Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/3049b210-cc28-3811-a01d-afdf81bd6f57.roa
File:                     3049b210-cc28-3811-a01d-afdf81bd6f57.roa (raw, json)
Hash identifier:          J1dILAQg/hieWstFz885BKSObUTRD+TZzB9u58d/7h8=
Subject key identifier:   AD:1B:1D:16:AD:39:B0:48:F2:66:5F:FF:16:B7:8B:C1:8A:06:FF:FC
Certificate issuer:       /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial:       010D0C9F4328584D497D14474F7B573445F15F80
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/3049b210-cc28-3811-a01d-afdf81bd6f57.roa
Signing time:             Wed 25 Mar 2026 15:47:36 +0000
ROA not before:           Wed 25 Mar 2026 15:47:36 +0000
ROA not after:            Tue 23 Jun 2026 15:47:36 +0000
asID:                     812
IP address blocks:        74.198.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:7d:14:47:4f:7b:57:34:45:f1:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
        Validity
            Not Before: Mar 25 15:47:36 2026 GMT
            Not After : Jun 23 15:47:36 2026 GMT
        Subject: CN=c286ebe3-538a-4033-975b-e88510730a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e1:93:b4:9c:4b:8c:69:c4:29:3e:3e:cd:13:
                    a6:e4:b5:aa:b7:88:f9:cc:1b:60:e6:ab:fe:8f:2b:
                    b1:0b:c0:fe:d6:60:b3:f9:51:2b:10:34:76:65:b4:
                    f6:95:7d:f3:b2:27:24:17:27:18:8e:c7:60:2b:00:
                    d1:ed:71:d4:85:09:20:1f:90:c6:e6:af:33:b0:c7:
                    2e:cc:6a:28:e1:21:cb:dd:e9:c7:59:ef:a2:00:7c:
                    f0:19:c2:8d:e9:5a:cc:95:95:c4:da:25:d5:9c:f6:
                    88:fd:91:20:d6:32:86:3d:15:9a:91:96:50:cb:e0:
                    13:11:8e:07:b3:e1:70:72:fe:5d:22:67:8c:ee:ee:
                    e0:cb:00:05:2a:4c:3f:b2:e0:73:19:81:bc:07:6a:
                    42:71:95:e3:99:9d:10:67:df:23:2f:5a:45:a8:4c:
                    22:3f:bb:77:36:98:8e:b0:f7:d8:82:29:f0:c6:0e:
                    4c:2f:58:46:46:5c:31:89:56:11:21:ba:84:d5:f3:
                    b3:54:a4:33:fd:62:6f:aa:16:65:40:83:77:e9:c5:
                    33:71:c8:44:53:42:3d:b3:e7:38:89:be:4c:0c:2d:
                    9a:91:a8:52:4f:4a:5d:a9:5e:01:7f:31:80:8a:51:
                    2c:59:3d:1d:1c:94:07:41:65:a7:e1:1d:20:82:cd:
                    a7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1B:1D:16:AD:39:B0:48:F2:66:5F:FF:16:B7:8B:C1:8A:06:FF:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/3049b210-cc28-3811-a01d-afdf81bd6f57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl

            X509v3 Authority Key Identifier:
                keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.198.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2d:59:41:09:34:26:e5:78:2d:0a:64:dd:a4:36:60:d7:26:
         c3:b7:e5:a6:8c:39:e4:f4:49:29:bc:e5:e5:8d:59:59:b5:9f:
         f6:82:0d:65:44:f1:a9:9a:89:2a:2f:4e:19:94:41:7a:35:6d:
         eb:87:6b:ae:d3:c3:6c:57:ba:98:bb:4b:de:96:27:03:4d:e8:
         5c:3c:8c:81:db:4f:ea:00:2f:fa:9f:9e:51:51:09:3b:65:28:
         a7:3d:3d:f0:40:1b:88:bf:51:ed:ab:27:42:1d:9f:45:e6:f5:
         67:31:8e:4d:35:97:5b:cc:d4:8e:92:ed:d9:8a:ca:e2:11:6b:
         cb:dc:50:96:d2:01:f0:76:70:84:31:c6:34:32:a2:05:b6:7d:
         9d:31:db:8d:70:4d:49:c6:49:3f:b0:75:49:79:a1:f9:17:36:
         08:61:5e:9a:84:d5:ab:63:b8:94:22:fe:9e:16:52:9d:1f:82:
         e1:62:16:3f:68:b2:62:86:cf:25:c4:25:0d:17:31:9b:26:2f:
         1a:8e:45:58:ee:75:74:5f:6d:ac:98:ad:16:6a:1b:70:d6:5c:
         83:41:28:61:70:e9:c0:6f:b3:0d:07:fc:89:c8:76:81:0b:7d:
         db:92:3d:3a:55:9d:2a:49:ca:30:bb:84:42:6c:70:e1:9b:90:
         1e:22:1e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:20:14 2026 by rpki-client