Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3/808a3ccd-a1d0-35cd-9b59-bda32d88bfd0.roa
File:                     808a3ccd-a1d0-35cd-9b59-bda32d88bfd0.roa (raw, json)
Hash identifier:          18Y98TZe7DHAGkf9syakdQT8Jin27z31rH+PH+Tq6n0=
Subject key identifier:   43:01:CA:EA:A0:51:D8:89:03:75:70:0E:B7:EA:BF:B0:AA:07:FA:D1
Certificate issuer:       /CN=8ac4270a-45f4-487a-8f20-4684f6b306f3
Certificate serial:       010D0C9F4328584DC4005197D065EB0255AD5F00
Authority key identifier: C5:67:36:4D:0D:6F:62:4D:BA:66:85:AB:42:CF:BE:7C:3F:01:97:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3/808a3ccd-a1d0-35cd-9b59-bda32d88bfd0.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     22766
IP address blocks:        74.113.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3/8ac4270a-45f4-487a-8f20-4684f6b306f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3/8ac4270a-45f4-487a-8f20-4684f6b306f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:51:97:d0:65:eb:02:55:ad:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac4270a-45f4-487a-8f20-4684f6b306f3
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=79a39003-a8d6-4be5-a6d7-d374d0be1c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:27:9e:2a:22:ed:d7:b6:d8:d5:36:69:74:
                    23:75:2e:59:fa:7b:aa:88:1c:b4:8d:e9:fc:03:1b:
                    f2:de:fa:f6:4d:23:92:fd:84:5f:a4:00:59:e3:4b:
                    17:2c:9b:eb:e4:e8:ec:cf:5a:a1:13:da:06:50:b7:
                    fd:1f:24:0c:55:ae:cc:cf:89:4e:21:5e:bb:e7:e9:
                    0e:d2:1a:db:ab:57:6c:0b:df:08:59:62:3f:83:18:
                    74:68:f3:6e:fc:68:4b:73:d2:62:34:3e:b2:70:cf:
                    06:b9:fe:24:d1:60:81:7e:b1:7c:98:35:3b:56:95:
                    82:d0:1f:dc:ec:8f:4c:b7:c4:ec:f4:dd:51:e2:35:
                    ef:88:f0:95:7b:16:c8:9a:83:9f:fe:ba:a9:ce:e0:
                    1d:d6:96:a0:4b:9f:ef:f1:4b:49:1c:a5:66:7c:27:
                    b0:e4:af:a8:c0:7c:69:4a:df:85:b6:ad:7f:de:96:
                    a9:a4:38:72:ea:7a:d8:97:21:f7:9c:03:75:3c:91:
                    31:64:18:8f:f5:08:c3:2c:a0:eb:6e:17:48:41:aa:
                    62:18:44:d0:e8:ce:5a:66:95:5c:8f:2a:49:27:67:
                    70:72:20:24:b9:51:b3:95:39:7f:4c:94:e9:0a:e8:
                    29:21:29:64:1f:3b:62:9b:cd:19:2c:00:4f:a6:a7:
                    74:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:01:CA:EA:A0:51:D8:89:03:75:70:0E:B7:EA:BF:B0:AA:07:FA:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3/808a3ccd-a1d0-35cd-9b59-bda32d88bfd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3/8ac4270a-45f4-487a-8f20-4684f6b306f3.crl

            X509v3 Authority Key Identifier:
                keyid:C5:67:36:4D:0D:6F:62:4D:BA:66:85:AB:42:CF:BE:7C:3F:01:97:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac4270a-45f4-487a-8f20-4684f6b306f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:7b:42:6f:ad:eb:e5:e1:e9:16:29:64:5a:28:e1:ca:9e:b4:
         6c:93:20:a3:35:5f:2c:e7:b3:08:ad:f0:76:b6:68:3b:1b:20:
         52:89:fd:e1:3d:7e:32:c9:56:61:6f:2a:35:74:d5:52:a6:cd:
         4b:11:da:3a:d3:64:1b:d1:3d:d3:f2:4c:0c:03:71:c7:bd:57:
         cc:7f:5f:94:54:5e:6c:26:d6:5b:a9:9f:90:bb:c6:e5:79:26:
         1b:56:3b:d6:2c:c6:40:be:64:af:fc:ed:db:05:4e:0e:bb:77:
         98:56:19:0c:f8:8c:cc:a6:36:54:60:62:d0:b0:8c:a8:30:f1:
         1d:a4:b7:f2:1d:c9:d7:fd:74:ca:9d:c6:8b:a2:1a:73:d8:1d:
         8c:61:88:df:a4:fb:a2:7f:11:2c:72:17:f2:55:ea:f8:0c:28:
         ff:c1:e6:8f:03:99:d7:0b:e5:77:82:17:86:81:ec:78:2f:ee:
         24:66:ae:6b:26:e3:0a:48:e6:93:9e:48:e4:26:e7:6f:9b:fd:
         92:93:7a:4d:55:b8:84:bc:22:d4:e0:5a:47:01:e4:c0:e1:67:
         26:c3:a9:ab:19:ba:97:d5:74:e7:fd:de:ec:8a:4a:fb:ba:81:
         1a:76:f9:e9:eb:4f:47:43:ee:7e:cd:44:4f:53:22:02:c9:ac:
         ff:34:72:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:37:50 2026 by rpki-client