Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a2e11951-68bf-3d1c-96bc-f81c26525cfc.roa
File:                     a2e11951-68bf-3d1c-96bc-f81c26525cfc.roa (raw, json)
Hash identifier:          GZcui8i2pvF6g3iPSi1BXDdFuCv+FAva+08Fmf+LfVQ=
Subject key identifier:   95:D3:A3:CB:7A:91:52:34:6B:9B:33:8E:2A:75:95:BF:A2:7E:67:47
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584DBA3AE6D1B07C7F9E8C46BB80
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a2e11951-68bf-3d1c-96bc-f81c26525cfc.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        74.112.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:e6:d1:b0:7c:7f:9e:8c:46:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=6a8e2300-89b9-4fb1-9d0e-bfb4a168ee0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5d:97:43:9c:44:c8:2a:88:68:65:64:e2:11:
                    3c:69:2f:9c:86:c5:bc:51:59:58:c8:84:ad:f5:31:
                    a3:71:1a:26:00:cb:c0:a3:d5:2e:54:7e:cf:5b:37:
                    9c:5a:2f:7d:48:1a:1a:c4:a9:b8:4d:81:46:78:ab:
                    15:2f:72:37:40:c7:b5:be:5c:96:fb:ce:5e:34:19:
                    29:bd:36:e3:05:c1:33:4f:96:77:44:90:62:94:15:
                    88:49:c6:cf:56:43:1f:64:49:4b:0a:b8:1f:bc:e0:
                    60:2e:b2:13:c1:31:79:69:b2:f6:0c:8d:67:3a:2d:
                    91:17:bf:61:12:86:df:e8:dc:c0:8c:f2:86:f2:74:
                    a8:7c:db:40:b1:8f:a6:5f:98:37:dd:d6:a6:c6:7f:
                    e7:f6:d8:86:3f:f4:92:ab:3e:58:58:db:fd:16:e3:
                    bc:31:bf:be:44:a3:eb:2f:0d:ac:b9:d2:c6:f5:2d:
                    09:95:2b:c1:c9:df:b5:84:46:d5:84:ab:99:8c:26:
                    65:fc:7c:b5:48:1a:66:91:99:e1:d4:f6:27:2d:1d:
                    72:4d:15:13:46:70:bb:c3:a8:2d:c7:65:eb:03:99:
                    1c:f9:2c:71:54:ca:a6:2c:d6:01:60:4f:54:55:d7:
                    df:76:19:29:fb:e5:b7:43:83:88:8f:7b:70:e8:5b:
                    06:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D3:A3:CB:7A:91:52:34:6B:9B:33:8E:2A:75:95:BF:A2:7E:67:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a2e11951-68bf-3d1c-96bc-f81c26525cfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:8d:77:90:38:aa:eb:e5:ff:ec:aa:78:0d:5c:dc:0e:a2:53:
         a8:df:e2:d9:5d:a5:fc:e7:d9:d7:a7:ae:5d:28:c1:3c:38:c8:
         04:c7:c0:2f:84:6e:a0:d3:df:b8:cd:a8:e3:d9:32:76:81:b2:
         45:ba:c5:80:56:78:4c:7a:18:03:2d:89:ce:a8:77:7e:a9:72:
         36:b4:c4:00:00:74:a6:a0:07:60:c1:9f:65:f2:56:7f:be:24:
         d5:e5:34:67:17:c1:a1:e1:78:e0:f7:de:7e:52:9b:df:a9:21:
         38:ef:e1:e0:d0:06:e3:6d:ae:24:be:b2:1f:bb:d6:0f:27:05:
         05:ad:c6:91:5d:04:fd:6c:b2:18:5a:6e:a8:52:df:5b:05:53:
         21:e1:8d:13:f7:8d:b8:bd:c4:04:7a:b3:42:94:3d:7d:2c:10:
         25:47:5e:3c:80:e5:48:ec:cb:ae:5d:c5:87:2f:ef:a9:93:77:
         84:1d:7e:8a:35:0b:04:0b:d8:ab:20:c1:f6:bd:74:bf:79:50:
         15:fd:d1:4c:07:83:f2:d3:74:88:95:3b:80:f3:cd:cc:e1:b7:
         78:23:39:be:35:58:61:76:c2:22:7d:9a:df:10:4d:b1:14:fd:
         2c:9b:04:2b:7c:56:ef:d2:cf:25:65:d7:98:52:3a:ee:3f:63:
         2d:8e:72:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:04:54 2026 by rpki-client