Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/24f5d92f-2d82-312c-8e5e-23cfcca8dfc9.roa
File:                     24f5d92f-2d82-312c-8e5e-23cfcca8dfc9.roa (raw, json)
Hash identifier:          m2ZG0+lBT8u42qMLidyY2+zC4gntqJJ2QAmFQ+Yu+5U=
Subject key identifier:   4D:5D:39:01:62:86:79:7D:0C:B6:A7:7D:B8:37:7A:4D:41:8B:97:43
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DCC6071D11B35D4075684F480
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/24f5d92f-2d82-312c-8e5e-23cfcca8dfc9.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     834
IP address blocks:        74.1.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:71:d1:1b:35:d4:07:56:84:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=8dba8ad1-be22-4c48-9cb9-930070c4c51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:42:ef:20:32:5f:b3:43:3a:4b:79:6c:fb:4f:
                    2a:53:35:98:f6:95:fd:11:76:4d:5f:69:4b:a4:9e:
                    8c:1e:06:7b:f2:c8:f4:e7:6e:f2:c3:2f:ca:09:f9:
                    f0:fd:b6:ab:82:a3:2e:d2:70:ff:18:c1:67:fd:80:
                    45:73:5b:2d:0b:72:5f:c1:9a:c1:b3:b9:79:b3:ba:
                    56:07:1f:be:84:e0:47:f7:67:d0:ec:80:fb:12:38:
                    6a:82:dd:8c:18:71:bf:03:ae:2c:bd:ca:32:f8:57:
                    fd:18:7c:11:a9:20:04:82:88:26:f4:44:8e:36:0b:
                    9b:41:63:4b:f5:5f:69:89:51:97:6c:5e:e5:d8:4b:
                    a9:81:3e:a5:3c:d4:04:ff:f4:6c:99:d8:26:7b:87:
                    d2:ae:54:f4:1a:fa:23:56:d8:27:0b:96:ba:74:b1:
                    78:73:36:87:26:43:99:f6:cb:7b:8c:3b:5b:ea:6b:
                    4a:68:f5:6d:63:d4:03:f3:2a:54:2a:a6:02:22:af:
                    ee:9b:13:9e:72:f3:38:5a:39:6e:46:83:82:c7:b0:
                    c3:55:4b:ba:71:16:a0:09:f5:08:f7:9d:f9:e7:d1:
                    c3:41:ce:38:3f:1a:03:11:c1:24:53:d0:a8:12:88:
                    47:82:04:50:32:dd:60:1f:c0:de:1e:b5:f3:20:66:
                    09:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5D:39:01:62:86:79:7D:0C:B6:A7:7D:B8:37:7A:4D:41:8B:97:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/24f5d92f-2d82-312c-8e5e-23cfcca8dfc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:66:cf:34:ec:8d:12:ab:24:9b:e5:55:b9:dd:59:13:54:76:
         a7:1b:32:5a:b3:a9:1e:99:29:be:f7:9e:02:27:50:5a:af:55:
         3b:48:9f:78:d8:2a:ba:46:22:b5:a1:d6:19:a6:44:a2:53:8f:
         a8:f9:20:f5:ed:6d:1b:02:a8:a5:20:70:59:71:57:5e:0a:c7:
         ca:8e:01:af:bc:4e:30:d4:23:02:fa:16:a2:5f:a0:62:f9:37:
         6d:6f:98:ab:99:e8:59:f3:0d:6c:0a:e3:91:bd:f8:8a:66:cc:
         06:2e:52:8a:ec:38:1c:6d:40:27:96:15:0e:35:03:75:62:6f:
         d5:a5:61:b1:1f:41:25:3c:99:6d:ce:bb:7e:43:ce:77:3f:c0:
         26:83:9a:f4:70:70:ac:79:2a:01:c0:19:78:b9:1e:a1:bd:45:
         aa:04:55:fa:60:2b:4a:b1:f2:a6:24:31:13:b9:bf:b5:8a:a4:
         a3:7e:6f:d5:37:cd:8b:a7:a8:6f:0c:35:74:e7:b2:17:f7:69:
         56:80:52:a0:20:9d:bf:43:0f:14:2f:fa:55:85:43:d6:9f:03:
         46:62:d5:6e:2f:ee:fe:7b:65:00:4f:78:d8:c0:60:d6:6c:a3:
         9f:fa:d9:7c:8b:1c:cb:99:97:55:62:8f:45:82:4a:cd:cd:5b:
         67:7b:4c:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3MYHHRGzXUB1aE9IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDUxMTEzMDAzMVoXDTI2MDgwOTEzMDAzMVowLzEtMCsGA1UEAxMk
OGRiYThhZDEtYmUyMi00YzQ4LTljYjktOTMwMDcwYzRjNTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgULvIDJfs0M6S3ls+08qUzWY9pX9EXZNX2lL
pJ6MHgZ78sj0527ywy/KCfnw/bargqMu0nD/GMFn/YBFc1stC3JfwZrBs7l5s7pW
Bx++hOBH92fQ7ID7Ejhqgt2MGHG/A64svcoy+Ff9GHwRqSAEgogm9ESONgubQWNL
9V9piVGXbF7l2EupgT6lPNQE//Rsmdgme4fSrlT0GvojVtgnC5a6dLF4czaHJkOZ
9st7jDtb6mtKaPVtY9QD8ypUKqYCIq/umxOecvM4WjluRoOCx7DDVUu6cRagCfUI
953559HDQc44PxoDEcEkU9CoEohHggRQMt1gH8DeHrXzIGYJqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE1dOQFihnl9DLanfbg3ek1Bi5dDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjRmNWQ5MmYtMmQ4Mi0z
MTJjLThlNWUtMjNjZmNjYThkZmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgFXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJmzzTsjRKrJJvlVbndWRNUdqcbMlqzqR6ZKb73ngInUFqvVTtIn3jY
KrpGIrWh1hmmRKJTj6j5IPXtbRsCqKUgcFlxV14Kx8qOAa+8TjDUIwL6FqJfoGL5
N21vmKuZ6FnzDWwK45G9+IpmzAYuUorsOBxtQCeWFQ41A3Vib9WlYbEfQSU8mW3O
u35Dznc/wCaDmvRwcKx5KgHAGXi5HqG9RaoEVfpgK0qx8qYkMRO5v7WKpKN+b9U3
zYunqG8MNXTnshf3aVaAUqAgnb9DDxQv+lWFQ9afA0Zi1W4v7v57ZQBPeNjAYNZs
o5/62XyLHMuZl1Vij0WCSs3NW2d7TE4=
-----END CERTIFICATE-----
Generated at Wed May 13 10:24:42 2026 by rpki-client