Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5ea41ff0-880b-3e6b-8d87-bca34b503f56.roa
File:                     5ea41ff0-880b-3e6b-8d87-bca34b503f56.roa (raw, json)
Hash identifier:          G/21Rh1OuZro8A7OMHHO2T8jmC8ccrGYl96K4mvZZmc=
Subject key identifier:   1B:EF:7D:D9:65:34:89:FC:25:51:B3:40:49:41:26:E5:87:85:3B:68
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D2F9B6385DB739FA8B3EA3C80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5ea41ff0-880b-3e6b-8d87-bca34b503f56.roa
Signing time:             Mon 16 Mar 2026 09:17:39 +0000
ROA not before:           Mon 16 Mar 2026 09:17:39 +0000
ROA not after:            Sun 14 Jun 2026 09:17:39 +0000
asID:                     834
IP address blocks:        74.1.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2f:9b:63:85:db:73:9f:a8:b3:ea:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 16 09:17:39 2026 GMT
            Not After : Jun 14 09:17:39 2026 GMT
        Subject: CN=9db82d70-8afb-4571-bb93-a19f929e794b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8a:3d:12:6a:00:13:95:ed:52:ca:90:06:3f:
                    7d:af:42:30:25:d6:52:b0:36:18:6b:01:63:3a:80:
                    3a:22:ec:2b:f4:94:0d:74:08:b6:ea:ff:db:b3:a1:
                    0b:aa:94:1a:c1:c6:47:5b:f0:f8:33:76:b5:a1:88:
                    27:18:ec:57:91:d8:49:2a:0e:bc:7c:3e:c5:82:4d:
                    b4:1c:25:e1:46:57:f7:99:04:41:89:ec:03:ce:b9:
                    0d:16:d5:65:da:66:d3:29:21:1b:8d:8e:9f:25:ff:
                    c5:27:78:91:29:4f:d5:6c:5e:73:04:3d:9c:31:2f:
                    72:0f:de:ec:17:57:9e:ce:b6:ce:74:b2:d3:a2:63:
                    11:5b:b3:2e:9c:0c:33:6c:7b:e8:09:da:a8:bd:9a:
                    94:10:32:bc:60:21:3f:b2:37:57:ef:c9:9f:0e:fd:
                    d5:ae:c1:b5:c2:b3:7c:d7:73:dc:01:6f:0f:93:ed:
                    a7:94:6b:b2:47:d1:47:ff:40:aa:97:98:a8:f6:20:
                    21:b4:c6:ba:bc:ea:e2:a1:78:d3:80:7e:af:00:a7:
                    ce:7d:4f:7e:da:24:c0:69:06:6f:6b:56:e6:e9:16:
                    58:14:d2:98:88:81:eb:90:08:1b:0e:42:1d:07:56:
                    1f:cc:8b:63:d6:e1:ec:73:19:ae:1b:af:46:13:dd:
                    75:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EF:7D:D9:65:34:89:FC:25:51:B3:40:49:41:26:E5:87:85:3B:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5ea41ff0-880b-3e6b-8d87-bca34b503f56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:0c:bb:ae:25:78:9c:bc:b9:83:67:e5:3a:23:d6:de:6e:04:
         98:7e:43:35:35:d5:4e:9f:31:50:85:13:42:79:2d:b9:62:2b:
         6b:69:d2:6d:05:03:81:97:74:26:31:a2:ef:0d:c8:9d:dd:3d:
         f0:db:be:1b:fe:55:55:18:58:bf:d9:08:b6:23:b2:62:68:12:
         42:24:9d:7c:6c:0e:7d:4a:b1:22:ca:0f:5d:ee:59:13:dd:be:
         b5:f7:95:5a:bc:98:e8:ef:b9:6e:88:e3:f4:16:44:49:4e:7e:
         bd:23:b0:d2:fb:05:89:27:a3:9d:21:51:2c:38:0c:ef:38:52:
         a1:9c:50:ed:67:0f:72:aa:53:26:e2:b0:c4:cc:81:b2:74:cc:
         80:98:e1:d4:ce:71:40:51:ea:2e:4f:48:84:5e:1b:3d:e0:55:
         47:28:03:6a:10:d4:10:be:c9:bf:fc:71:07:b9:44:ad:74:fc:
         e3:36:61:6e:ca:3a:b0:94:ed:23:ea:9a:40:a0:fe:31:05:c6:
         35:d7:c4:f6:87:c2:2a:b3:c2:62:ef:3e:0c:22:74:00:85:ab:
         8e:a0:ea:46:a2:81:c1:01:75:3c:0d:95:d2:71:3f:50:25:2e:
         41:dc:77:18:13:59:1d:d6:92:12:d2:b1:f8:23:5f:ff:3c:79:
         46:c3:19:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:02:51 2026 by rpki-client