Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67eb6097-0b73-3545-b7f2-2b8210de9752.roa
File:                     67eb6097-0b73-3545-b7f2-2b8210de9752.roa (raw, json)
Hash identifier:          cHvHxVa9E5vgXwfCzOsS0za/3x8h3Af1bxJ63jc16Dg=
Subject key identifier:   0C:A4:B0:0C:40:16:D3:BB:FC:38:CC:60:03:BA:05:DB:B9:56:79:C7
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DC103B970044D3B6233AD1100
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67eb6097-0b73-3545-b7f2-2b8210de9752.roa
Signing time:             Thu 07 May 2026 11:20:05 +0000
ROA not before:           Thu 07 May 2026 11:20:05 +0000
ROA not after:            Wed 05 Aug 2026 11:20:05 +0000
asID:                     402215
IP address blocks:        74.1.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:03:b9:70:04:4d:3b:62:33:ad:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  7 11:20:05 2026 GMT
            Not After : Aug  5 11:20:05 2026 GMT
        Subject: CN=ed118504-089e-494e-9468-1942fce24562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ee:e5:d8:81:c4:3d:69:db:8c:98:89:e8:bc:
                    86:36:69:d3:da:5b:6f:9b:c0:16:ab:c8:9c:8e:c9:
                    aa:28:95:3e:b4:b6:fa:cd:26:e4:c3:ab:86:12:46:
                    0a:48:fc:c8:f3:f4:33:32:cf:db:33:66:87:de:ca:
                    7c:d4:72:ce:35:1d:2c:b5:ba:67:7c:ca:73:f2:6e:
                    c1:df:b3:22:a1:b4:35:87:2d:3c:52:7a:78:30:18:
                    3a:37:90:b0:72:0c:ad:6a:2c:19:51:ab:ed:f0:7b:
                    09:55:70:77:4f:16:4b:03:1a:db:f6:10:b9:d3:44:
                    fc:58:23:1a:4a:68:6b:2a:52:1b:e5:40:b8:03:a8:
                    d4:5a:44:33:e2:aa:74:d4:ce:c3:0e:af:cd:71:d8:
                    ce:79:da:d6:ed:3e:e2:11:60:12:36:38:cf:09:ad:
                    3b:6f:63:ea:c3:3b:4d:34:27:6e:56:cb:c5:61:6b:
                    c9:e5:b6:fc:91:89:4b:b1:f1:f6:f0:e8:89:43:ab:
                    8f:db:0e:6f:5f:d1:4d:5c:9c:81:c4:d8:4b:09:68:
                    f8:59:0e:e9:85:8a:fc:c8:96:f6:93:d3:f3:a6:a8:
                    fc:44:ab:9b:13:b6:26:da:cc:79:ed:9d:79:01:f4:
                    fb:6f:36:7b:f3:79:08:4d:97:65:94:23:da:0d:e0:
                    43:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A4:B0:0C:40:16:D3:BB:FC:38:CC:60:03:BA:05:DB:B9:56:79:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67eb6097-0b73-3545-b7f2-2b8210de9752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:35:de:27:2e:e5:20:2a:94:c4:5b:b8:0f:e0:f1:cd:28:bb:
         01:45:88:b8:05:d2:22:1c:09:f8:6e:e0:b6:84:c6:bb:e5:e4:
         62:7c:67:30:6a:e7:ef:b3:0e:5c:97:c4:57:8d:f4:91:6d:7c:
         f0:71:0b:d5:6b:67:45:f0:3d:6b:f9:7a:0b:37:da:c8:c0:05:
         f7:7d:08:7a:15:5f:58:e3:6e:b7:ec:1b:ba:32:cb:eb:73:d0:
         7f:50:c8:51:e1:c0:39:bf:13:dc:db:20:38:d4:cc:12:35:85:
         c9:e7:93:8c:79:4e:4d:e4:0e:41:6c:01:ae:b9:0c:78:0b:f1:
         f8:dd:ff:93:39:1c:b1:b9:46:c1:20:7b:b3:87:1e:c4:c8:8d:
         85:4e:9d:ca:cd:9a:86:c8:48:57:7a:33:59:e2:ab:3d:68:0e:
         0e:44:85:20:22:f0:49:22:ff:c0:ce:a5:1b:ef:23:75:89:54:
         f1:b7:92:de:74:6a:63:38:61:37:a6:b7:4a:3b:2a:7b:2d:92:
         3d:45:1a:c0:60:b0:6b:ef:f4:df:4b:a0:fc:1e:0d:1b:32:eb:
         a3:d6:11:4c:f3:db:78:07:c2:31:b9:12:fe:cb:a2:93:fe:50:
         47:b9:49:07:39:d6:92:5b:3d:fb:f9:98:42:d4:a7:53:80:77:
         84:f2:24:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:18:44 2026 by rpki-client