Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4bc5876f-d127-3f6e-ab96-ac9050852261.roa
File:                     4bc5876f-d127-3f6e-ab96-ac9050852261.roa (raw, json)
Hash identifier:          T+Id23u9pxce2RiSPgd2Ta3wDzIZ0SHD4rU2iHoYDRU=
Subject key identifier:   9D:4D:FE:27:DC:7D:E4:A8:62:99:2B:95:D8:E3:D7:CD:26:1B:28:4D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DADAAEC7DBC27881873240148
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4bc5876f-d127-3f6e-ab96-ac9050852261.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     834
IP address blocks:        74.1.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:ec:7d:bc:27:88:18:73:24:01:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=8e590d02-3ffc-45e0-898e-8ab453a800e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e7:de:f5:bd:02:1a:e8:c6:9d:1b:63:f0:98:
                    a9:7a:c6:cd:97:b9:03:c1:30:38:f8:7d:f6:b1:d4:
                    57:ed:b8:a4:25:3a:66:b9:8a:a2:62:42:a1:0c:e8:
                    c3:e3:4c:f0:72:a7:61:d8:54:af:fe:f9:44:c1:07:
                    37:0b:63:8a:82:27:ad:46:3b:07:e9:6c:3a:65:a8:
                    62:3a:4d:56:73:2b:a9:fd:cb:e6:28:46:96:2b:ed:
                    1d:71:27:68:fe:bb:81:4a:8d:f9:19:bf:71:1d:90:
                    1a:54:7e:aa:9a:c0:42:2d:78:d3:a5:70:cf:d1:a4:
                    5e:50:b1:cc:35:b8:5d:29:3d:be:ec:b7:2c:16:5e:
                    5d:40:dc:36:28:03:6c:fc:49:a4:7b:46:46:9b:84:
                    07:90:cb:bc:8a:c7:21:17:c2:9f:57:00:73:11:de:
                    db:a3:79:58:a8:88:13:7a:e2:3d:51:a7:84:05:8a:
                    e4:77:22:b9:c9:b3:c0:04:02:bc:2a:e9:63:bb:11:
                    47:ba:2b:a5:d6:89:3a:a1:62:9d:86:bb:5f:cf:b6:
                    0d:41:11:bd:76:d2:b4:23:86:ce:1a:38:41:f7:c0:
                    b7:48:0c:32:b3:32:28:d5:bf:c4:3c:51:b6:d9:da:
                    12:09:ab:c2:57:e5:1a:8b:ba:2e:5a:26:9a:03:95:
                    09:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4D:FE:27:DC:7D:E4:A8:62:99:2B:95:D8:E3:D7:CD:26:1B:28:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4bc5876f-d127-3f6e-ab96-ac9050852261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:b5:95:ca:72:9b:5e:71:b9:29:bb:2d:de:a7:2e:3d:bb:80:
         18:38:e0:43:86:7a:f9:a0:4c:ea:27:06:d3:18:33:0c:92:b4:
         09:3a:9b:a0:1d:92:d6:2b:ea:4a:5b:b9:d1:60:38:90:b3:7a:
         97:05:b3:6e:44:7e:5a:97:ce:2e:8c:7f:98:88:c7:d8:49:55:
         65:d8:41:4c:25:80:6a:15:ba:a9:41:c1:85:85:1f:87:05:57:
         fb:ca:08:01:eb:ba:91:c4:f2:b7:fb:af:79:3f:ea:ab:77:af:
         28:58:c4:91:44:14:57:11:66:9f:36:c9:dd:44:cc:e8:98:37:
         42:c5:8e:c8:03:3a:fd:6f:a8:9d:89:1a:f8:1f:f3:b6:a7:a3:
         c0:d5:33:7b:37:26:43:a7:19:b0:e3:4a:2d:d9:07:69:8d:92:
         ab:cd:5a:da:5b:8c:95:9e:e9:15:0e:c9:e3:1e:53:5e:69:ab:
         f0:6f:50:10:f1:7e:50:ac:2e:3a:cd:df:51:35:cf:18:ba:9a:
         df:55:59:3d:da:a7:42:cc:e7:58:84:3d:db:c2:af:33:b1:87:
         93:14:95:0a:ff:d4:1a:d3:57:2c:d1:d3:ad:5e:8b:2d:00:f0:
         02:bb:78:2a:2e:bf:ec:d7:64:a4:de:3d:e5:f6:31:60:05:93:
         58:06:c3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:04:49 2026 by rpki-client