Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/46aa1f8d-db44-3e6f-8399-cbefe3790dbf.roa
File:                     46aa1f8d-db44-3e6f-8399-cbefe3790dbf.roa (raw, json)
Hash identifier:          iQdoECm44R2HYGlvVdiQ1k+3vIvYkGASEVDw1TlXwL8=
Subject key identifier:   95:34:62:8D:CF:13:A7:A2:B0:3D:FB:42:F2:C0:29:B4:06:4D:20:46
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DC29ADDB7E8F408A540B23F00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/46aa1f8d-db44-3e6f-8399-cbefe3790dbf.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     834
IP address blocks:        74.1.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:dd:b7:e8:f4:08:a5:40:b2:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=af0ff486-235f-4072-bcad-c17473e4ec4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6d:f9:42:9a:d4:71:af:d7:e5:01:e6:90:ae:
                    05:c3:ea:16:f6:9c:15:88:7c:a8:8f:1e:29:34:37:
                    fa:84:41:59:97:bf:46:00:96:7b:35:c4:64:4e:71:
                    09:64:fb:1f:b3:b1:50:13:12:3e:3b:8c:34:4e:04:
                    ea:7e:d1:c5:00:f5:8e:46:8d:0d:12:e3:57:b1:e8:
                    79:1f:8e:75:73:bc:f0:0b:b3:77:95:b4:46:12:86:
                    56:d2:82:3e:ce:b0:96:4b:a7:44:da:bd:26:70:2e:
                    59:4a:90:26:56:c7:3d:bc:49:57:30:af:12:e9:3d:
                    83:4b:ad:dc:13:9f:75:87:5d:9e:f9:79:0a:32:35:
                    2f:7d:13:00:f8:cc:ce:40:e2:9f:4b:29:b0:69:96:
                    a4:3f:73:8a:f9:ef:6b:98:3c:49:f9:a5:13:12:6c:
                    f7:3d:fb:cf:cc:c9:b3:55:7c:3c:51:b6:2d:a9:bd:
                    aa:13:c3:01:71:99:10:13:fb:b5:f4:a6:5e:4a:b7:
                    6c:60:dc:67:21:78:b1:83:5f:1f:37:1c:de:a5:39:
                    10:76:9e:d6:f4:f2:ac:87:3e:b1:77:fb:d3:8b:7d:
                    9f:fd:be:71:da:85:32:00:52:da:8b:69:4d:8f:3a:
                    a2:f5:5c:ad:a2:a4:8a:58:9d:f3:de:64:c3:62:0f:
                    0d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:34:62:8D:CF:13:A7:A2:B0:3D:FB:42:F2:C0:29:B4:06:4D:20:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/46aa1f8d-db44-3e6f-8399-cbefe3790dbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:6a:94:6a:79:6e:14:01:12:36:b8:2b:5d:44:bf:de:e7:98:
         7b:b6:06:7b:6b:27:1d:6f:78:c7:cd:62:d0:15:7a:39:11:7b:
         c5:c7:af:7f:c5:05:ae:85:14:3c:5a:65:40:38:99:44:2d:e7:
         0c:33:2e:6b:f7:96:8f:7b:a6:8f:48:2b:a5:61:d3:fd:31:79:
         d2:92:d5:eb:f6:04:1e:36:39:1b:97:c3:69:f3:3b:60:61:ef:
         b6:9b:38:be:e6:7e:2f:fa:81:84:19:10:df:56:b6:42:f9:2d:
         54:06:5e:6b:d2:c9:fb:78:af:4c:db:6b:06:ef:e6:3f:86:5c:
         b3:67:c5:54:89:b8:9f:87:2c:da:57:fe:cf:68:ef:23:cf:d4:
         72:0d:0a:94:20:2b:15:dc:2f:11:c5:d7:3c:ee:36:1f:7c:b1:
         ad:63:56:d0:7e:fe:db:7a:bd:6f:1b:64:23:b6:62:46:0a:45:
         08:9f:ef:fa:c1:0b:91:23:2c:04:98:06:65:27:c7:ef:e1:42:
         ee:96:d4:a8:1b:65:a5:75:b3:9e:bf:e9:07:c0:39:40:43:01:
         a6:ac:43:e8:f6:59:c6:23:da:31:2c:10:6b:13:fb:59:ce:73:
         12:27:81:91:5c:e9:dc:cd:b4:58:66:72:45:75:6a:bf:4f:49:
         7c:6f:1f:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Cmt236PQIpUCyPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk
YWYwZmY0ODYtMjM1Zi00MDcyLWJjYWQtYzE3NDczZTRlYzRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg235QprUca/X5QHmkK4Fw+oW9pwViHyojx4p
NDf6hEFZl79GAJZ7NcRkTnEJZPsfs7FQExI+O4w0TgTqftHFAPWORo0NEuNXseh5
H451c7zwC7N3lbRGEoZW0oI+zrCWS6dE2r0mcC5ZSpAmVsc9vElXMK8S6T2DS63c
E591h12e+XkKMjUvfRMA+MzOQOKfSymwaZakP3OK+e9rmDxJ+aUTEmz3PfvPzMmz
VXw8UbYtqb2qE8MBcZkQE/u19KZeSrdsYNxnIXixg18fNxzepTkQdp7W9PKshz6x
d/vTi32f/b5x2oUyAFLai2lNjzqi9VytoqSKWJ3z3mTDYg8N4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJU0Yo3PE6eisD37QvLAKbQGTSBGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDZhYTFmOGQtZGI0NC0z
ZTZmLTgzOTktY2JlZmUzNzkwZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgFiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhqlGp5bhQBEja4K11Ev97nmHu2BntrJx1veMfNYtAVejkRe8XHr3/F
Ba6FFDxaZUA4mUQt5wwzLmv3lo97po9IK6Vh0/0xedKS1ev2BB42ORuXw2nzO2Bh
77abOL7mfi/6gYQZEN9WtkL5LVQGXmvSyft4r0zbawbv5j+GXLNnxVSJuJ+HLNpX
/s9o7yPP1HINCpQgKxXcLxHF1zzuNh98sa1jVtB+/tt6vW8bZCO2YkYKRQif7/rB
C5EjLASYBmUnx+/hQu6W1KgbZaV1s56/6QfAOUBDAaasQ+j2WcYj2jEsEGsT+1nO
cxIngZFc6dzNtFhmckV1ar9PSXxvH8E=
-----END CERTIFICATE-----
Generated at Wed May 13 09:28:43 2026 by rpki-client