Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9833e291-2fc3-314b-8610-f11408e9e767.roa
File:                     9833e291-2fc3-314b-8610-f11408e9e767.roa (raw, json)
Hash identifier:          aHkoUehPh4LH35X06GSPqhNndC0UigHcBie7ATbSWgc=
Subject key identifier:   DE:2B:6C:26:C6:B9:DC:1D:F8:75:36:A7:6E:82:44:83:16:A0:3A:71
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D2214A8A42FCA11554107F7C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9833e291-2fc3-314b-8610-f11408e9e767.roa
Signing time:             Wed 11 Mar 2026 13:00:39 +0000
ROA not before:           Wed 11 Mar 2026 13:00:39 +0000
ROA not after:            Tue 09 Jun 2026 13:00:39 +0000
asID:                     834
IP address blocks:        74.1.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:22:14:a8:a4:2f:ca:11:55:41:07:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 11 13:00:39 2026 GMT
            Not After : Jun  9 13:00:39 2026 GMT
        Subject: CN=368d08a2-f03b-45ae-8865-9e5ea5ef5869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:71:03:6d:6f:46:9e:d6:27:b3:55:4d:18:18:
                    19:35:5f:f0:de:e8:b6:2a:14:7f:21:a6:94:03:2a:
                    52:7d:2b:3e:66:af:36:d8:f8:de:d2:5d:bc:f8:27:
                    4e:43:6f:5f:ff:de:19:a5:d4:e8:22:03:5d:b2:b2:
                    d2:5f:60:3b:4a:5f:2e:86:c7:55:39:02:30:12:29:
                    c4:dc:0e:63:bb:de:b5:02:66:92:c2:0f:44:6c:91:
                    ba:74:a8:64:f9:5b:34:9b:dc:2b:26:09:7e:5d:25:
                    26:7d:16:6a:f3:ac:f6:33:23:25:a1:ed:f4:a4:5a:
                    67:28:b8:95:b4:d0:b7:a5:24:dc:43:ba:5b:5c:c7:
                    ed:72:ea:b0:63:29:58:94:a0:8e:de:34:0a:f7:b8:
                    16:68:b0:c7:6f:dc:42:4b:20:25:77:0f:ce:65:62:
                    e8:6b:3f:d8:f8:1b:2f:aa:fe:93:38:ff:7a:1d:19:
                    b4:ee:8b:f5:0d:42:cc:a5:6a:a0:8b:7d:69:19:4f:
                    55:c4:70:59:72:bf:46:d1:d1:f2:d4:5d:b6:7e:c2:
                    5e:a4:5a:06:e3:80:d0:b9:be:f2:7b:c6:57:1f:ab:
                    5d:8d:e0:19:73:fa:e1:57:d5:1e:e4:3e:6d:a2:92:
                    e0:5b:94:9f:f8:45:2e:53:48:7f:6d:99:eb:bd:3f:
                    b7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2B:6C:26:C6:B9:DC:1D:F8:75:36:A7:6E:82:44:83:16:A0:3A:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9833e291-2fc3-314b-8610-f11408e9e767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:41:45:98:55:20:3d:24:4c:7a:70:a8:b6:94:27:dc:bf:72:
         8a:54:91:c6:66:f1:77:2b:b1:75:1e:df:67:16:53:26:27:77:
         98:5e:8f:1b:31:01:4d:e4:81:61:75:0d:85:d9:33:3c:d9:29:
         d0:d0:49:ac:68:0f:06:ee:59:0c:87:f6:d2:80:7d:4e:05:a2:
         a3:0d:c1:72:87:5e:a0:1c:0d:de:f6:9d:af:c2:d8:b0:e1:af:
         7b:19:62:b2:ce:26:27:f0:64:07:99:76:8f:62:fe:69:a8:2a:
         04:d4:20:6d:fd:dd:68:09:5d:45:a8:0c:1d:cf:a8:03:51:96:
         2a:ab:98:a2:a4:4b:bd:b9:70:f2:7f:8e:21:f1:89:19:0f:4d:
         3b:b1:43:44:76:ae:70:20:6f:1f:18:05:4c:d8:61:58:93:52:
         e8:71:a9:73:74:0d:b4:05:c2:07:ed:9d:c2:1f:b5:2e:ff:df:
         1c:c1:ee:4f:56:02:df:86:77:62:bb:60:b4:e6:73:9e:66:7c:
         77:71:95:1a:d7:61:64:5c:1b:7c:c6:45:cc:51:56:74:bc:95:
         f9:59:36:66:e5:fc:40:17:8a:43:b8:2d:48:51:4e:99:6e:aa:
         32:62:45:68:20:8f:80:af:d4:07:19:37:2f:72:eb:9c:cd:5d:
         c8:6b:68:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:48:11 2026 by rpki-client