Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/cd7c5f90-361d-3228-8f11-6c8a2b66e89a.roa
File:                     cd7c5f90-361d-3228-8f11-6c8a2b66e89a.roa (raw, json)
Hash identifier:          s0j0xlLFk2fsSw4X30nUOqcmOTrGlHVfE2wa4Vt7KiM=
Subject key identifier:   90:A9:0C:1D:35:1A:37:E7:DE:78:6A:6C:4F:B0:2C:39:4D:8B:1B:35
Certificate issuer:       /CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
Certificate serial:       010D0C9F4328584E87EFC839970885619A79CEC0
Authority key identifier: 40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/cd7c5f90-361d-3228-8f11-6c8a2b66e89a.roa
Signing time:             Fri 17 Jul 2026 17:25:46 +0000
ROA not before:           Fri 17 Jul 2026 17:25:46 +0000
ROA not after:            Thu 15 Oct 2026 17:25:46 +0000
asID:                     395165
IP address blocks:        74.91.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:87:ef:c8:39:97:08:85:61:9a:79:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
        Validity
            Not Before: Jul 17 17:25:46 2026 GMT
            Not After : Oct 15 17:25:46 2026 GMT
        Subject: CN=779007c1-b53d-4c26-99a2-68e4fd4910c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:75:38:8b:0d:bd:f7:8f:71:95:71:4f:e8:ee:
                    6a:36:d2:f7:49:71:b7:e4:74:39:e7:b1:7f:b0:11:
                    4b:c8:a9:b8:16:77:6b:c0:d8:38:2a:0b:f3:ff:d6:
                    c9:8c:70:b6:83:bc:a3:c4:d9:42:51:9f:d2:f8:8d:
                    ec:6c:31:fe:c7:55:3c:63:4b:ac:be:3f:e8:f7:93:
                    e1:8b:b2:cd:77:c4:35:b8:d2:f7:13:55:b9:75:39:
                    bc:aa:06:25:d9:07:45:e1:2c:f4:d1:34:47:5b:0f:
                    24:01:91:37:22:7b:c9:6f:8a:4a:4c:2e:7d:7b:df:
                    d6:62:95:c0:e4:9a:22:24:70:c6:87:0e:c4:eb:70:
                    e3:8a:f8:8e:10:d7:f3:3f:be:7d:d6:4c:0d:b3:4a:
                    b4:7a:74:9b:94:61:1c:d3:5f:b2:6d:34:df:dc:9b:
                    92:88:ca:66:3d:8a:cf:3e:33:40:15:de:6a:71:b4:
                    00:ac:fd:4f:8c:44:11:5d:7f:85:50:4c:f9:c1:95:
                    73:c4:39:26:ec:03:b8:ce:c9:d7:fe:04:c0:ed:d5:
                    8c:25:e7:e8:47:66:0f:a4:de:ae:a2:b0:eb:3c:7c:
                    56:e9:b5:41:34:23:58:4f:14:77:3c:3b:ab:f6:2b:
                    ea:fc:77:33:c0:62:1b:68:41:a0:c7:d6:23:98:ed:
                    b9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A9:0C:1D:35:1A:37:E7:DE:78:6A:6C:4F:B0:2C:39:4D:8B:1B:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/cd7c5f90-361d-3228-8f11-6c8a2b66e89a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.crl

            X509v3 Authority Key Identifier:
                keyid:40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:54:9a:1b:ec:df:ae:fa:30:c7:33:e5:15:d7:30:40:33:71:
         e8:68:63:9c:45:da:ac:34:54:64:ec:06:43:d6:b8:32:51:2f:
         42:36:a9:58:0a:a1:d9:d5:07:d5:ca:7c:ee:54:a0:7b:b1:6c:
         b4:62:e8:e5:40:12:69:3a:f0:1c:7d:81:2b:3b:f3:ad:f9:fc:
         c4:c8:7a:43:59:79:8f:e4:c6:34:ed:51:8e:91:25:8e:18:6a:
         a9:1e:7d:0f:52:85:07:ed:63:ed:8e:11:63:b5:f1:10:dc:c3:
         b8:53:ab:a5:d9:74:de:ea:b6:36:8a:71:e1:2c:50:44:fc:ac:
         cf:1b:df:af:35:71:c6:7e:17:be:b8:49:d3:41:f6:32:28:c8:
         54:62:d5:9b:df:b7:0c:97:cd:a2:c5:45:1e:a3:c7:00:16:c0:
         c1:05:7b:e9:96:52:97:77:bb:34:d7:59:27:82:b6:fd:15:78:
         f8:7f:f6:89:19:71:e9:94:71:3d:f2:76:10:f5:98:46:73:f0:
         87:a9:00:8c:70:8c:e6:b4:dd:58:b5:ee:8d:39:a0:27:84:14:
         0f:8b:ca:37:e3:4f:b2:d0:27:07:8e:c9:0a:28:27:37:f5:59:
         9e:2b:ef:a0:af:5f:bd:db:92:3a:5a:bd:bf:0e:e7:4e:66:d7:
         d4:8c:12:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:43:05 2026 by rpki-client