Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2322b7d6-de42-33c7-afde-0132d72d1e77.roa
File:                     2322b7d6-de42-33c7-afde-0132d72d1e77.roa (raw, json)
Hash identifier:          97kSxewz/D+MBelW9hBnjwIp2teSPebycacolUgVLpY=
Subject key identifier:   91:BE:0B:D8:F4:A2:2F:5C:A2:ED:60:B2:2E:D4:8D:7D:76:37:AB:A9
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E6C6F7570B003E77F7780EE40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2322b7d6-de42-33c7-afde-0132d72d1e77.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     39521
IP address blocks:        74.0.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:75:70:b0:03:e7:7f:77:80:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=1a8d5fc4-4552-41d7-8eef-e65492af51bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:40:fb:0d:1b:b6:13:fe:68:50:f8:22:46:
                    ae:27:c5:34:d3:11:e3:34:88:b8:b9:ed:2f:04:f4:
                    c8:e8:d5:d6:d0:45:99:b6:1d:52:d7:e8:31:38:30:
                    33:51:97:aa:90:55:02:76:70:18:2f:14:a2:dc:28:
                    99:61:c2:bd:2c:ab:df:18:24:0e:f7:0e:48:b4:71:
                    30:00:63:96:47:8c:f6:07:8e:3f:66:46:fc:33:56:
                    5f:72:11:96:38:bd:86:a4:55:1f:28:02:9f:a7:22:
                    9c:21:39:5c:d8:66:7a:be:d3:16:bb:e3:1a:d8:db:
                    17:28:45:c9:63:a3:6d:c5:ea:5c:78:fe:86:03:c8:
                    5e:5f:f6:f5:7b:33:29:84:be:da:d2:d3:62:6b:2a:
                    45:a4:82:27:35:3b:65:d6:c8:be:01:83:9e:fb:eb:
                    53:ed:cb:88:3b:c4:29:f9:95:49:1f:08:e1:d6:15:
                    15:fa:20:5b:67:3a:1e:a9:1b:f5:bb:1b:a5:82:59:
                    64:c5:7e:da:31:59:22:33:19:00:36:5c:cd:10:70:
                    a0:56:88:63:fc:8f:aa:2a:33:ab:5b:7a:1c:97:d9:
                    dd:80:9a:de:96:34:f5:35:1e:fc:1f:82:d7:7b:c0:
                    62:2a:9a:ef:e3:96:00:13:45:a1:39:1d:3c:dd:a0:
                    37:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BE:0B:D8:F4:A2:2F:5C:A2:ED:60:B2:2E:D4:8D:7D:76:37:AB:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2322b7d6-de42-33c7-afde-0132d72d1e77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b6:15:6a:93:d0:48:24:71:ec:a5:55:fd:15:b2:61:58:9a:
         b8:ae:5d:b7:cd:8b:77:f9:39:da:ee:31:b6:9b:72:40:88:90:
         17:85:10:ca:67:18:32:8d:54:bc:c6:0f:33:c0:1a:f3:f7:5f:
         01:b6:7c:d4:f7:1e:6f:9c:36:15:f4:e6:3f:30:14:b8:98:47:
         9d:02:f8:70:20:1d:b9:0b:66:47:c2:b4:bc:20:a0:a3:30:9a:
         70:43:f5:f8:d4:37:5e:59:bf:b6:36:df:db:86:21:51:38:4a:
         ec:83:21:18:9c:b8:cb:3f:8c:59:21:31:f0:b4:0b:e2:7f:72:
         4b:bb:e3:8e:5c:6c:0e:d6:f6:53:8f:d4:03:a2:56:db:98:4a:
         64:08:5c:ba:47:5c:d0:55:cf:47:bb:1c:50:97:61:27:8a:d3:
         c7:9c:63:ea:f6:6b:21:53:3c:1a:ef:2d:6b:a0:b0:0a:51:ec:
         c0:27:dc:b1:af:d3:48:f1:a2:b0:02:1a:a0:fa:6a:23:15:47:
         e7:66:1d:79:f9:3b:7e:56:f4:4a:2d:ac:37:65:69:d5:ba:09:
         18:ea:3a:5a:db:2f:6d:94:5c:48:62:55:18:d3:3f:31:6e:07:
         42:82:50:12:ae:07:a8:79:96:f9:3d:eb:87:2c:84:7d:75:e5:
         d6:a6:5b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:27:23 2026 by rpki-client