Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/22ae70b4-0b7f-3630-9616-62fcdc6cafab.roa
File:                     22ae70b4-0b7f-3630-9616-62fcdc6cafab.roa (raw, json)
Hash identifier:          3YqJCuq2JTD729DzfybYJxQeJSw30nLhju/4U5AEi2c=
Subject key identifier:   07:D6:06:6D:CD:6E:48:01:C9:47:88:BA:4C:E9:42:99:F2:F2:8E:E3
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584E9A7FBCB56059A51FB2E7E940
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/22ae70b4-0b7f-3630-9616-62fcdc6cafab.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     19795
IP address blocks:        74.121.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:bc:b5:60:59:a5:1f:b2:e7:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=84eee034-ee17-4950-86d7-d3aa566c6e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bc:23:f7:19:02:c5:b2:64:4d:77:68:83:81:
                    dc:47:b9:0c:9b:0e:2d:5b:5a:a3:36:67:75:a1:cc:
                    f6:7b:74:b1:06:86:2b:c9:0a:32:2f:f0:10:ce:34:
                    07:60:cc:63:c3:5b:46:8d:dd:b3:ec:43:04:78:f7:
                    6e:f8:1a:8f:e7:aa:98:76:b2:2e:dd:e3:b8:98:1c:
                    d4:26:12:ce:89:44:3f:16:4f:b9:cf:05:29:52:f0:
                    bf:a9:53:3c:f7:11:0f:8f:e5:db:85:92:c9:ad:3d:
                    47:d7:48:7a:69:a3:56:18:c8:d1:4a:c9:d2:c2:b9:
                    ec:18:84:29:65:79:57:8c:7f:0b:34:3a:42:07:70:
                    cb:7b:16:b6:8b:49:8c:e9:45:e4:b2:0f:10:51:c9:
                    7d:94:0e:b0:16:cd:9f:7c:e3:bc:70:32:26:8e:3c:
                    e4:af:57:5b:9c:cd:85:57:63:84:4e:9a:7b:16:a5:
                    9a:9c:d9:1a:15:55:4a:e4:fd:c1:7a:4b:e3:ab:f9:
                    3a:4a:5f:d8:a8:52:51:af:86:2d:f4:61:fd:42:e2:
                    72:23:ea:f6:14:19:ed:b0:ea:ff:21:6b:34:40:5f:
                    c7:ef:ad:bd:bc:0b:ff:76:c6:87:ac:a7:bc:00:db:
                    40:d7:b7:48:23:a5:56:49:c3:dd:09:cb:42:7b:f3:
                    79:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D6:06:6D:CD:6E:48:01:C9:47:88:BA:4C:E9:42:99:F2:F2:8E:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/22ae70b4-0b7f-3630-9616-62fcdc6cafab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:2d:aa:13:67:c7:c1:e1:96:21:cf:c9:b0:99:d2:5e:6f:bf:
         a8:23:41:18:96:a4:75:43:de:ab:f2:08:fe:5b:6d:ba:c0:b9:
         bd:7f:17:19:6c:3b:27:05:c9:f0:c8:71:38:ca:75:65:85:c0:
         14:46:05:aa:54:45:c0:a1:b3:0b:94:0f:85:50:6b:5e:3c:1a:
         a9:92:7d:41:79:e6:ac:5b:63:64:a1:e6:26:ef:22:db:ac:89:
         f9:09:07:46:84:bd:c5:4e:03:cb:31:76:89:71:b0:38:4d:f7:
         e5:b2:79:1c:3d:20:91:d5:49:dc:9f:e9:d1:55:3f:2a:e8:20:
         b3:72:d4:80:25:1f:09:93:af:f4:1c:c6:5e:61:d3:64:11:3c:
         a0:77:a0:43:f0:ee:48:69:e5:06:4e:95:5f:df:87:0e:9b:1c:
         90:b1:b6:c1:2d:78:81:fa:14:2a:61:5d:22:f4:14:78:87:84:
         11:d2:49:f3:fb:25:f6:ae:4f:47:a6:83:36:f3:b0:5d:b5:8f:
         ad:41:fd:33:f7:60:df:b3:8d:cb:2b:1d:9b:6d:0d:1a:d7:af:
         8d:41:8e:b3:cd:29:01:19:32:54:23:29:ea:a0:8e:f2:ac:ab:
         07:04:d9:51:0c:bf:ed:5a:42:ef:c2:7a:88:e1:c5:a7:1c:c8:
         80:5b:52:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:07:21 2026 by rpki-client