Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9344661-8bcf-3d4e-8196-41f7f0f4ae40.roa
File:                     c9344661-8bcf-3d4e-8196-41f7f0f4ae40.roa (raw, json)
Hash identifier:          dGSDYz+NRr2edkvXixoiIwhhK983P3QyMi5vHsyPwxs=
Subject key identifier:   E6:46:D5:20:9D:33:12:D3:26:33:33:8D:62:BC:74:1A:79:BF:16:89
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584DBA3AE6C5C6231B2B569DAC80
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9344661-8bcf-3d4e-8196-41f7f0f4ae40.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        74.112.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:e6:c5:c6:23:1b:2b:56:9d:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=617363b2-7c10-41d0-bf4a-b48af86c912d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e3:b5:39:d4:0a:19:0f:cd:93:0d:2a:f7:b9:
                    a2:8e:07:e1:de:76:ec:4a:e4:30:98:00:f4:ab:36:
                    e6:f8:03:6a:77:b3:11:b4:e2:39:05:a3:42:c3:5e:
                    47:61:07:c8:da:f1:1a:88:7e:cc:f8:43:59:3d:1b:
                    b5:cc:73:03:d2:77:f9:43:d3:d6:02:98:6e:95:86:
                    ff:b8:44:ca:b5:4e:90:84:38:1b:11:f8:47:cd:1f:
                    b8:68:c1:1a:42:71:c0:93:e9:71:15:97:95:92:75:
                    f4:83:ae:47:84:47:1c:2a:79:3f:ba:a9:e9:06:ae:
                    70:71:07:d9:02:22:d6:b9:51:13:f5:e0:f0:70:d7:
                    e3:49:2c:31:89:b8:c6:aa:35:af:a5:0e:cd:5f:94:
                    55:f9:df:e3:64:5d:ac:32:f0:94:e9:d5:d6:24:ec:
                    44:cc:2f:34:79:1b:b4:a6:64:0f:c1:d3:28:8e:bb:
                    8c:ee:09:e3:2e:7d:f6:d8:2c:7a:7f:b8:7c:b5:6b:
                    9a:59:7e:c5:75:99:bb:f2:08:51:5e:60:35:75:bf:
                    9a:fd:99:17:52:a4:7b:cb:b5:33:2a:e8:c4:5f:a4:
                    c4:1b:69:4c:a2:59:bf:64:e7:23:12:fb:eb:b5:c1:
                    ae:3a:c2:95:5c:1b:d0:7f:46:b9:23:21:48:ed:58:
                    81:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:46:D5:20:9D:33:12:D3:26:33:33:8D:62:BC:74:1A:79:BF:16:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9344661-8bcf-3d4e-8196-41f7f0f4ae40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:7a:e5:e3:bc:17:a1:55:e3:51:01:52:82:00:56:bd:51:25:
         77:7d:7a:38:54:48:4c:30:67:55:6c:9c:11:3c:6c:29:b0:12:
         3b:c0:3a:e9:2d:1e:47:94:38:2f:b6:de:2c:48:0e:26:71:69:
         ca:47:fc:0e:5b:db:e5:31:0d:40:58:59:c3:80:72:a7:d4:f4:
         ea:c5:bb:92:0b:41:1b:50:a2:5b:a6:a0:62:d6:50:b6:c0:61:
         53:bd:d0:1e:27:2b:ad:93:ed:a4:4b:2d:f4:65:48:05:7a:6d:
         49:14:09:bc:a5:e2:f8:e1:f8:2e:1e:92:39:34:0c:89:a7:f2:
         07:57:7c:d6:6f:06:08:f5:01:50:63:95:de:96:a5:3b:4f:94:
         3e:ee:b7:c4:46:f9:5e:ce:27:47:01:44:d1:50:e0:e1:6b:9e:
         69:bf:b9:c2:b3:9d:d7:39:1b:10:ba:8e:db:a8:05:7c:68:6b:
         b8:cf:f7:a0:59:85:aa:ff:ab:6c:a0:3d:bb:58:e5:ec:4e:1b:
         51:4e:32:63:8c:39:7f:26:30:55:4a:bb:f1:01:6c:fa:e0:52:
         fd:e3:7e:a3:46:49:6f:df:46:4d:c9:ed:d8:53:f3:f4:fc:69:
         45:c7:d7:6d:32:e6:aa:2a:ac:b1:3b:42:a8:74:28:cd:94:35:
         3c:a8:f5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:40 2026 by rpki-client