Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/182fb9c9-492f-331d-a189-4a757e78dd9b.roa
File:                     182fb9c9-492f-331d-a189-4a757e78dd9b.roa (raw, json)
Hash identifier:          aHes9sL/QywZ8UuvsKa0dHRzvwYh3AOIbDr+HfS7O1o=
Subject key identifier:   B1:F1:F3:B4:81:BA:8C:5C:23:6B:95:0B:4D:3C:60:56:80:37:1B:E5
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F49732379601C6974B3C64880
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/182fb9c9-492f-331d-a189-4a757e78dd9b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        74.0.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:23:79:60:1c:69:74:b3:c6:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=45457ce9-5b0e-4121-8c97-b4c520260a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:1c:9b:e2:e5:28:6f:df:99:bc:41:ec:90:
                    5b:8a:92:2a:6b:78:ea:36:df:12:94:56:64:1e:e3:
                    4c:32:8b:bc:be:a9:ac:e2:cb:e9:83:91:8b:ce:c6:
                    49:f5:ef:39:13:67:12:6c:2c:b5:f4:33:d1:bd:90:
                    36:9c:24:34:27:51:0b:e4:2d:45:e6:6a:97:59:a8:
                    19:c6:71:07:82:0a:e6:9b:2a:61:35:3c:48:2e:09:
                    b6:1e:af:fc:70:33:d4:3c:45:56:e9:53:60:46:34:
                    1b:71:1e:a5:22:17:cf:7e:19:39:82:f0:35:2b:a2:
                    8d:8b:18:08:21:ea:63:14:2e:6f:2f:c6:1a:02:0f:
                    85:f2:e2:a5:94:14:56:fb:6b:fa:3b:b8:f9:07:37:
                    07:9d:73:b7:8f:ca:fc:ab:72:f5:7c:71:45:72:49:
                    cc:54:75:01:6c:62:4a:e5:b2:99:70:f7:82:f7:7a:
                    b8:09:50:31:c3:a2:bf:0e:c0:51:aa:ff:73:59:93:
                    70:e9:91:06:35:f4:ad:0f:da:48:81:01:fd:cc:26:
                    36:bb:e4:3a:ff:77:3a:91:df:d1:5c:2a:f5:e5:74:
                    5f:80:93:7b:eb:f1:8e:7e:08:c5:7d:ff:e9:47:e7:
                    fa:8c:8e:a7:2c:13:36:6f:09:0a:62:c1:d3:cb:17:
                    82:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F1:F3:B4:81:BA:8C:5C:23:6B:95:0B:4D:3C:60:56:80:37:1B:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/182fb9c9-492f-331d-a189-4a757e78dd9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:90:e9:71:56:96:42:f9:ee:09:f9:8f:2c:68:e4:9d:be:40:
         7d:9c:55:80:d2:ad:c2:2f:48:05:f5:cf:e5:c8:40:72:57:d1:
         f1:d5:80:f1:b7:13:42:8b:81:c1:9d:e2:cb:03:2c:3f:cd:4f:
         a5:4b:5a:50:1e:f0:b7:7a:c5:da:08:bc:b3:82:a1:62:b2:6f:
         be:3f:46:e4:23:82:e7:66:d7:36:1c:5b:30:ce:26:97:e4:75:
         f7:7a:fc:91:d7:97:ed:e2:1a:90:cf:33:b4:9c:31:be:43:98:
         a5:8e:3a:36:80:0c:a4:a5:8e:fe:7e:67:82:a7:8d:a7:af:36:
         af:f6:aa:c1:02:82:52:c6:66:01:03:7c:c8:43:a7:1c:00:ce:
         8d:96:12:1e:95:5f:8e:c1:aa:3f:4b:c8:55:81:14:97:4a:48:
         82:61:4b:66:38:f0:ef:66:80:5a:c6:b6:69:31:ea:3f:f3:63:
         ec:0c:d7:e9:8a:05:cb:c8:99:30:5e:d3:b6:c8:f4:58:ac:8e:
         d0:df:7f:01:70:f5:62:33:8b:87:34:24:94:61:e0:2c:85:62:
         91:74:da:cc:4a:e6:4d:46:36:a7:27:13:bf:23:53:28:cf:81:
         8a:20:6e:16:0c:82:d4:22:bd:ca:dd:14:71:53:32:ee:9e:b3:
         d1:31:f1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:23:35 2026 by rpki-client