Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d29ca75b-8f56-31ff-a0ce-dc3664b9542d.roa
File:                     d29ca75b-8f56-31ff-a0ce-dc3664b9542d.roa (raw, json)
Hash identifier:          mwKfxkvRHJJHLShvCzFqh+xlcoDK3TuF5Wqie9Ao5SQ=
Subject key identifier:   A8:86:0B:60:F1:A1:A1:0F:60:9C:65:FB:4C:66:CC:73:D4:6D:C1:B4
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E779A33FAD19D7958419131C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d29ca75b-8f56-31ff-a0ce-dc3664b9542d.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     152672
IP address blocks:        74.2.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:33:fa:d1:9d:79:58:41:91:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=72226ab6-7708-4d79-bf1f-63dfa38da6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7c:f3:06:dc:dc:96:1c:24:6d:28:30:c2:10:
                    dd:a8:0a:6e:b0:14:d4:d9:af:e1:57:c5:24:d5:9f:
                    2b:88:a8:21:51:28:52:64:d0:99:d0:67:52:92:81:
                    01:21:da:07:15:41:ed:30:c4:93:d4:5e:43:38:6b:
                    e9:a5:8f:3e:a9:1d:60:8a:46:83:e0:89:02:e1:da:
                    d0:b4:40:8f:84:3c:18:08:46:5c:c4:58:96:6e:0a:
                    03:4b:ac:92:b7:e7:77:88:85:49:12:4e:59:c5:25:
                    d6:91:c8:8a:1b:fe:81:f2:7f:64:81:ca:d1:3b:bf:
                    f3:4e:08:2c:28:86:53:d6:47:b5:5b:76:fa:d2:bf:
                    13:5d:fe:b4:49:05:23:4b:e9:cc:55:e8:63:da:82:
                    b4:00:4d:02:93:f1:46:fb:2a:5f:99:02:79:3b:c5:
                    e5:78:93:32:7b:69:2e:a5:c3:73:48:4f:73:45:27:
                    5c:03:0a:8c:6a:96:59:20:13:ac:be:5e:69:29:08:
                    b5:3b:9c:c6:85:be:f0:57:35:95:d1:fa:c9:97:9d:
                    86:ed:dd:4c:40:52:20:59:cf:8a:59:91:f9:9b:69:
                    1a:f6:fd:fd:10:36:7e:ab:69:fb:44:61:5e:bc:91:
                    f6:04:11:0d:7b:81:23:49:7f:13:6f:bc:08:be:85:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:86:0B:60:F1:A1:A1:0F:60:9C:65:FB:4C:66:CC:73:D4:6D:C1:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d29ca75b-8f56-31ff-a0ce-dc3664b9542d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.2.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:46:51:06:94:4d:1f:69:eb:5e:46:dc:b1:15:b0:53:c3:4e:
         82:12:9a:12:6d:2f:4b:e2:28:6a:05:8a:7e:c1:46:69:72:c3:
         ac:70:61:e6:1a:00:3c:31:3c:a6:53:eb:bc:f1:85:c2:2d:93:
         17:2f:07:5a:79:b2:81:d8:86:6b:7b:c4:7b:0f:77:da:09:89:
         50:90:17:bd:86:59:3a:49:22:88:d2:1b:d9:87:15:98:78:e5:
         50:13:a9:d1:54:49:3e:c3:eb:65:10:d7:d3:79:8c:ab:6e:2b:
         59:09:14:54:c3:a7:81:f7:5c:ff:8a:29:42:1c:e6:63:bf:5c:
         bc:13:de:7c:a5:d4:33:07:63:84:c8:8e:db:94:ab:05:95:93:
         cc:02:c1:7b:2a:7f:ff:e7:75:4d:4e:44:b9:09:cf:b9:4d:5e:
         5c:5a:ac:a2:8a:aa:e4:ac:29:0d:45:0b:4c:a8:ac:29:c5:da:
         fd:53:30:77:a3:2b:69:17:ca:2b:fe:46:93:e6:b5:b0:0c:e7:
         d5:fe:f5:a3:f1:b2:27:66:a8:79:5d:f0:f5:20:11:9f:80:87:
         4b:d3:5e:84:9b:71:61:fa:c9:a9:ee:08:09:de:a0:87:ad:df:
         59:31:05:fc:60:48:ab:73:f0:72:91:c6:6a:a3:f3:81:70:9f:
         84:cf:5a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:54:06 2026 by rpki-client