Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/8514efee-ce18-38cf-9bf6-f6432a19ca56.roa
File:                     8514efee-ce18-38cf-9bf6-f6432a19ca56.roa (raw, json)
Hash identifier:          FhIzKymuJPYDQbWjHyd6fn5L7hERgYJDkfCdMKyBsyw=
Subject key identifier:   DF:75:1D:16:2D:EF:55:37:FB:A2:85:7C:02:A4:47:39:9A:F9:93:29
Certificate issuer:       /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial:       010D0C9F4328584F6F22EEE86A4960D8199DF180
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/8514efee-ce18-38cf-9bf6-f6432a19ca56.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     812
IP address blocks:        74.198.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:ee:e8:6a:49:60:d8:19:9d:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=062ddddc-b567-4cde-8754-5d75dfc720fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:63:a9:a3:b1:c5:07:df:15:5b:e7:06:b2:
                    a6:e4:e7:01:82:cc:40:a2:4d:0f:92:02:f7:d1:6e:
                    66:e6:73:81:04:f9:5d:b6:02:69:94:5b:c0:b8:17:
                    22:cf:9c:50:e3:6d:eb:88:92:19:65:3b:cd:21:09:
                    1b:4e:ed:90:b7:4d:d4:07:02:1e:54:a9:e4:20:1a:
                    a2:b9:79:11:2e:b1:cc:13:a9:1f:53:42:55:b0:b9:
                    c5:2f:db:05:65:3c:fd:64:09:c2:f4:75:c3:88:bf:
                    5e:99:c0:b9:2d:20:da:43:25:88:04:a6:4d:ca:7e:
                    37:fb:54:49:23:f3:50:90:ad:51:8a:ec:a9:e1:23:
                    2a:d6:08:0a:8c:f3:85:ca:c1:b7:ec:69:cc:fa:a1:
                    11:75:59:a7:ff:12:58:3e:37:d9:5a:1c:0d:8e:5f:
                    50:b7:b2:27:13:06:bf:9a:39:f3:7d:06:cf:0d:f4:
                    d8:6a:9f:d4:19:ed:07:10:ba:60:94:17:68:12:98:
                    7c:d6:3a:88:23:38:bc:cf:62:76:4b:c4:c0:e2:79:
                    e6:66:af:9c:0e:22:a8:2c:dd:a7:bd:8b:43:0e:eb:
                    9b:c4:bd:f1:06:d9:c7:f2:0d:59:50:93:55:09:93:
                    af:90:3e:54:3b:66:28:96:7d:ee:29:e8:ed:a6:9e:
                    89:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:75:1D:16:2D:EF:55:37:FB:A2:85:7C:02:A4:47:39:9A:F9:93:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/8514efee-ce18-38cf-9bf6-f6432a19ca56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl

            X509v3 Authority Key Identifier:
                keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.198.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:8f:5a:b6:e2:c5:14:f1:57:90:bc:3f:7e:50:75:87:b2:23:
         11:32:c0:54:f7:d6:8d:4d:43:c0:25:1f:68:0e:cb:89:23:30:
         af:42:65:d3:f2:5c:50:0f:1a:a8:a0:ed:47:9d:da:a2:63:c2:
         9f:70:97:e0:e7:e5:d0:66:f3:73:c8:fd:63:54:86:d9:c8:f3:
         f9:07:5f:8f:71:6a:36:87:97:9d:83:3a:38:8f:de:bf:f4:e7:
         bb:64:41:1b:65:60:4c:42:e6:84:70:f7:74:82:f1:ce:05:b7:
         b0:1e:72:31:63:59:e7:ed:02:75:1e:11:38:6c:04:f2:74:5a:
         90:0a:47:d0:01:4e:2f:15:53:3a:3e:eb:0c:32:42:fb:55:55:
         74:49:95:29:de:e4:9d:05:4b:a8:df:41:7b:b0:0a:c6:cf:cd:
         05:4c:67:d4:cf:60:2d:2d:e5:63:85:6e:13:9e:d9:1d:18:65:
         e2:7b:78:e0:ef:04:0c:a8:d2:02:e0:4a:a9:19:e7:56:44:75:
         f1:c4:07:92:8e:7f:cb:10:98:63:24:27:a1:dd:be:22:49:ff:
         b1:71:37:01:55:9d:0e:9b:1e:a5:bb:b1:63:da:f5:38:76:c0:
         a0:3d:cd:6a:b3:d9:31:2c:72:32:73:5d:a2:3e:3f:df:66:94:
         a6:bb:f5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:24:04 2026 by rpki-client