Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/faadd0a3-a993-3496-8f98-a98da5a4e705.roa
File:                     faadd0a3-a993-3496-8f98-a98da5a4e705.roa (raw, json)
Hash identifier:          hcrp0/oF6xDmKjIq7KyXnL2fUj0ry3AjFhsXCue0izE=
Subject key identifier:   BC:67:70:7B:E7:78:22:5A:8E:74:84:7D:47:3E:EF:CB:A5:C2:65:71
Certificate issuer:       /CN=e9d9b9dd-0b27-411a-a8a4-122477510cdf
Certificate serial:       010D0C9F4328584D6AAA84706EFCE53C707B0240
Authority key identifier: D0:3E:87:DB:98:AC:2E:8F:70:FF:B9:F1:85:A8:7A:49:C7:BC:9E:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/faadd0a3-a993-3496-8f98-a98da5a4e705.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     35350
IP address blocks:        198.74.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/e9d9b9dd-0b27-411a-a8a4-122477510cdf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/e9d9b9dd-0b27-411a-a8a4-122477510cdf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:84:70:6e:fc:e5:3c:70:7b:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9d9b9dd-0b27-411a-a8a4-122477510cdf
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=ae48ece9-c28b-4b2b-8b13-b330f8538271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:82:87:92:2c:c6:74:34:aa:90:cc:c1:ba:08:
                    aa:d6:7c:f5:40:ef:05:ee:40:02:2e:33:a6:c3:5f:
                    68:c8:8c:02:03:98:ec:b1:9e:d4:b9:95:c0:29:3c:
                    2d:e6:84:96:de:f2:56:f4:f5:56:27:bc:bd:11:5a:
                    d2:ec:93:e5:75:76:35:ae:10:28:3b:2c:94:1a:9f:
                    4b:d9:93:db:50:fa:b9:b9:8d:62:02:a2:dd:fa:5d:
                    b0:7f:8f:0d:2b:7b:15:a9:52:d4:c2:ae:6c:f7:55:
                    af:2b:2d:32:db:9a:bc:6b:50:56:7b:fc:32:f3:0e:
                    01:83:17:76:ae:0f:a4:59:d2:cc:b4:ab:86:fc:7d:
                    f4:2c:07:48:64:7c:02:f5:b9:15:30:a3:d3:ef:3b:
                    53:82:b2:5a:e2:3f:cf:da:27:e5:2a:65:51:e1:20:
                    88:7f:ca:25:1a:3f:b8:68:ed:e2:da:41:9b:0d:36:
                    c3:02:1d:d8:84:9a:1a:70:66:68:5c:76:96:9c:f9:
                    84:ed:b4:b0:38:3d:01:cd:18:33:0b:51:32:0d:97:
                    93:cb:f8:14:1f:8f:f1:37:40:47:2e:e2:67:12:07:
                    cc:d5:0f:bc:3a:11:6f:6e:b7:d9:99:a5:96:1d:9e:
                    a2:91:33:75:26:5c:32:85:84:d2:21:b1:cb:ba:d1:
                    89:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:67:70:7B:E7:78:22:5A:8E:74:84:7D:47:3E:EF:CB:A5:C2:65:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/faadd0a3-a993-3496-8f98-a98da5a4e705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/e9d9b9dd-0b27-411a-a8a4-122477510cdf.crl

            X509v3 Authority Key Identifier:
                keyid:D0:3E:87:DB:98:AC:2E:8F:70:FF:B9:F1:85:A8:7A:49:C7:BC:9E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.74.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:4b:6b:f7:81:76:42:ab:34:df:3c:09:8d:9e:48:df:56:49:
         af:68:39:4e:87:e2:76:91:a3:b5:c8:e0:d4:6b:57:5c:d7:a2:
         29:47:88:27:17:ad:d1:d0:0a:cf:c4:d3:80:b5:cb:36:fa:55:
         a2:f3:f3:d4:b2:82:d2:88:b1:ec:08:9f:2d:bf:ec:87:cf:27:
         a5:20:5b:25:f2:2e:fa:84:52:60:76:77:c4:96:75:84:7d:87:
         e2:79:8a:32:7c:97:60:a4:8f:96:df:7b:4f:f3:6c:70:bc:c4:
         8e:0b:a8:6e:cf:29:fd:19:43:97:dc:2a:9b:c4:80:66:ee:81:
         0e:7a:f5:31:1b:e9:a4:a6:89:3c:42:68:a4:07:79:d0:54:64:
         3f:e8:74:2a:f9:d7:8a:a5:49:35:45:41:9c:7c:7c:ff:2f:b8:
         b2:cd:fd:ca:bc:f9:c4:17:6f:e0:7a:40:e4:0c:6b:df:0b:03:
         12:6b:7f:15:69:3d:98:e5:b9:4a:b8:1b:20:d3:0c:97:41:4e:
         03:47:32:84:ee:8f:66:b4:d2:f2:08:77:da:b8:02:6f:ad:81:
         3b:3f:3e:ab:85:33:f9:0c:0f:60:fb:da:e5:72:c5:68:ae:e6:
         11:6b:62:a4:a3:56:6d:41:45:49:a9:5c:56:29:8f:59:10:39:
         ec:76:81:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:33 2026 by rpki-client