Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5690cfc1-8ca3-39f7-8b8d-aeda05247c6a.roa
File:                     5690cfc1-8ca3-39f7-8b8d-aeda05247c6a.roa (raw, json)
Hash identifier:          SM7jUSUY/pKUldvlgKhIQOwlA4nXKyZtU4ZtEVrxHoE=
Subject key identifier:   AD:F6:DE:45:C1:35:07:B7:3F:C3:00:7D:B9:0F:92:2A:36:F5:4D:E5
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D0BDB188763031BD505F92600
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5690cfc1-8ca3-39f7-8b8d-aeda05247c6a.roa
Signing time:             Tue 03 Mar 2026 13:56:55 +0000
ROA not before:           Tue 03 Mar 2026 13:56:55 +0000
ROA not after:            Mon 01 Jun 2026 12:56:55 +0000
asID:                     2914
IP address blocks:        74.0.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:db:18:87:63:03:1b:d5:05:f9:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar  3 13:56:55 2026 GMT
            Not After : Jun  1 12:56:55 2026 GMT
        Subject: CN=0b5e469b-2ea2-43b0-96ec-c042932340b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7e:c6:a8:40:eb:68:2f:36:91:d3:44:41:33:
                    51:0d:90:85:8c:52:ed:20:f9:c7:c6:36:40:75:a6:
                    a1:1a:2c:71:57:ad:17:21:94:f5:6f:21:58:9f:a6:
                    ef:d0:c5:36:9a:96:b8:0a:4c:c2:f6:ea:ff:09:09:
                    13:c3:20:69:03:e2:36:30:4a:be:97:5a:8c:29:43:
                    76:aa:93:6f:fc:11:9f:0d:1f:ad:3c:57:ae:e5:0a:
                    eb:fc:a2:15:96:35:92:c4:67:50:98:98:5a:3e:f7:
                    fb:16:21:ec:13:71:69:c5:14:80:d9:89:0c:b7:3e:
                    c3:d6:97:93:c8:68:8a:a1:3e:25:2c:0a:67:20:c1:
                    a2:bb:3c:b8:0d:0e:7b:93:17:68:a9:fa:37:c0:28:
                    4a:77:08:5f:1d:47:ff:dd:25:d0:25:7c:a3:a8:a5:
                    07:13:ee:ec:a8:5e:0a:1a:98:6f:9d:72:6b:a1:a3:
                    a0:a5:f2:03:99:95:62:28:75:7c:b5:40:bb:bf:c9:
                    b5:90:6f:08:19:95:d6:ac:7a:d8:f2:41:5b:04:07:
                    0a:06:3b:74:62:2c:17:d0:94:fc:67:2e:81:0e:6c:
                    b1:20:a3:06:f0:22:c7:f9:d7:ed:14:7a:84:28:31:
                    a5:dd:d4:27:10:32:a2:f9:97:a5:ff:c9:30:29:83:
                    11:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F6:DE:45:C1:35:07:B7:3F:C3:00:7D:B9:0F:92:2A:36:F5:4D:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5690cfc1-8ca3-39f7-8b8d-aeda05247c6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:de:64:01:8d:d2:c5:65:88:72:00:ef:61:94:12:da:91:c8:
         b3:02:47:22:3f:6e:e4:31:8e:ee:92:5b:bd:bf:42:ef:b6:bb:
         4e:da:87:bd:c0:c9:f2:79:cf:d8:2e:2f:4d:bc:9d:4a:ef:78:
         a4:ab:b5:83:e2:8a:21:07:c2:59:fb:06:9d:4b:78:80:d3:84:
         b3:8f:b1:5f:9e:55:3b:fe:ad:4d:18:61:3a:84:45:bc:b5:49:
         09:bf:b7:bb:9b:9e:65:3b:3f:17:b5:3e:3e:e2:b5:c1:c7:79:
         fa:98:cf:54:d1:6c:f8:8a:7b:8e:2c:c0:da:a8:32:03:76:d6:
         17:3d:8e:64:5c:b3:9f:ab:3a:46:08:2a:cf:5b:85:49:73:42:
         be:df:f2:5d:26:43:7f:6f:eb:76:9f:be:b1:7c:b1:1e:47:16:
         9a:6b:0c:49:b8:22:bc:2d:28:75:1f:0f:ea:6c:02:4f:13:5d:
         e2:bf:19:23:52:84:56:df:c4:bc:d0:9c:92:61:75:7f:70:9c:
         89:d9:8e:38:38:e7:69:8d:0a:36:12:66:ba:ae:4d:92:e9:91:
         ad:9c:30:d9:01:8f:13:8e:30:c0:3a:be:82:43:b4:03:c7:d9:
         4d:45:d9:53:96:ce:a3:2b:0b:03:f2:79:ee:6e:ad:14:df:b8:
         58:0a:7b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:01:32 2026 by rpki-client