Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/d2170789-d217-3a89-be64-48b7d2fca4cf.roa
File:                     d2170789-d217-3a89-be64-48b7d2fca4cf.roa (raw, json)
Hash identifier:          a3VONttoAifDcmCZ+cBargA1JdbY/YKxOAZj6UHdN/w=
Subject key identifier:   D9:A3:86:02:E8:FE:FE:EE:7C:59:3D:99:0E:E1:D9:F1:F1:56:E5:CD
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584DA11AC151B2DCDDC9D9FC1780
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/d2170789-d217-3a89-be64-48b7d2fca4cf.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     2152
IP address blocks:        207.233.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:c1:51:b2:dc:dd:c9:d9:fc:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=b6b598cb-8a29-4174-b7be-dc709c4209c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ea:cc:9a:e3:72:c0:e6:60:da:98:d8:4a:a8:
                    6b:be:a3:4f:3e:d1:9a:11:d0:8e:29:2c:f0:00:cb:
                    5b:af:83:4c:e2:eb:0c:e9:31:8a:87:8b:11:53:b5:
                    97:96:ae:26:73:3e:09:63:5e:5a:2a:e7:50:e3:2f:
                    53:96:0a:0b:c6:c8:c1:2b:ac:73:47:f5:aa:2b:64:
                    d6:ce:ea:3d:ff:98:d6:da:a9:1e:17:40:19:40:07:
                    2f:19:a2:ee:79:a4:3f:04:10:3c:35:71:85:6a:1d:
                    71:9a:4e:55:0a:d4:92:d5:bb:19:27:df:21:64:85:
                    9d:ea:7a:6a:df:b3:04:f3:5b:4b:83:2b:fd:dc:5a:
                    f2:17:94:68:79:67:6f:4a:4c:a4:3e:81:4d:6f:4b:
                    3b:c4:30:15:40:85:75:14:17:5c:41:30:32:98:51:
                    59:80:2f:46:3d:57:fb:32:0d:07:9a:89:c4:29:18:
                    56:81:20:3c:1c:cd:79:9e:f3:65:86:9b:36:19:a8:
                    95:b2:82:33:3e:3b:3a:f6:63:1d:e0:b2:e0:8f:ca:
                    9c:b1:2b:8d:ee:3d:5e:fc:91:94:ba:2b:c5:6b:0e:
                    32:a5:36:c2:92:26:16:6b:a2:9e:18:4b:a3:36:58:
                    28:42:6c:fa:14:de:b4:7a:d4:07:65:8c:08:0c:ad:
                    ad:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A3:86:02:E8:FE:FE:EE:7C:59:3D:99:0E:E1:D9:F1:F1:56:E5:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/d2170789-d217-3a89-be64-48b7d2fca4cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.233.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e4:6a:f7:29:a2:f3:32:b2:31:84:0f:8d:c9:08:5e:89:c6:
         ae:97:46:1b:16:f4:76:36:ae:ff:fe:c3:6f:c4:b2:06:38:ef:
         f2:9a:d7:e5:9a:6d:12:34:cc:4c:a9:7e:55:45:5d:53:46:35:
         8e:24:55:e0:bd:17:3f:d7:ac:2b:fb:36:6d:91:33:1e:c8:02:
         31:12:b2:21:4b:f7:12:60:eb:f8:5d:7f:35:e2:42:84:97:98:
         20:eb:75:33:59:c8:4e:05:01:26:10:25:3c:36:84:7a:de:42:
         a0:f1:80:fb:5c:da:60:05:6a:2a:2c:16:41:f0:fe:5d:5a:6d:
         5e:bc:ba:c8:6b:a2:76:08:f6:06:8b:a5:3c:99:45:2e:49:6b:
         ca:ff:ad:27:fe:70:a7:b5:9d:6f:2d:88:13:9e:91:b3:7a:88:
         d8:83:dc:54:ce:19:37:e9:79:bb:94:06:d4:bf:b5:37:e6:1e:
         5a:9a:4f:18:64:88:80:ce:11:a5:6a:9a:10:28:b2:fc:a4:6b:
         44:ee:aa:1c:a1:d0:2e:8a:51:d3:ae:ca:7c:51:74:4c:9d:11:
         70:51:31:f8:03:3c:b2:24:ff:fe:93:60:af:bc:e2:6b:c7:e9:
         b4:5d:b5:e2:99:13:d4:be:ef:c6:6c:03:a8:ce:33:4c:81:2a:
         56:8c:44:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:22:12 2026 by rpki-client