Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38c34760-aa84-31a5-948c-fc76f9374d52.roa
File:                     38c34760-aa84-31a5-948c-fc76f9374d52.roa (raw, json)
Hash identifier:          1ZeqNSf0RfO5wVZJgivJD9YDvQ9eEmlmrt/qeumMxiI=
Subject key identifier:   17:3D:50:EB:F0:92:2D:35:D2:AA:EC:07:33:32:05:10:CC:0C:2E:66
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D8C2AAFDD568D4532C7F5FDC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38c34760-aa84-31a5-948c-fc76f9374d52.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     834
IP address blocks:        74.0.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:af:dd:56:8d:45:32:c7:f5:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=021d39cf-27c0-41b3-9f2c-8f1c848f3965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:66:21:fb:fc:00:25:1a:21:d8:b7:fd:56:
                    98:57:c3:d4:ea:09:15:fb:5b:09:5a:29:de:c7:1d:
                    b9:7e:8a:5d:56:85:a9:99:72:fc:c0:e4:31:0f:0f:
                    3b:a8:1c:95:42:01:cd:9d:da:f0:f4:74:d6:77:f3:
                    be:d9:48:a0:8f:56:d2:ef:85:6e:5c:9e:aa:74:34:
                    93:80:01:48:d0:bf:54:60:9d:47:61:c0:ba:e8:e0:
                    4d:ce:30:26:a7:67:9f:39:42:21:cf:d7:2b:eb:23:
                    80:b1:21:5e:2e:0c:29:a4:30:29:48:48:ac:4f:ed:
                    82:cb:c7:ef:63:04:58:75:49:44:57:7d:b5:1c:41:
                    3d:c9:f0:ab:16:19:e4:17:19:be:0c:ab:18:e2:86:
                    20:22:37:c1:87:1a:2f:cf:52:7c:69:e8:59:7a:0b:
                    fc:82:19:d1:96:55:ce:fd:b6:ef:ce:ca:6b:53:26:
                    74:1b:cc:02:0f:26:93:34:82:05:e1:5f:96:24:d7:
                    0a:76:02:e8:4a:a4:4f:47:e7:ab:90:d2:8e:8d:e6:
                    c3:42:82:50:05:65:aa:62:03:17:c3:7a:6d:51:c9:
                    06:a4:6a:28:d3:bb:0e:5f:1e:e9:14:33:db:5f:e1:
                    eb:e9:bf:96:56:d1:f5:ec:46:f3:c9:66:6a:37:6c:
                    7c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3D:50:EB:F0:92:2D:35:D2:AA:EC:07:33:32:05:10:CC:0C:2E:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38c34760-aa84-31a5-948c-fc76f9374d52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:50:14:b9:3a:a6:e1:c5:b6:7c:20:17:b4:0a:ce:8b:66:65:
         21:48:6d:f0:f2:5d:d7:35:56:ef:4c:8d:dd:cf:8d:63:dd:ae:
         73:99:24:a0:a9:d6:81:b5:a0:ce:e7:63:4e:d5:3c:81:63:9a:
         9f:41:b1:db:db:66:21:41:85:84:92:52:bf:77:29:6b:40:2a:
         cc:d9:8d:c2:10:ec:5d:d5:cf:93:fc:06:8f:2b:9a:4a:b3:9e:
         4c:dc:69:fe:0f:4a:b9:50:d8:f1:4b:c5:10:20:66:b9:cf:36:
         3b:7f:53:68:d4:81:cf:eb:7d:ed:b0:dc:07:7b:90:4f:bc:02:
         e5:94:35:2c:7a:ca:d3:bf:01:c0:54:75:9e:d3:61:7d:54:74:
         56:54:31:c7:34:ce:90:fd:5b:0c:47:ed:90:5e:05:bd:23:d7:
         f1:7e:5c:5c:59:52:52:c0:98:70:3b:3f:93:2a:50:7a:a2:59:
         26:af:7b:4b:f6:18:31:4c:46:b7:ac:5e:43:8a:82:de:89:4b:
         ef:27:55:ca:9e:31:19:8c:c2:9c:fb:18:e0:2f:02:dd:f4:e6:
         3b:0a:87:0d:c5:1c:62:f0:c0:e0:20:9f:74:cb:4a:08:02:31:
         67:70:02:ec:94:d2:6a:9c:1a:7c:80:7d:ea:89:7a:37:e8:51:
         87:80:11:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKq/dVo1FMsf1/cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk
MDIxZDM5Y2YtMjdjMC00MWIzLTlmMmMtOGYxYzg0OGYzOTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb5mIfv8ACUaIdi3/VaYV8PU6gkV+1sJWine
xx25fopdVoWpmXL8wOQxDw87qByVQgHNndrw9HTWd/O+2Uigj1bS74VuXJ6qdDST
gAFI0L9UYJ1HYcC66OBNzjAmp2efOUIhz9cr6yOAsSFeLgwppDApSEisT+2Cy8fv
YwRYdUlEV321HEE9yfCrFhnkFxm+DKsY4oYgIjfBhxovz1J8aehZegv8ghnRllXO
/bbvzsprUyZ0G8wCDyaTNIIF4V+WJNcKdgLoSqRPR+erkNKOjebDQoJQBWWqYgMX
w3ptUckGpGoo07sOXx7pFDPbX+Hr6b+WVtH17EbzyWZqN2x8xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBc9UOvwki010qrsBzMyBRDMDC5mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzhjMzQ3NjAtYWE4NC0z
MWE1LTk0OGMtZmM3NmY5Mzc0ZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgBYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHhQFLk6puHFtnwgF7QKzotmZSFIbfDyXdc1Vu9Mjd3PjWPdrnOZJKCp
1oG1oM7nY07VPIFjmp9BsdvbZiFBhYSSUr93KWtAKszZjcIQ7F3Vz5P8Bo8rmkqz
nkzcaf4PSrlQ2PFLxRAgZrnPNjt/U2jUgc/rfe2w3Ad7kE+8AuWUNSx6ytO/AcBU
dZ7TYX1UdFZUMcc0zpD9WwxH7ZBeBb0j1/F+XFxZUlLAmHA7P5MqUHqiWSave0v2
GDFMRresXkOKgt6JS+8nVcqeMRmMwpz7GOAvAt305jsKhw3FHGLwwOAgn3TLSggC
MWdwAuyU0mqcGnyAfeqJejfoUYeAEfo=
-----END CERTIFICATE-----
Generated at Wed May 13 16:50:30 2026 by rpki-client