Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/fabc6f7f-0cf9-3058-9812-48477049cd4d.roa
File:                     fabc6f7f-0cf9-3058-9812-48477049cd4d.roa (raw, json)
Hash identifier:          EAOCbqCCMFIG/Vgkk5fkRRLB8xVzyz+DCKwr0GECcYI=
Subject key identifier:   57:51:87:91:4E:CA:7C:CC:F6:B5:1F:6C:5D:3B:A3:62:09:28:DA:41
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584D290F4D2401E6C99FE3633020
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/fabc6f7f-0cf9-3058-9812-48477049cd4d.roa
Signing time:             Sat 14 Mar 2026 01:00:31 +0000
ROA not before:           Sat 14 Mar 2026 01:00:31 +0000
ROA not after:            Fri 12 Jun 2026 01:00:31 +0000
asID:                     16740
IP address blocks:        74.188.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:29:0f:4d:24:01:e6:c9:9f:e3:63:30:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Mar 14 01:00:31 2026 GMT
            Not After : Jun 12 01:00:31 2026 GMT
        Subject: CN=1eedc175-b070-4663-8c60-c60bd0ab1265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:45:a7:74:33:5c:15:af:42:33:01:64:39:5c:
                    c4:93:48:6e:5d:41:f6:b0:c6:ad:c6:f0:df:3c:df:
                    9e:a7:b0:d2:cd:b7:90:a0:d9:0f:3b:9b:05:42:f8:
                    f2:61:17:00:b8:9c:21:7d:b5:2c:a2:63:4f:86:de:
                    1b:b8:a0:38:fd:c1:99:54:b4:c2:d8:bb:b2:97:97:
                    2d:58:bf:59:53:0b:db:f7:17:bc:ae:8b:b2:c1:ce:
                    06:72:9f:0d:5c:05:33:c1:8d:fd:ad:a0:a7:68:16:
                    b3:ba:80:7e:81:24:55:75:8e:49:ce:fb:8b:06:16:
                    e1:cd:a6:b3:f0:93:0c:b5:8e:4c:df:17:fe:15:e5:
                    44:7d:60:35:5d:79:c2:21:51:66:01:13:71:cd:7b:
                    d1:96:e6:34:e4:59:cc:da:8f:ba:db:a8:16:52:b3:
                    34:47:22:8f:f8:0d:0a:df:b8:a0:69:a1:01:69:9f:
                    33:1e:b4:59:12:d7:ae:d5:0f:6c:07:47:1b:bc:df:
                    30:90:de:00:75:9b:49:3a:46:2d:ac:2e:f1:51:a6:
                    0f:dc:d9:36:c1:9a:0c:00:b5:13:ea:b7:db:73:22:
                    6c:09:a0:b8:22:5c:41:54:27:fe:e7:7d:dc:1f:28:
                    60:73:02:a9:08:20:6b:98:8a:fa:5e:3c:94:87:63:
                    30:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:51:87:91:4E:CA:7C:CC:F6:B5:1F:6C:5D:3B:A3:62:09:28:DA:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/fabc6f7f-0cf9-3058-9812-48477049cd4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.188.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:6b:e0:19:2b:9f:7d:49:dd:37:dd:d4:fa:01:c0:25:cf:b5:
         56:e4:15:52:f1:ec:64:ce:46:de:6a:75:65:6f:91:59:78:4d:
         d6:cb:12:35:4c:1e:a7:46:a2:32:4c:7b:e5:d9:13:09:7f:0c:
         62:22:23:18:80:08:02:f7:4c:76:35:84:40:a6:7f:3e:17:94:
         8c:bb:6a:91:03:a6:39:bd:79:29:df:b1:ca:36:8a:0c:54:2d:
         3a:2d:6e:73:b3:33:b2:11:d1:74:30:8b:bd:eb:47:75:14:ff:
         54:b1:e1:00:27:0c:cb:ab:a2:d5:7c:38:ba:cb:a2:08:51:6f:
         2f:60:87:cf:ee:71:46:70:fd:f2:c2:06:ec:ce:a2:e6:57:39:
         e3:7d:e7:ca:01:cc:8f:43:4d:ea:b8:ba:d7:26:34:90:41:42:
         4f:9d:f8:80:b3:1b:1c:6b:aa:a5:23:60:b1:34:75:c7:9e:1c:
         34:24:25:a6:f4:87:11:79:85:83:48:da:84:fe:20:41:bd:72:
         67:5e:26:e1:40:e9:6b:d5:5f:06:24:d6:4c:14:9c:a8:f9:6b:
         04:8d:a1:eb:7d:17:a6:99:00:20:8f:c7:ca:15:9b:bd:30:15:
         c7:f0:0e:23:22:2f:25:ee:19:b8:21:ec:db:55:6b:2f:5d:12:
         e2:8e:8e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:03:51 2026 by rpki-client