Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4832b4f0-a969-3d3f-a757-a6724fae04d3.roa
File:                     4832b4f0-a969-3d3f-a757-a6724fae04d3.roa (raw, json)
Hash identifier:          Lr00bTclQV6iEq4L/HbmtY7/a/UdGE1NR9ia5zitsOM=
Subject key identifier:   2E:6A:1C:A8:BB:47:FE:CD:CF:D2:F8:FC:51:20:38:72:CE:49:CA:40
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F4C3DDCCD3AB2BA5C2A10AA30
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4832b4f0-a969-3d3f-a757-a6724fae04d3.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     15169
IP address blocks:        74.125.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:dc:cd:3a:b2:ba:5c:2a:10:aa:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=fb3c08b0-6eec-4126-a0be-adb4cfd48133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d9:92:c7:48:f0:32:82:a9:53:9a:9a:31:db:
                    1a:4b:80:ea:cd:73:70:36:e4:5d:4c:13:23:54:23:
                    60:b8:15:75:f1:b9:fc:b4:2a:24:ce:8a:c6:9b:21:
                    00:d5:69:16:c9:1f:cd:42:c7:22:14:d0:d7:56:48:
                    fc:f0:58:74:d6:af:57:b1:a7:46:1f:c1:9e:47:4e:
                    a7:c5:88:b2:39:01:2c:86:a0:34:97:cc:96:c6:62:
                    c6:37:18:2f:e7:2d:f2:93:f9:42:e6:8e:be:1e:61:
                    9b:68:7d:b6:51:6e:c5:03:38:ab:1c:fc:4b:55:2a:
                    35:6e:6b:07:82:d0:15:8d:31:35:29:ee:86:53:53:
                    70:29:d4:1c:c8:9e:67:5d:41:b2:43:cc:f5:d5:5b:
                    11:ee:db:f4:3a:00:9b:1e:39:83:2b:34:a1:04:86:
                    67:04:6f:70:e5:d2:ad:4e:f4:fb:94:ba:a2:45:8c:
                    5a:52:4d:30:dd:06:4e:a0:fc:4b:23:9d:28:e1:fb:
                    99:4a:9c:75:70:64:91:be:fd:53:b7:1d:c2:68:d9:
                    72:c7:fb:8e:fc:90:26:51:74:88:0e:82:b6:a4:f1:
                    32:1d:bc:1c:35:5f:13:da:7a:a5:fb:0d:46:bb:02:
                    12:54:78:fe:1d:b1:4a:72:b0:7c:8e:32:a6:b1:cc:
                    0a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6A:1C:A8:BB:47:FE:CD:CF:D2:F8:FC:51:20:38:72:CE:49:CA:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4832b4f0-a969-3d3f-a757-a6724fae04d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e5:cd:b3:fe:32:0f:fa:e8:67:ad:33:99:c2:50:61:03:ce:
         7f:1c:0e:93:06:be:2b:4e:58:b7:0e:2a:da:94:24:94:5e:51:
         26:27:aa:df:09:55:8a:3c:b0:d3:46:1c:db:20:02:0a:e0:e8:
         0d:1e:20:6f:83:a5:56:17:de:0e:2a:62:33:3f:f2:c5:99:8b:
         66:04:7e:2c:a2:84:c2:a0:3a:74:23:3e:3a:84:a2:02:ac:d1:
         a7:31:f0:6d:ea:e3:2c:06:82:86:b2:0d:c9:5e:6b:f9:8d:98:
         85:21:99:98:e8:ef:03:4a:d7:31:46:32:d3:4e:fb:a8:74:67:
         04:80:54:c0:c6:26:4a:09:a1:3e:08:d3:7a:e5:a6:63:1b:1b:
         22:cc:51:4a:4c:ab:19:24:1f:e9:6f:1c:ba:b2:b3:e4:52:cf:
         c5:71:2d:79:03:45:42:a5:61:d8:0a:c0:e3:47:d3:2a:01:39:
         2c:87:60:87:cc:e8:6c:66:92:97:c1:dc:d6:2c:82:0f:cb:6f:
         f5:34:88:73:f8:b0:1a:39:95:e6:44:d2:98:a1:98:ec:8e:05:
         77:e5:36:06:6d:a1:58:89:5c:ab:16:e6:1d:3f:53:96:e2:9a:
         dc:cb:17:0d:63:df:74:18:07:f5:83:4c:45:29:0c:29:a2:94:
         0a:f3:2c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:12:48 2026 by rpki-client