Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb5d1e8f-e469-3a60-8c6a-cb89f17a31bb.roa
File:                     fb5d1e8f-e469-3a60-8c6a-cb89f17a31bb.roa (raw, json)
Hash identifier:          ITcYQZnjrETjwVXprrd+Riy3UVk6bPFX/zaJirJ6hdg=
Subject key identifier:   EB:78:E5:07:F0:9D:B7:92:49:2E:EB:4D:67:85:D8:E2:46:40:7C:C7
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DA693FF09A4E9633E57279900
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb5d1e8f-e469-3a60-8c6a-cb89f17a31bb.roa
Signing time:             Tue 28 Apr 2026 00:03:57 +0000
ROA not before:           Tue 28 Apr 2026 00:03:57 +0000
ROA not after:            Mon 27 Jul 2026 00:03:57 +0000
asID:                     834
IP address blocks:        74.0.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:93:ff:09:a4:e9:63:3e:57:27:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 28 00:03:57 2026 GMT
            Not After : Jul 27 00:03:57 2026 GMT
        Subject: CN=9bf7bb85-0f4c-41e0-96e3-c2e238d76c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f8:4c:a2:1a:25:6d:b3:38:f9:a9:59:15:5b:
                    f4:0e:c2:f3:c2:16:29:75:4f:cb:df:cd:53:eb:02:
                    2f:f5:32:3a:d7:65:7f:fe:3a:ed:e7:2d:67:1f:96:
                    a2:2b:0a:6b:de:10:ec:48:93:55:55:3f:3d:91:c9:
                    13:f1:8b:26:4e:e1:1e:1d:7f:97:ca:9d:17:3b:7b:
                    de:4e:2c:7e:f8:f6:6b:d4:28:fb:ce:88:d1:f8:5f:
                    38:c0:e6:58:2a:98:11:af:3a:41:01:09:95:12:a6:
                    0a:34:43:d2:3f:5a:8e:11:7e:20:c3:84:0e:0d:8a:
                    18:fa:1a:01:48:a0:f7:29:f7:0d:11:11:eb:64:f7:
                    2a:45:c0:db:18:41:94:9c:6d:61:0e:7b:15:13:cd:
                    bb:2b:97:e4:aa:33:75:53:54:3e:d2:15:c0:9b:30:
                    c2:b0:53:d3:6a:5f:b2:11:9d:0e:10:0a:d1:17:70:
                    95:aa:b8:43:86:ec:27:6d:a3:5a:0c:2b:9b:8f:03:
                    26:36:06:d4:a6:46:6b:33:58:cd:6b:df:68:f2:f4:
                    3d:84:6f:10:55:2d:4c:8c:92:56:08:a2:d7:f6:ca:
                    5f:f5:74:ba:c3:0c:50:65:98:43:35:7e:fd:52:e6:
                    05:2a:02:0f:89:25:9b:4e:58:82:05:d1:76:6b:56:
                    2f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:78:E5:07:F0:9D:B7:92:49:2E:EB:4D:67:85:D8:E2:46:40:7C:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fb5d1e8f-e469-3a60-8c6a-cb89f17a31bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.0.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:84:ca:79:fc:fd:a9:df:0c:95:2f:f4:55:d7:1b:0d:4e:b4:
         78:ed:b7:c5:07:4a:7b:ca:9b:16:3a:f1:dc:03:c5:4e:67:3a:
         1c:e7:84:83:9c:ef:ea:64:5c:00:92:ce:8c:ae:01:96:6b:b8:
         54:06:25:51:31:bf:53:52:a2:1d:f4:19:d8:a8:1e:bf:28:8a:
         22:d0:5e:5f:f5:c1:2c:93:9d:ef:0e:75:84:7f:2a:4d:77:a6:
         60:62:04:f1:dc:8b:14:70:1f:ba:7b:aa:df:ce:4b:dd:c0:bc:
         43:0b:7e:ee:4e:60:2b:eb:b4:e7:24:b5:75:46:09:ff:c8:99:
         b7:46:45:2d:fb:65:0d:e1:c0:a6:8b:41:8f:54:6a:46:db:55:
         c6:55:58:93:fc:ef:e3:dd:aa:cf:5e:dc:9c:1e:fb:b5:0a:db:
         99:7f:ab:7f:4c:43:7b:7e:bc:75:67:c8:09:c5:b2:79:40:44:
         10:77:df:fc:11:bf:cc:a0:b4:6b:47:19:18:97:5f:e4:0c:01:
         a6:1e:5b:c7:3d:fb:4f:0d:03:a1:8b:eb:db:a0:2c:04:3e:57:
         e3:05:f3:c1:ae:e9:a2:3c:c7:21:81:a0:a8:2b:91:db:2b:3a:
         9d:c0:80:14:51:91:c5:fc:74:22:4b:29:4e:72:71:fb:00:fc:
         4b:16:38:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2mk/8JpOljPlcnmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDQyODAwMDM1N1oXDTI2MDcyNzAwMDM1N1owLzEtMCsGA1UEAxMk
OWJmN2JiODUtMGY0Yy00MWUwLTk2ZTMtYzJlMjM4ZDc2YzkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/hMoholbbM4+alZFVv0DsLzwhYpdU/L381T
6wIv9TI612V//jrt5y1nH5aiKwpr3hDsSJNVVT89kckT8YsmTuEeHX+Xyp0XO3ve
Tix++PZr1Cj7zojR+F84wOZYKpgRrzpBAQmVEqYKNEPSP1qOEX4gw4QODYoY+hoB
SKD3KfcNERHrZPcqRcDbGEGUnG1hDnsVE827K5fkqjN1U1Q+0hXAmzDCsFPTal+y
EZ0OEArRF3CVqrhDhuwnbaNaDCubjwMmNgbUpkZrM1jNa99o8vQ9hG8QVS1MjJJW
CKLX9spf9XS6wwxQZZhDNX79UuYFKgIPiSWbTliCBdF2a1YvVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOt45QfwnbeSSS7rTWeF2OJGQHzHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmI1ZDFlOGYtZTQ2OS0z
YTYwLThjNmEtY2I4OWYxN2EzMWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgAsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABaEynn8/anfDJUv9FXXGw1OtHjtt8UHSnvKmxY68dwDxU5nOhznhIOc
7+pkXACSzoyuAZZruFQGJVExv1NSoh30GdioHr8oiiLQXl/1wSyTne8OdYR/Kk13
pmBiBPHcixRwH7p7qt/OS93AvEMLfu5OYCvrtOcktXVGCf/ImbdGRS37ZQ3hwKaL
QY9UakbbVcZVWJP87+Pdqs9e3Jwe+7UK25l/q39MQ3t+vHVnyAnFsnlARBB33/wR
v8ygtGtHGRiXX+QMAaYeW8c9+08NA6GL69ugLAQ+V+MF88Gu6aI8xyGBoKgrkdsr
Op3AgBRRkcX8dCJLKU5ycfsA/EsWOKU=
-----END CERTIFICATE-----
Generated at Tue May 12 21:42:23 2026 by rpki-client