Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8aa8bb0d-aace-4f1d-a134-6ef66d6188bb/fad75a26-3626-34ee-9ded-4181c5aac0e9.roa
File:                     fad75a26-3626-34ee-9ded-4181c5aac0e9.roa (raw, json)
Hash identifier:          xyqydJeWbX8W6O0kIgN1KQI8BlfF6bbyULS3L3HViAI=
Subject key identifier:   B1:3A:98:3B:EF:DB:8E:A8:19:2D:9A:BC:64:4E:CB:E6:A6:D6:1B:1E
Certificate issuer:       /CN=8aa8bb0d-aace-4f1d-a134-6ef66d6188bb
Certificate serial:       010D0C9F4328584F498BE76F7493854F6929FA00
Authority key identifier: 27:D5:08:3E:BB:84:D7:A7:23:04:D8:C0:74:4F:4A:81:FD:E8:B2:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8aa8bb0d-aace-4f1d-a134-6ef66d6188bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8aa8bb0d-aace-4f1d-a134-6ef66d6188bb/fad75a26-3626-34ee-9ded-4181c5aac0e9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     393733
IP address blocks:        74.188.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8aa8bb0d-aace-4f1d-a134-6ef66d6188bb/8aa8bb0d-aace-4f1d-a134-6ef66d6188bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8aa8bb0d-aace-4f1d-a134-6ef66d6188bb/8aa8bb0d-aace-4f1d-a134-6ef66d6188bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8aa8bb0d-aace-4f1d-a134-6ef66d6188bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:e7:6f:74:93:85:4f:69:29:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aa8bb0d-aace-4f1d-a134-6ef66d6188bb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cf808624-ef89-499a-806d-3c9e65b14122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6b:26:0a:ce:23:17:7a:52:e2:07:a9:db:99:
                    00:39:4c:4c:b9:38:49:b7:d8:ed:0f:d1:f6:cc:06:
                    e2:6e:16:a3:c4:1f:fc:a5:8b:d5:b4:c3:0f:1f:f3:
                    c5:7e:ac:20:f1:d7:31:ce:d8:70:83:13:33:08:76:
                    74:18:09:db:94:91:53:e2:87:d8:68:d7:b2:d2:a9:
                    68:c7:30:78:92:94:4d:45:e3:3f:3b:e1:52:49:5e:
                    50:34:2a:8d:90:bd:04:69:4f:5c:12:7a:cf:65:96:
                    3d:e4:d0:6f:e3:4f:d7:e0:d9:f2:52:0d:c7:0a:30:
                    3e:08:ba:1a:e9:42:7c:fe:0b:e9:3f:49:e2:b8:42:
                    be:38:2a:3b:58:7c:f2:80:42:d2:d0:92:60:2b:7b:
                    04:05:83:17:24:83:c0:88:c0:26:6a:56:ee:b0:8e:
                    a3:b3:ee:0a:0a:c4:d8:45:39:66:0a:f5:4f:40:63:
                    78:3a:54:66:b8:fe:95:ec:a8:b4:86:4e:f7:dc:bd:
                    1a:fb:d8:ad:eb:42:c4:fa:0b:0d:e9:b7:74:3b:bd:
                    77:6b:47:eb:13:5d:ee:39:b8:5f:d0:9f:3d:94:e8:
                    d3:a7:b5:fd:14:a1:28:45:13:73:2f:fb:28:bf:ca:
                    9a:f7:67:a3:11:bd:9a:b5:7f:b1:90:aa:23:44:44:
                    ce:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3A:98:3B:EF:DB:8E:A8:19:2D:9A:BC:64:4E:CB:E6:A6:D6:1B:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8aa8bb0d-aace-4f1d-a134-6ef66d6188bb/fad75a26-3626-34ee-9ded-4181c5aac0e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8aa8bb0d-aace-4f1d-a134-6ef66d6188bb/8aa8bb0d-aace-4f1d-a134-6ef66d6188bb.crl

            X509v3 Authority Key Identifier:
                keyid:27:D5:08:3E:BB:84:D7:A7:23:04:D8:C0:74:4F:4A:81:FD:E8:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8aa8bb0d-aace-4f1d-a134-6ef66d6188bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.188.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:fc:77:87:38:a9:ce:1a:51:48:c3:57:32:05:db:52:69:0c:
         ad:1e:e3:97:fe:08:b5:50:a2:f4:a6:bb:13:7b:a3:32:b7:87:
         c9:30:d4:af:82:57:43:fd:5c:59:d7:5d:1c:89:c9:18:a1:6c:
         80:eb:e6:a7:c0:8c:41:99:95:77:82:74:22:92:92:6c:32:59:
         e1:00:8e:17:64:86:18:d7:a9:76:b4:82:c2:9b:25:ff:21:a4:
         03:86:24:81:e8:97:a0:bd:8c:cf:e9:da:b1:15:5c:5d:c1:b5:
         38:b0:5a:c2:bf:61:bc:02:be:2c:7d:ed:bb:78:bc:a8:18:4f:
         c5:6f:ab:ec:a7:ba:f3:9b:89:47:b4:54:72:00:ac:8e:e6:36:
         bb:9f:c2:4d:89:30:5b:a8:4c:85:be:75:f4:83:78:7f:3c:a4:
         2a:a2:8c:35:dc:8a:9c:59:4f:35:a8:e6:bc:32:26:3a:0c:35:
         46:47:fd:ee:54:b1:bd:3c:8a:dd:94:17:0a:22:15:7f:70:dc:
         6e:2c:51:30:71:f7:34:07:64:a6:cd:91:62:a4:c7:ba:73:b6:
         ba:2c:31:9d:d6:33:e2:21:71:e2:d5:9e:32:2e:db:d0:46:ba:
         19:52:cf:01:81:ac:18:1e:cb:4d:f7:01:4c:8a:58:23:30:16:
         37:08:42:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:38:23 2026 by rpki-client