Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/910f9667-7a39-34ba-adc7-937a7326b558.roa
File:                     910f9667-7a39-34ba-adc7-937a7326b558.roa (raw, json)
Hash identifier:          X8uxot+19PciCafem5qj+Nv4kacLY65QV4+h4nMPuTA=
Subject key identifier:   4A:9F:AD:70:E5:00:E1:96:11:A2:61:66:BC:64:70:86:1F:A2:F9:F6
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F4328584F27F25C292D5B7431B88BAE80
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/910f9667-7a39-34ba-adc7-937a7326b558.roa
Signing time:             Sun 13 Sep 2026 01:00:12 +0000
ROA not before:           Sun 13 Sep 2026 01:00:12 +0000
ROA not after:            Sat 12 Dec 2026 02:00:12 +0000
asID:                     26337
IP address blocks:        74.119.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:27:f2:5c:29:2d:5b:74:31:b8:8b:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Sep 13 01:00:12 2026 GMT
            Not After : Dec 12 02:00:12 2026 GMT
        Subject: CN=307bcd7e-5001-4766-8b6c-35839b718849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:61:8c:84:0f:cb:39:6b:72:c8:62:52:70:ac:
                    d1:f7:d1:e3:52:1f:aa:c0:64:c1:5d:0b:d2:e9:6d:
                    09:02:5b:79:ed:9c:a0:48:98:44:ed:d9:6c:c1:9e:
                    95:83:08:6b:78:15:20:22:4e:66:a0:a3:5a:7c:34:
                    24:51:ed:23:eb:be:19:f4:6f:1b:66:4f:e5:27:0f:
                    b3:41:4f:cb:9c:1a:f5:72:66:8c:92:dc:ff:69:87:
                    3f:82:31:36:8f:53:cb:74:99:51:6a:7b:e7:de:c8:
                    35:23:68:8a:84:8c:fd:d0:f4:f8:fa:8f:e0:5b:d5:
                    18:f5:12:db:52:df:c5:75:4e:43:e7:ea:09:81:c7:
                    64:70:2b:d4:b2:b4:43:fa:d4:7e:ea:85:5b:a0:b7:
                    43:36:91:30:cb:90:ae:34:93:b1:37:16:c6:04:36:
                    63:35:5c:3f:1e:41:12:ad:ee:21:77:1e:1a:d5:44:
                    de:63:28:0a:c8:ad:79:65:04:2f:cf:de:e8:e9:e2:
                    f1:f5:76:d6:6c:bb:df:58:9c:d1:1c:95:f6:fa:98:
                    d7:a2:56:38:a0:eb:0c:4e:57:03:80:38:3f:ca:68:
                    ee:31:34:ce:b5:56:60:9a:96:9a:e1:f5:9b:a8:02:
                    90:0c:a5:01:77:99:11:41:dc:a9:5b:97:78:0c:95:
                    6b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9F:AD:70:E5:00:E1:96:11:A2:61:66:BC:64:70:86:1F:A2:F9:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/910f9667-7a39-34ba-adc7-937a7326b558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:15:e3:50:59:d2:d1:d5:95:df:29:1f:81:34:26:2d:fd:36:
         0e:54:e7:f9:e3:99:32:3c:36:dc:85:5e:92:9e:7d:18:bd:78:
         93:e4:28:ac:c7:2b:64:27:a5:d8:60:9a:2e:e7:a8:e0:8a:3d:
         31:bf:a5:94:03:2f:c8:a0:ef:c9:6f:c7:e3:c7:fd:ea:8b:3c:
         aa:a0:93:5c:a1:96:b8:9f:13:ad:d6:55:0b:a4:a5:c5:18:31:
         35:01:be:c2:9b:4c:c8:3b:16:a8:32:4e:fd:3f:48:e1:d6:d8:
         a9:8f:93:b1:6a:cd:bc:ed:c1:3f:55:a0:ca:82:5a:20:fe:a0:
         fb:3d:1e:73:dc:ac:fc:3a:19:6e:5a:e2:0e:d0:3b:e9:8e:37:
         ce:4c:39:8c:03:5d:2c:11:42:08:16:10:93:83:cf:77:47:fa:
         7d:4c:09:71:61:bd:b8:54:b4:67:d5:72:3c:d2:f3:26:6d:5a:
         77:ad:2e:1e:37:7d:e1:32:06:4d:54:21:03:92:e5:80:fd:3b:
         8e:42:bf:72:8d:28:0e:99:fa:e5:9e:d9:48:98:be:40:d1:84:
         f3:ea:2b:fc:32:c1:47:e7:2b:49:b0:f5:4d:18:7f:3e:55:3c:
         73:42:4d:cc:52:26:e4:ab:fd:d3:68:06:e2:7c:dd:e1:1b:65:
         0e:60:c1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:04:37 2026 by rpki-client