Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8cee60c8-af64-338c-86ed-3e4ff82d3b0b.roa
File:                     8cee60c8-af64-338c-86ed-3e4ff82d3b0b.roa (raw, json)
Hash identifier:          Ek/PiBVPbbprHOzpzn5UHoZ/RFkHXncVtAJzcfHZoHA=
Subject key identifier:   90:0E:20:6E:4B:A0:E3:24:AC:7B:3B:4A:51:DE:34:8B:42:0E:DA:D5
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DCDC5D02520D7D86346682C80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8cee60c8-af64-338c-86ed-3e4ff82d3b0b.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     834
IP address blocks:        74.1.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:d0:25:20:d7:d8:63:46:68:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=f0a07bd4-5b8b-4120-a5fb-0511dca6b2fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:63:4c:c6:05:23:84:a5:30:15:ad:ee:bf:ed:
                    8f:85:c2:09:38:1d:06:aa:c6:ff:3f:4a:c6:92:4c:
                    b6:2d:ca:3c:e9:5a:8c:f9:31:b8:20:62:e5:c9:1f:
                    c0:b1:62:d9:fd:0f:e9:5c:24:2d:f0:d5:99:f5:9a:
                    07:c8:4c:df:08:42:17:3a:72:87:e2:98:03:15:e6:
                    c2:07:69:91:a0:fc:99:2d:7a:f4:3b:7a:48:77:ca:
                    64:f1:fe:ff:76:e9:49:89:ba:9b:cb:1d:62:8e:2d:
                    76:5b:0d:64:37:eb:a6:9c:ef:f9:d0:95:f6:89:db:
                    1b:37:c4:c6:db:30:f2:0a:8a:07:30:65:c8:be:8f:
                    18:89:01:3f:d3:9e:60:fa:77:54:35:ec:fe:b9:c8:
                    13:3c:1e:28:e5:77:17:00:c6:3a:7a:7b:76:ef:19:
                    a5:d3:74:00:03:40:92:ed:a5:04:ec:77:ff:0b:d7:
                    d1:dc:d2:40:9c:71:9d:8a:86:d9:d3:1d:1c:df:2b:
                    c1:cc:f3:b1:06:b1:52:0f:e3:39:cb:cc:b1:08:e4:
                    3d:5a:7a:6c:34:2e:ad:3b:fd:59:53:99:cc:12:b2:
                    f3:ba:10:23:be:f5:6b:62:30:9e:69:18:c0:fb:cb:
                    86:8d:5a:0a:73:bc:bc:e6:ec:f7:e5:a0:9f:d0:a3:
                    e6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0E:20:6E:4B:A0:E3:24:AC:7B:3B:4A:51:DE:34:8B:42:0E:DA:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8cee60c8-af64-338c-86ed-3e4ff82d3b0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f5:81:f8:ad:ee:67:5e:f6:38:a0:87:96:ad:dd:ef:3c:94:
         70:62:4e:d6:5e:e3:63:59:17:5c:4e:26:c1:6e:8c:cd:ca:1c:
         b4:67:9c:82:b2:51:5e:97:59:5a:55:08:91:00:6b:b4:68:17:
         97:d7:63:0e:0e:5b:ab:22:64:f8:81:19:b2:f3:08:c9:cc:7f:
         fb:28:9e:c0:83:e2:1d:cb:2d:c8:eb:c5:07:d7:38:8e:82:03:
         6f:73:7e:b0:62:d1:a7:81:62:38:87:25:fd:3c:bd:3e:c4:36:
         60:a1:9b:62:c2:84:73:ef:1e:9e:b2:6e:b8:55:21:a0:3e:94:
         47:22:29:32:7a:65:6b:03:c3:64:aa:10:3f:6f:57:8e:da:ec:
         28:52:17:39:ab:c6:0c:4b:8c:30:7f:d1:4b:39:92:78:c1:aa:
         2f:11:94:24:a8:6f:65:43:e1:67:1f:2e:3c:d4:59:16:17:bb:
         08:bf:1d:f6:63:e1:00:dc:d1:6d:13:e3:6b:27:39:4c:35:dc:
         ef:80:9f:62:d6:8f:f4:bb:52:95:77:e3:b0:58:fd:2b:92:d4:
         b4:b0:a4:79:df:96:7b:9d:76:22:47:1d:67:e4:35:7e:81:9f:
         1d:6e:b4:e4:e6:19:87:30:a6:fb:28:6e:49:d2:cd:40:eb:c9:
         2e:f9:22:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:25:19 2026 by rpki-client