Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/3a6750b4-c868-3858-8626-471d5e1d412a.roa
File:                     3a6750b4-c868-3858-8626-471d5e1d412a.roa (raw, json)
Hash identifier:          haGeESgtJ+j4gWoRxVmLuLqTKyY8P9iGuClJ4pdWcNE=
Subject key identifier:   67:F0:E8:9F:24:C7:F7:50:4C:5C:AC:85:7F:96:4A:2C:3D:01:0D:63
Certificate issuer:       /CN=d057304d-4312-43aa-92a7-91bbd7043aab
Certificate serial:       010D0C9F4328584DCC605C9BEDA8AB2AA81A9378
Authority key identifier: 91:3E:68:78:2A:B7:8C:27:CC:4B:07:99:5C:F1:BC:F3:FB:11:69:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/3a6750b4-c868-3858-8626-471d5e1d412a.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     53266
IP address blocks:        74.116.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/d057304d-4312-43aa-92a7-91bbd7043aab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/d057304d-4312-43aa-92a7-91bbd7043aab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:5c:9b:ed:a8:ab:2a:a8:1a:93:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d057304d-4312-43aa-92a7-91bbd7043aab
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=c79fe338-879d-4b7c-b1f4-49c298bad1f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f2:98:de:ad:e3:cc:84:73:92:31:ef:68:7d:
                    60:56:2e:95:23:cc:37:c3:38:77:80:ef:be:6b:35:
                    82:31:06:39:11:42:39:af:4a:c0:f6:ad:59:22:d7:
                    c4:03:96:b6:d2:a2:6e:64:3e:0c:4c:2e:6a:1a:0e:
                    8e:0e:e1:ed:01:57:ef:2a:00:a1:8c:d7:b6:bd:6f:
                    d1:fd:33:be:4c:c2:6d:ae:06:a6:db:2b:0b:e3:d1:
                    f5:3e:cc:8e:2b:48:01:02:98:1e:76:04:54:0d:67:
                    1d:c3:95:18:18:b1:d1:d9:2c:88:ac:9d:cd:a8:9a:
                    a9:02:a2:9d:50:5e:d1:d7:d6:ef:5e:c4:b7:75:b6:
                    84:b8:17:42:f0:76:ea:a6:31:3a:e1:4e:9e:b4:2f:
                    71:85:db:e3:6c:79:65:53:3d:61:5f:38:f0:84:a6:
                    0e:75:e4:90:7d:8c:a9:22:9e:c5:65:65:fb:b7:3d:
                    1a:b8:f3:bb:4e:29:31:27:df:51:91:3a:8e:ad:b7:
                    1a:21:46:f9:87:00:61:46:31:58:ff:b4:3b:f8:6c:
                    de:32:c3:6a:7d:12:50:95:8e:66:3e:cf:4f:9e:31:
                    7c:3b:a6:87:94:d6:56:e4:7b:56:5b:9b:ac:48:ac:
                    fd:ec:23:91:52:1e:76:1e:9b:ff:35:19:b4:c9:c4:
                    93:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F0:E8:9F:24:C7:F7:50:4C:5C:AC:85:7F:96:4A:2C:3D:01:0D:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/3a6750b4-c868-3858-8626-471d5e1d412a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab/d057304d-4312-43aa-92a7-91bbd7043aab.crl

            X509v3 Authority Key Identifier:
                keyid:91:3E:68:78:2A:B7:8C:27:CC:4B:07:99:5C:F1:BC:F3:FB:11:69:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d057304d-4312-43aa-92a7-91bbd7043aab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f0:e2:02:24:5b:c6:91:24:21:85:6f:af:82:cd:ac:3c:22:
         84:1e:27:a3:7e:6a:9c:71:c8:e4:5f:fa:a7:60:ec:be:69:d6:
         76:95:27:81:45:01:bf:3c:2f:e2:19:3a:aa:ed:80:40:7c:79:
         10:8e:c3:88:5d:91:bf:2f:bc:90:70:d1:c0:8e:6c:2a:70:9a:
         a4:d6:f1:37:0a:a5:df:ee:47:f0:e5:99:f0:2b:04:2a:cc:39:
         f3:f5:53:31:68:29:c8:10:0f:9d:7b:b8:84:cc:23:5d:b8:86:
         3c:da:6b:fc:05:b8:d7:b5:59:54:f8:c7:3b:58:14:c1:e2:4e:
         e8:55:eb:08:1f:b7:06:35:ea:e1:57:41:31:f4:1d:e7:24:70:
         cf:16:ba:97:94:34:32:43:d5:70:15:66:b1:87:c9:30:2c:b4:
         38:8d:20:2b:06:f1:2a:36:e5:a3:d5:96:70:5c:e1:8e:5c:89:
         5c:1e:22:57:5f:6d:19:f0:cd:fb:6a:5e:27:8a:9c:18:61:cc:
         de:af:3b:a7:3e:61:66:f1:66:17:0a:69:ac:7f:ae:5e:82:c9:
         6d:13:34:22:37:5c:4a:75:b2:7e:ab:fc:0a:05:be:51:da:5d:
         11:58:e9:5f:75:71:16:cb:1c:a5:44:bb:2f:c2:ba:70:27:b5:
         56:c6:04:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:30:12 2026 by rpki-client