Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/926dd37d-5549-3a7e-b870-336d400f37f8.roa
File:                     926dd37d-5549-3a7e-b870-336d400f37f8.roa (raw, json)
Hash identifier:          yo2DaWMTy7HWDP/CVxi+pe1Dv+WtI44Kgnu7Vu4Z+Ew=
Subject key identifier:   8F:0A:3D:7F:B0:B1:41:D0:B5:C3:95:77:1E:C8:A2:C9:14:63:43:2D
Certificate issuer:       /CN=a88fcb86-473d-4a31-8a0d-95a046cda9a9
Certificate serial:       010D0C9F4328584B5A7AC518AF91EA2E517B8080
Authority key identifier: 18:A4:B8:64:43:CB:19:79:9D:00:ED:69:10:B2:C3:93:50:C6:26:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/926dd37d-5549-3a7e-b870-336d400f37f8.roa
Signing time:             Mon 29 Sep 2025 08:17:49 +0000
ROA not before:           Mon 29 Sep 2025 08:17:49 +0000
ROA not after:            Sun 28 Dec 2025 09:17:49 +0000
asID:                     36464
IP address blocks:        74.118.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/a88fcb86-473d-4a31-8a0d-95a046cda9a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/a88fcb86-473d-4a31-8a0d-95a046cda9a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5a:7a:c5:18:af:91:ea:2e:51:7b:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a88fcb86-473d-4a31-8a0d-95a046cda9a9
        Validity
            Not Before: Sep 29 08:17:49 2025 GMT
            Not After : Dec 28 09:17:49 2025 GMT
        Subject: CN=f26fa1c6-229b-4a30-8ab4-acd673231e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:96:40:79:72:3e:51:14:51:47:69:08:6d:81:
                    28:30:b2:95:0c:f3:aa:65:d6:a1:01:c4:ae:c3:c9:
                    7e:7d:8b:f5:c3:81:46:4d:5d:6d:5e:e8:c2:e1:42:
                    09:49:39:53:63:c6:25:10:23:be:fd:3f:fa:76:90:
                    3c:93:f4:72:eb:06:ac:e8:3e:68:18:c5:f8:c6:8d:
                    68:f8:18:28:a3:5c:35:5a:ae:68:ac:ab:e0:b2:c8:
                    19:83:64:20:ff:ed:90:3b:3e:50:60:8b:63:da:be:
                    d1:93:b7:1f:5f:24:95:6d:e8:70:e3:a0:a0:75:a7:
                    8e:3f:27:d7:c0:70:ed:8d:20:ed:76:02:d3:73:28:
                    65:92:a7:f2:b0:45:5a:2e:5b:42:52:89:01:a5:6a:
                    1b:f9:19:88:e7:09:39:12:0b:8c:47:25:79:91:ef:
                    cf:c6:d7:58:fa:80:74:06:13:b8:1f:40:89:96:f3:
                    d5:c8:6f:98:7e:0a:f3:69:e9:b5:f4:b2:04:fc:fc:
                    35:0a:14:57:6d:cd:0d:29:6b:c1:ee:90:9b:d6:a2:
                    ba:95:73:7f:25:16:e7:90:aa:8c:86:7a:98:4d:c8:
                    7e:c9:7b:37:a4:18:8c:08:be:64:db:79:13:5d:24:
                    c9:d5:61:3e:3a:99:1e:7e:f8:9b:cd:00:da:c1:6c:
                    50:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0A:3D:7F:B0:B1:41:D0:B5:C3:95:77:1E:C8:A2:C9:14:63:43:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/926dd37d-5549-3a7e-b870-336d400f37f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/a88fcb86-473d-4a31-8a0d-95a046cda9a9.crl

            X509v3 Authority Key Identifier:
                keyid:18:A4:B8:64:43:CB:19:79:9D:00:ED:69:10:B2:C3:93:50:C6:26:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:2a:b6:b0:47:3f:ed:9e:f1:5a:95:00:8c:45:07:31:49:83:
         73:ab:a5:e0:03:17:5d:97:9d:a4:0a:46:ab:2a:38:07:ad:8b:
         6f:fb:74:81:c4:4c:a8:b5:9c:c9:35:57:02:f7:22:fe:34:13:
         e9:f8:69:d0:c1:db:92:73:5e:a0:d0:50:99:34:fb:6f:40:1e:
         59:44:f9:e5:b4:4f:dd:c4:fe:c5:4a:c7:a1:0a:50:5f:8c:5b:
         39:6d:6e:40:24:e1:6c:56:ee:65:58:75:a5:62:70:33:6c:ad:
         b9:08:d5:24:3b:8e:e7:c5:a0:fb:29:47:fc:07:78:2e:65:9c:
         37:ff:02:d8:89:96:10:f5:55:3c:73:7f:32:6f:8a:95:ce:45:
         60:3f:22:7b:9a:0f:a0:43:00:1b:69:74:bf:e1:cb:06:23:cc:
         49:fd:f3:03:ea:df:27:df:5c:fb:13:9f:b0:dd:33:94:57:c6:
         4f:bc:6b:68:02:18:5b:e8:5d:3c:d0:24:54:9e:59:0a:55:26:
         a3:4e:97:72:52:ab:01:98:a6:64:9a:c2:c8:8e:f5:d9:92:8b:
         5b:69:23:8d:4e:63:9c:50:1b:40:c5:76:4a:0c:6e:b5:8d:9a:
         a3:f3:74:b3:4b:aa:b2:38:f3:83:e0:c3:58:e9:3d:07:71:29:
         f0:6a:fe:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:22:31 2025 by rpki-client