Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/55e3b0e8-06ff-3b92-92a1-e15d2fc4f81f.roa
File:                     55e3b0e8-06ff-3b92-92a1-e15d2fc4f81f.roa (raw, json)
Hash identifier:          hFqVDP24D+8B/D+7wlp7kF7ECMNAzN4QOMwscZzIgPs=
Subject key identifier:   B1:35:D3:1D:06:5E:F5:4D:C0:1B:2F:18:A5:3E:8C:27:07:68:4D:05
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DADAAEF54B6CBE97A4F348A40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/55e3b0e8-06ff-3b92-92a1-e15d2fc4f81f.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     834
IP address blocks:        74.0.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:ef:54:b6:cb:e9:7a:4f:34:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=e4ae7255-9b99-4d80-b7d5-c69e086f2d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2f:2d:20:25:bc:56:b7:76:de:35:60:a5:8e:
                    47:69:0d:00:b3:ce:c6:52:8f:4a:e6:bc:f0:c4:8b:
                    f9:4e:59:09:b9:44:26:18:e5:af:b8:94:2c:e1:44:
                    49:d4:65:33:af:1b:9d:cb:b6:01:7f:84:77:99:bd:
                    90:b9:15:e9:06:ae:6d:b0:94:7c:dc:b7:eb:be:40:
                    00:d9:39:d2:70:e4:25:35:bb:0d:bb:bd:7a:4c:70:
                    fc:04:aa:5e:82:bf:d7:37:65:84:57:84:fb:39:8a:
                    90:e8:4b:5a:29:67:7f:82:c9:8f:9d:fd:8e:d3:47:
                    ba:ab:f5:40:07:c8:0f:71:f1:b5:a5:de:b1:4d:07:
                    b0:59:c0:11:f9:4c:28:bf:c7:1d:a5:4c:65:87:f1:
                    88:7d:ea:e4:7d:48:b4:90:a3:42:cf:0f:73:dc:0d:
                    93:65:9e:eb:60:77:73:a8:53:e3:77:b9:3b:67:2e:
                    41:8e:0c:6a:b6:7f:44:94:6a:64:95:1c:3f:4b:70:
                    31:a3:df:44:78:1c:b5:cd:fa:7f:b7:0b:51:9a:e6:
                    cf:31:d2:bf:0b:c3:fa:7b:4e:9e:15:37:58:d1:6e:
                    d7:33:93:67:b5:73:3a:29:b0:36:29:ec:af:f7:4b:
                    03:da:f1:95:97:09:d5:1c:12:be:fc:3b:d0:50:81:
                    2c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:35:D3:1D:06:5E:F5:4D:C0:1B:2F:18:A5:3E:8C:27:07:68:4D:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/55e3b0e8-06ff-3b92-92a1-e15d2fc4f81f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:67:1c:21:b0:a9:53:5b:8e:b9:d7:9c:76:1d:13:cb:e5:21:
         8c:c9:dd:28:f3:12:5d:b6:3c:7f:34:fa:a6:3b:45:ca:97:44:
         da:9a:e5:a1:0f:41:22:3e:09:4a:1a:42:76:30:d2:9b:e4:d8:
         27:ef:5b:34:39:58:0e:7f:01:1c:ca:84:97:e7:7a:07:ba:23:
         2b:61:e9:17:7b:5c:04:e8:cb:89:3c:fa:6b:15:61:ea:24:c8:
         78:8e:a1:4a:c8:6f:82:14:bb:7c:13:3c:ce:c9:7b:9b:1b:bf:
         8d:38:97:4a:24:d0:56:75:87:5e:41:10:e5:9f:a5:39:28:d8:
         6c:3d:a7:26:0d:63:c3:40:f8:6a:67:fd:b7:3a:35:f0:88:90:
         0e:f6:dc:38:e5:ce:b8:4a:22:fd:ae:1b:2f:0d:4e:9b:0a:82:
         a5:19:6f:60:f0:22:d7:e1:f3:02:e2:37:d3:d1:3b:0f:3d:d5:
         43:0c:91:cb:26:b9:96:13:b6:f8:95:a8:c1:b1:70:e7:de:0a:
         84:4b:36:db:aa:f3:2a:32:19:5a:cc:91:a8:03:63:c8:2c:fc:
         0d:e6:8d:bf:15:f5:c0:3c:73:44:b3:66:39:21:56:8c:17:91:
         ab:b2:fe:da:0b:f7:5c:c5:b0:ed:93:0a:fa:e2:e5:61:7f:ca:
         a5:57:fb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:58:42 2026 by rpki-client