Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/1e4c7949-37d5-339f-88ea-7a70cd9c54b8.roa
File:                     1e4c7949-37d5-339f-88ea-7a70cd9c54b8.roa (raw, json)
Hash identifier:          zN9+XEq0YMNM+22fNLb9Asd2csKQbjW+IUOhdWVyNEo=
Subject key identifier:   B8:7D:5E:56:9B:A1:42:BD:1B:2E:37:2A:4F:57:38:C0:EF:17:3E:8F
Certificate issuer:       /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial:       010D0C9F4328584F6F22F52D95529EDFE08DDA80
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/1e4c7949-37d5-339f-88ea-7a70cd9c54b8.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     812
IP address blocks:        74.198.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:f5:2d:95:52:9e:df:e0:8d:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=5fb63c6a-8e5c-4402-97a4-49b6c2cc0dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:28:e1:64:c3:71:79:e0:1d:78:ec:fa:ee:92:
                    2d:68:a1:c4:1a:61:67:c8:58:4d:f6:a3:ce:04:fc:
                    22:20:5b:bb:57:bf:b6:03:33:19:82:a0:9e:af:8f:
                    ce:6f:2e:73:fd:1c:d1:cf:fa:13:5f:f3:5c:b1:bb:
                    29:f2:4d:c9:e0:63:35:9a:a7:81:8f:1f:4a:c2:3a:
                    8a:72:44:74:55:09:37:bd:70:1d:fb:a9:d4:79:9e:
                    d5:36:52:ef:05:0b:4c:99:96:7d:49:69:30:f3:76:
                    dc:23:3d:f3:57:75:aa:ce:34:bc:b9:8d:6b:2f:57:
                    5a:f4:cc:4d:e6:15:72:13:01:c0:8d:db:ff:5f:b1:
                    c3:73:22:65:82:5e:d3:90:59:1a:c2:16:14:7c:e4:
                    fe:1b:2f:e4:16:a9:36:da:73:60:4c:84:25:8d:92:
                    dd:2e:2c:14:dc:75:40:d7:c6:fb:f8:37:d4:c5:6f:
                    7b:ce:a3:44:05:fb:9f:1c:12:a4:47:9e:79:d9:8b:
                    15:f5:c4:bc:9c:09:a7:b7:0f:c3:84:c8:3f:da:38:
                    73:67:db:46:bf:f9:7c:d0:3b:bd:fd:18:f6:79:6c:
                    aa:0c:d2:30:b4:07:3f:f4:b5:05:41:ff:3e:74:0e:
                    45:16:4e:0a:b1:a9:73:74:41:0a:f8:0f:c5:fa:e8:
                    e5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7D:5E:56:9B:A1:42:BD:1B:2E:37:2A:4F:57:38:C0:EF:17:3E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/1e4c7949-37d5-339f-88ea-7a70cd9c54b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl

            X509v3 Authority Key Identifier:
                keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.198.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:f2:11:4e:24:e0:13:68:af:10:68:db:3f:d7:8c:34:db:39:
         df:ed:d1:f1:3b:43:9e:67:45:9a:d6:32:91:88:36:00:6d:83:
         a6:55:d5:5a:a0:4f:52:e7:79:be:a3:29:2d:3d:91:4c:a2:e9:
         e8:dd:02:41:a3:e9:f1:73:15:10:55:e7:8e:69:6d:8f:a6:52:
         8f:74:d7:8f:d9:61:74:82:ca:b5:a0:c6:0d:6a:1b:3a:19:33:
         99:27:57:19:cc:13:a4:a5:61:40:77:ec:90:6b:a2:98:80:58:
         a8:10:f8:68:5f:4d:59:68:a6:ee:e1:49:c8:7a:1a:6c:23:bf:
         5f:e4:e3:c1:bd:1b:6b:e7:bd:3e:7c:29:12:42:8e:dd:d7:3e:
         ba:48:9d:25:7d:e5:49:ed:e8:7e:74:54:6e:4a:cb:56:b1:9b:
         e8:3d:fb:c9:10:aa:ec:c6:b4:d1:69:8e:dc:c7:b4:a5:d0:e3:
         f7:29:a4:ad:05:ee:03:3c:5c:09:59:bb:be:e1:23:6f:f6:a4:
         fa:96:be:57:c7:63:0c:bf:d1:e8:09:8c:2b:76:92:f4:6d:34:
         d0:0e:73:e6:66:7d:a4:9f:a1:26:6f:48:04:03:98:5b:6a:0d:
         81:9d:44:ec:2d:b7:3e:40:d7:69:dd:c5:7e:cb:13:3d:9b:af:
         ca:23:0b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:47:25 2026 by rpki-client