:7f:79:
         b9:2d:d9:48:d1:5d:d5:97:91:ee:fd:df:2e:06:e0:77:5c:d6:
         e6:65:ab:ce:1d:e9:3f:f8:f9:79:24:aa:2c:ea:05:bc:b8:48:
         33:ee:aa:bb:4c:7d:cc:e5:38:ef:1c:37:62:7c:b5:2c:4d:cb:
         06:2a:bf:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:51 2026 by rpki-client