Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/344e936e-ca87-3621-a857-2bf4cfc905a4.roa
File:                     344e936e-ca87-3621-a857-2bf4cfc905a4.roa (raw, json)
Hash identifier:          Sjb3zDzmyU8/8V8BCg+2bn5EAhMbYPYUTmE9uTrnkPs=
Subject key identifier:   32:3D:E8:A3:8B:55:D6:98:BE:54:0D:9A:86:50:27:33:C7:99:5D:65
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D8AC55DB217E6450EEE735C00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/344e936e-ca87-3621-a857-2bf4cfc905a4.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     834
IP address blocks:        74.1.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:5d:b2:17:e6:45:0e:ee:73:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=0843a06f-11d5-480d-a96d-58e615be8342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:eb:7a:ae:18:8e:39:2c:0b:35:34:78:0e:48:
                    7c:21:b6:9e:50:5d:4c:68:1c:02:a7:8b:a4:4f:f4:
                    c6:8f:ec:d6:47:77:29:9c:24:ea:35:e4:94:18:6e:
                    d6:17:f3:6d:05:21:46:80:00:61:d3:34:ac:01:43:
                    f9:bb:39:17:fc:f9:80:a4:3c:81:98:96:24:86:0c:
                    f0:98:27:f2:27:e4:c8:58:7a:cd:de:ec:a9:fd:51:
                    05:60:d5:e9:75:90:3e:f9:a3:22:a0:6d:15:25:a8:
                    1b:94:34:85:6f:2a:cb:69:54:93:bf:a8:b5:c8:2a:
                    10:5f:10:8c:64:5b:bf:30:b1:9a:e6:84:42:28:8b:
                    f2:97:a1:e1:7d:29:e5:64:51:53:b2:20:98:49:da:
                    72:37:fb:eb:8c:09:6b:8c:12:bd:cc:34:a1:3f:cc:
                    36:bb:b7:52:db:5f:0f:50:a3:cb:9e:ee:eb:ab:83:
                    a3:18:82:fe:5c:71:73:9f:44:1c:4f:89:76:74:7a:
                    93:55:85:a5:51:f6:fe:8b:3a:7f:a7:1e:08:26:77:
                    1e:d7:f5:9c:12:2e:c6:bb:d2:65:0b:4e:9c:0e:1c:
                    93:31:59:5b:31:b7:cb:12:b8:ac:3e:ec:42:2a:1f:
                    44:57:2d:6f:f8:59:7b:2e:7c:37:8d:58:ae:f6:89:
                    b8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3D:E8:A3:8B:55:D6:98:BE:54:0D:9A:86:50:27:33:C7:99:5D:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/344e936e-ca87-3621-a857-2bf4cfc905a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:8a:68:e3:1b:4d:65:6d:a4:1f:62:8f:cb:02:90:f4:f5:e1:
         c0:54:1d:cb:44:f3:69:0b:fe:b6:56:b9:20:71:89:4d:19:8a:
         b3:29:8f:cb:fb:cf:f7:77:90:40:1e:e7:c5:e8:d5:a4:2c:f0:
         2e:87:d9:32:76:18:fd:b8:99:a8:b8:e7:ee:9d:ec:31:b3:d2:
         f6:7d:9f:74:48:c2:df:e6:65:d1:e6:e0:b2:4d:92:58:20:4e:
         87:78:55:04:3c:67:c5:14:81:cc:a1:58:36:84:f0:0d:d4:6e:
         72:21:7c:e2:aa:8a:b5:3c:c4:4f:c9:c4:db:9d:60:6d:1a:9a:
         35:6a:dc:a3:9c:e9:03:f9:6b:b0:18:62:fe:55:84:15:e2:65:
         3f:4d:3f:a1:80:a0:c6:14:e1:83:78:93:b2:8e:17:85:1b:76:
         ac:ac:36:56:a4:36:23:be:5b:14:37:46:e8:70:bc:9b:93:f5:
         3c:50:47:9f:a7:57:02:6f:05:ab:de:a4:19:67:78:df:81:ee:
         04:76:e5:fc:39:cb:cb:a1:49:2e:5e:87:3d:bc:23:a7:ac:a7:
         53:6e:46:f6:e8:d1:53:f7:e9:08:02:48:8f:b8:0d:e1:62:54:
         32:db:99:dd:37:73:c0:6a:5b:38:5a:85:8f:f6:ae:ea:05:d4:
         61:83:67:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:34:24 2026 by rpki-client