Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/61977b73-1b7e-3998-abb3-01ce8577abb6.roa
File:                     61977b73-1b7e-3998-abb3-01ce8577abb6.roa (raw, json)
Hash identifier:          uwPDrDmnFZ38dblqLRopxq83qLaNnlKNu3TdxuFrNq4=
Subject key identifier:   A9:56:8F:8A:16:A9:9C:B5:65:75:9A:28:A6:8F:2C:94:2D:9E:5C:60
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F4988F4E2B80AA41F2F2746C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/61977b73-1b7e-3998-abb3-01ce8577abb6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        74.0.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:f4:e2:b8:0a:a4:1f:2f:27:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=748ac6fc-c193-4a65-a015-b902a8fc6528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:95:93:1b:92:0d:6e:a3:36:4f:a2:b2:e8:f5:
                    54:b7:9e:73:2a:24:45:10:c8:fb:c5:f4:51:57:b9:
                    86:9a:e5:4d:5e:27:73:9e:59:f2:e4:1c:29:8a:b5:
                    d1:db:16:2b:1a:f1:39:e7:e5:37:0c:de:7e:f9:0d:
                    7e:4f:9d:64:47:b8:3b:c9:17:03:ff:37:0e:96:85:
                    9d:1b:28:69:f6:10:29:ff:99:3e:56:3a:9c:5f:6d:
                    44:67:cd:6a:1c:8a:c4:d7:e5:ca:e1:3d:6c:03:b8:
                    96:f4:64:07:6a:7a:ab:38:a0:39:a9:2b:27:dd:fd:
                    d1:7a:d7:7f:b1:ae:88:93:b0:3a:43:50:6c:b8:c4:
                    fa:1c:61:67:9b:6d:49:c6:68:61:12:56:5b:8b:f5:
                    0c:84:81:53:5b:ed:71:18:07:d1:ed:82:a1:20:6a:
                    6f:d9:d2:77:3b:56:51:64:73:e9:78:73:ff:b9:91:
                    ed:d4:ce:cf:cc:2c:d2:84:07:5f:57:5d:35:e8:8c:
                    ac:90:2c:fb:9e:22:d5:a2:d6:b6:4a:06:71:ed:10:
                    96:6c:58:a1:22:fb:09:a8:ce:45:01:0d:d5:5c:ca:
                    14:af:60:9c:dd:41:0a:a2:4e:85:39:e8:2d:e6:35:
                    72:77:14:d8:a6:e2:8a:7b:fe:be:b6:6c:7b:19:24:
                    e0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:56:8F:8A:16:A9:9C:B5:65:75:9A:28:A6:8F:2C:94:2D:9E:5C:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/61977b73-1b7e-3998-abb3-01ce8577abb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f0:1e:69:68:68:d3:c4:06:58:04:58:cc:67:50:b4:0a:16:
         58:6b:e9:a8:6b:09:6d:35:53:ca:a1:53:37:b3:78:d6:4b:62:
         07:ca:e0:7b:e2:fa:9e:20:13:f5:26:bc:16:7f:47:c3:78:29:
         48:71:53:9f:64:0b:4f:5f:bb:f7:56:99:29:42:2c:9c:d4:ec:
         b7:d1:5e:43:e8:c6:aa:00:5b:fa:29:a0:15:13:9f:f7:f3:f0:
         98:04:56:47:28:7c:60:59:d6:97:ee:f8:8c:23:f6:4b:e1:29:
         2f:4b:d8:74:64:d7:be:dc:66:a3:16:c1:c6:90:22:b7:78:d7:
         33:5b:60:5b:d7:0e:a6:45:92:b9:b2:54:62:67:bb:91:08:89:
         93:e5:4f:87:1c:49:e5:38:f5:a0:f8:8a:87:c3:35:e8:0e:1c:
         1c:cf:11:cf:d5:db:0f:76:57:fe:47:57:9f:f8:74:1d:0b:7e:
         f8:c1:96:e0:62:f4:55:33:bd:00:15:a0:5f:1f:f0:c3:d0:40:
         14:24:65:30:15:48:0f:87:53:dc:42:0d:67:ac:c4:50:e6:ff:
         dc:60:b5:fb:af:32:37:9c:c5:d2:dc:c1:d6:67:24:d0:d8:64:
         ae:db:c8:ee:66:bb:99:65:7e:39:9c:78:5d:6a:7f:5c:c1:44:
         c0:a4:78:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:32:19 2026 by rpki-client