Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/26ca4f9d-619b-3c0b-a745-6d19a4489bce.roa
File:                     26ca4f9d-619b-3c0b-a745-6d19a4489bce.roa (raw, json)
Hash identifier:          /ylq2h2GGJFIdqdI12/zsB9IUhLOMWUeYP9U1PJHFvY=
Subject key identifier:   CD:03:58:D7:81:03:FB:C8:13:CE:B5:9D:05:7A:99:2C:84:58:B3:EC
Certificate issuer:       /CN=61d234b0-9ab0-449d-88ec-f11a00956a39
Certificate serial:       010D0C9F4328584D44FA2DDD8EC2E9B3A8B2F570
Authority key identifier: D4:6E:14:D6:CA:9F:6B:26:96:64:FE:38:21:09:CD:3C:D0:8D:E4:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/26ca4f9d-619b-3c0b-a745-6d19a4489bce.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     13823
IP address blocks:        74.113.240.0/21 maxlen: 24
                          208.66.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/61d234b0-9ab0-449d-88ec-f11a00956a39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/61d234b0-9ab0-449d-88ec-f11a00956a39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:2d:dd:8e:c2:e9:b3:a8:b2:f5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d234b0-9ab0-449d-88ec-f11a00956a39
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=7f6a4f5c-ecff-4680-a09c-2aeba67470b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9b:05:1c:de:10:85:35:13:06:c1:c3:bb:cc:
                    c9:af:48:cc:ac:69:35:ef:13:d1:12:a4:8e:a7:b1:
                    8c:26:da:3d:07:3d:39:e0:c2:d5:1e:f2:4b:22:25:
                    d9:78:b4:c5:20:ad:06:c0:bb:f8:ee:ee:54:a4:73:
                    80:e9:ff:6c:f0:52:47:40:21:75:37:99:31:88:6b:
                    81:55:11:ee:5c:32:25:5c:76:69:f6:a6:f3:d7:5b:
                    ad:e7:df:8b:ee:4b:fd:84:d8:42:15:c3:e3:91:88:
                    b3:d9:f2:e6:7f:a5:0b:6a:31:d5:d0:e9:e1:3b:17:
                    42:53:44:89:fb:67:75:99:68:77:4f:a1:4e:02:ba:
                    b0:05:13:5c:f4:92:60:c3:e8:0c:27:89:b2:50:b3:
                    98:93:5f:5a:02:c8:1d:79:46:8f:45:67:63:fd:3c:
                    a4:42:96:08:77:be:c9:ef:a6:cd:d7:e4:31:2e:18:
                    ff:42:9d:49:c6:6a:66:97:8c:07:39:91:f2:74:88:
                    06:0f:b1:2f:9c:25:fe:9d:a1:14:8a:68:2a:99:a5:
                    c6:59:18:75:09:f9:3d:57:31:e1:7d:91:24:ab:f1:
                    7b:12:07:f3:b3:83:c2:25:97:31:54:21:49:06:fe:
                    1b:f0:c6:3d:d2:85:92:a8:b9:0b:04:0f:d6:a7:63:
                    7c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:03:58:D7:81:03:FB:C8:13:CE:B5:9D:05:7A:99:2C:84:58:B3:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/26ca4f9d-619b-3c0b-a745-6d19a4489bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/61d234b0-9ab0-449d-88ec-f11a00956a39.crl

            X509v3 Authority Key Identifier:
                keyid:D4:6E:14:D6:CA:9F:6B:26:96:64:FE:38:21:09:CD:3C:D0:8D:E4:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.240.0/21
                  208.66.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:8e:c0:c7:0e:d8:58:a7:ac:46:6d:05:cb:46:ba:cf:15:00:
         a8:56:d3:8b:be:3a:e1:94:97:bd:0a:9f:6e:61:16:3d:bb:1b:
         48:4d:0c:4b:00:59:91:90:cb:14:64:21:cc:af:51:5e:69:cb:
         47:8e:c6:4f:d5:83:80:24:9f:b3:7e:4c:b6:49:33:13:cb:7c:
         bd:c7:f4:27:33:04:bc:59:73:bb:48:aa:65:f3:b8:4d:47:af:
         96:d6:2a:fb:42:fd:ef:3b:14:98:9d:7c:59:86:99:11:9a:1b:
         15:dc:e5:44:67:8e:db:41:d6:8c:31:e2:5d:3a:6d:6f:c6:dc:
         11:dc:84:e5:d5:b8:61:ef:b8:7e:9b:09:23:8b:0c:43:89:30:
         c4:f7:22:3d:fe:8a:11:e0:80:48:e3:f8:ee:96:5b:41:d5:8e:
         f7:69:3a:5c:30:b1:26:d0:77:bb:92:e7:db:9e:d3:33:d2:d8:
         71:03:62:2b:c6:92:33:7a:10:9f:20:b0:ac:d6:48:63:a6:ef:
         f9:71:31:eb:c9:7e:a8:0a:97:1e:6a:ef:83:20:84:eb:fb:bb:
         ce:f4:4b:ca:64:b8:65:bd:73:01:c5:65:d9:7b:cb:58:cc:29:
         06:ac:46:6a:bf:ee:21:e8:5b:bc:02:f4:2c:c8:2a:7d:18:b0:
         2c:d4:24:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:31:31 2026 by rpki-client