Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e56a4ae3-238a-3ebf-88bf-2c58f0efa348.roa
File:                     e56a4ae3-238a-3ebf-88bf-2c58f0efa348.roa (raw, json)
Hash identifier:          0NocG/biyteTnzXU16qX1JtuSO6DWo3XJ3JXFOJUM4Y=
Subject key identifier:   56:C5:F1:8A:34:DC:8F:59:20:2E:84:1F:25:9B:2D:67:1F:87:45:47
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F49881E5D307E30B113897C80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e56a4ae3-238a-3ebf-88bf-2c58f0efa348.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        74.2.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:1e:5d:30:7e:30:b1:13:89:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bd9825be-b5d6-4650-b00c-c8c0c03354e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e5:10:05:96:61:9b:25:b4:f8:36:35:76:17:
                    9f:69:50:cd:05:49:9e:81:23:bc:bb:b1:21:cf:b3:
                    6d:98:dc:53:fd:23:27:19:45:92:f7:95:97:6e:13:
                    a2:25:af:ad:1e:b1:ad:a8:1f:1e:93:b9:a7:78:e2:
                    54:1b:66:f5:e2:17:d7:d4:ab:26:99:3f:c1:4b:fe:
                    27:73:1a:5e:b8:63:37:4e:7c:23:f7:a7:8a:30:71:
                    b1:92:80:b5:fe:ee:be:47:9d:86:09:ac:b5:a4:24:
                    af:c3:1b:37:11:81:41:17:23:3a:1c:75:f5:72:bf:
                    e5:d2:89:97:91:d0:c8:a8:94:c4:e0:8e:15:28:88:
                    1b:cf:f8:86:1f:36:a5:4d:66:d6:1c:d8:8a:da:10:
                    ae:4f:69:e1:90:15:07:80:73:8f:1f:d8:90:0c:46:
                    e6:71:14:77:57:76:d8:24:01:e9:9a:c5:d2:e1:2f:
                    45:73:d1:ea:65:67:b0:7b:e1:e2:2c:55:51:a1:cd:
                    41:04:a8:ec:12:0a:05:b5:b9:f4:b7:47:3f:06:49:
                    5c:ff:2b:d7:75:85:87:01:f1:57:ad:6d:0b:73:c2:
                    5f:f0:5e:1e:82:f8:60:ad:1c:44:ad:63:37:f0:31:
                    57:53:80:60:e2:ef:d3:4a:c1:fb:39:a3:dd:2c:b9:
                    21:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C5:F1:8A:34:DC:8F:59:20:2E:84:1F:25:9B:2D:67:1F:87:45:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e56a4ae3-238a-3ebf-88bf-2c58f0efa348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.2.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:9e:bb:56:75:a4:aa:be:83:24:85:c2:21:7f:ce:c0:46:7e:
         34:24:29:1a:1a:b2:be:64:1c:c9:0a:42:cf:fc:68:b0:06:ef:
         2a:c0:1a:89:e2:e9:8b:42:fa:88:a7:ff:b0:4e:04:8e:2e:a2:
         9a:73:16:fd:f1:77:67:91:3b:b4:0d:e6:fd:e3:2a:dc:26:b1:
         c2:48:ae:8e:60:2c:e6:eb:22:94:d3:04:58:ab:bc:1b:c3:f3:
         14:02:10:3e:57:64:f0:fd:ae:2c:cb:64:3f:03:e6:35:c2:5e:
         d2:e6:b7:90:4a:fd:64:fb:65:41:b1:ad:90:a6:26:27:7c:8d:
         69:ba:d6:67:ef:4f:58:40:4b:ec:92:10:00:4b:1f:b3:a9:6b:
         bf:37:5e:36:40:be:28:f5:2a:9e:a7:89:ae:88:62:fa:0e:f8:
         dd:33:e6:01:b8:e1:f2:d1:bd:05:44:f9:86:c5:f0:c5:c9:bf:
         a4:b7:11:0c:b2:43:9f:d4:40:ec:60:94:51:87:84:17:79:0a:
         3c:1a:45:d0:7f:14:02:d8:f8:da:15:17:b1:34:0d:9a:b5:f3:
         07:10:11:ed:c1:f9:bc:ef:61:0b:23:5e:2e:cc:46:df:41:34:
         c5:2f:f3:49:de:b2:e5:ba:c9:63:8e:d1:e2:51:6c:65:75:8c:
         1e:ff:5a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:48:21 2026 by rpki-client