Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/35e140ec-66eb-33f2-8e01-d0fc6ce40187.roa
File:                     35e140ec-66eb-33f2-8e01-d0fc6ce40187.roa (raw, json)
Hash identifier:          pWTBi5II61K3PFpX/+s4wLnJJvquoNxaMeElDyPzGpY=
Subject key identifier:   29:C1:06:02:6B:2B:80:3B:45:63:7D:ED:2D:19:50:25:A6:46:4D:FA
Certificate issuer:       /CN=d184e471-080a-4e54-bf94-60dd0c8beb48
Certificate serial:       010D0C9F4328584F4973EFA493FD886F30AD2993
Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/35e140ec-66eb-33f2-8e01-d0fc6ce40187.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22926
IP address blocks:        74.118.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ef:a4:93:fd:88:6f:30:ad:29:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=59f830cd-5d7d-485f-844a-acb233aa9c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:bb:7f:37:5a:b6:74:15:a6:e7:72:86:a4:a6:
                    f5:a6:39:78:e9:ec:c4:36:1b:95:c6:9b:24:a8:a0:
                    33:34:80:d6:63:30:e5:46:e1:93:11:0a:dc:a6:3b:
                    dd:51:c2:de:f5:a7:51:63:4a:15:c1:c1:5f:ae:85:
                    68:fb:36:63:18:7f:32:63:e0:e9:89:bd:05:77:f1:
                    d3:5f:16:87:37:a3:06:6d:52:07:d5:5d:8b:96:dc:
                    a6:3a:94:8f:c9:7a:c3:75:e9:b8:3d:5f:c5:31:3a:
                    33:9b:0f:46:96:e3:4a:d8:14:64:a0:f7:5c:ad:87:
                    dd:7a:07:94:31:a6:a5:d5:e9:b1:c2:70:16:29:77:
                    f2:7a:13:c6:bc:11:a1:e9:53:01:b5:ea:8a:66:a1:
                    cd:f1:81:ce:7d:7f:7f:67:ce:70:df:4d:1e:46:f8:
                    c3:e8:ff:71:4a:0c:89:5a:3f:23:31:ba:73:82:e1:
                    7f:95:7f:31:e6:69:73:37:22:f8:52:2c:19:07:d2:
                    f1:bd:f5:67:0d:3e:ec:42:97:14:3a:29:2d:b5:19:
                    48:d3:15:d8:48:66:e7:94:c5:7d:44:ef:43:05:35:
                    14:44:53:a5:d6:37:23:75:48:66:1e:35:14:54:60:
                    63:d4:6d:5d:6f:e2:14:0a:50:c0:36:34:87:a0:4c:
                    94:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C1:06:02:6B:2B:80:3B:45:63:7D:ED:2D:19:50:25:A6:46:4D:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/35e140ec-66eb-33f2-8e01-d0fc6ce40187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl

            X509v3 Authority Key Identifier:
                keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:80:23:91:ca:8f:17:19:fa:3c:ba:dd:8b:c5:da:9e:d5:41:
         93:37:ec:b6:8f:45:64:b6:94:27:b7:12:85:d7:e4:4b:cf:a7:
         11:b7:8d:d5:ae:4b:6a:62:2b:a4:a5:49:da:30:dd:a0:52:5e:
         6d:91:c1:88:35:c8:fc:0d:6f:65:b4:09:40:07:ab:d8:7b:46:
         eb:f7:52:f3:eb:72:e2:1e:fd:1c:46:d6:86:48:12:83:1b:c2:
         c4:96:d4:ec:fd:e2:09:ae:74:da:74:ee:65:ef:9e:ae:f0:0d:
         95:e4:72:32:28:35:a9:a3:91:f6:39:33:d8:da:5c:aa:f4:5a:
         94:6b:64:75:6c:0b:b0:f2:e1:f6:d9:4f:49:eb:48:89:c1:18:
         c1:47:71:3e:02:86:9d:59:4d:81:e7:33:5a:5d:c1:c4:9e:d2:
         a6:1f:9b:b8:4d:fd:07:bf:89:7e:b6:ab:fb:de:5b:e5:f2:9e:
         93:62:35:3b:3e:28:c0:51:0b:77:b8:bb:9c:b6:de:73:25:63:
         6b:bb:27:ed:56:07:27:12:5b:89:8f:68:83:76:51:99:76:12:
         f8:da:8d:a3:54:81:6c:60:a1:fa:ef:9c:33:82:27:f8:19:8e:
         03:76:0d:0b:12:25:29:d1:db:7d:7a:2c:af:c5:f4:6f:d4:20:
         b2:a8:26:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:31:22 2026 by rpki-client