Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/33b10fc7-6c11-3e08-9337-3984e76df073.roa
File:                     33b10fc7-6c11-3e08-9337-3984e76df073.roa (raw, json)
Hash identifier:          YLW+5lwwuK7cdxHXPKK8tQ6WeYrTLjA8ESb+9LCmqNI=
Subject key identifier:   87:0F:0F:64:93:69:B6:79:F3:86:D5:03:9B:9D:96:A4:F3:DF:06:97
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584E1E44438E32774D498DFB3A7C
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/33b10fc7-6c11-3e08-9337-3984e76df073.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     140911
IP address blocks:        209.58.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:43:8e:32:77:4d:49:8d:fb:3a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=f90c6985-2c99-47c2-8067-fbdb8365a864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:60:8e:2a:2d:b9:96:29:39:be:81:1d:26:59:
                    a1:88:1d:81:89:cb:49:bd:02:fd:89:9b:e2:81:68:
                    7f:51:d8:2e:58:93:e6:49:5f:71:c9:80:cc:d7:94:
                    86:2d:98:08:db:ba:21:3e:76:9a:ed:ed:70:87:97:
                    5a:3c:5d:ee:bf:a9:f6:03:0a:f6:b0:cc:cf:55:83:
                    85:9c:ed:29:28:6d:41:72:fe:3a:c2:6d:b4:ca:b1:
                    0d:5b:3c:ee:c0:c3:4a:83:7f:0e:fd:3d:30:92:51:
                    0f:9c:bf:f5:20:e1:0b:a2:01:c4:b5:51:e5:be:49:
                    48:19:34:47:76:56:c4:56:c1:84:38:d1:48:a1:14:
                    ad:ef:5a:44:57:e8:06:36:3e:f3:96:b0:dc:53:ee:
                    37:35:c5:e7:6e:3e:8d:e8:be:a3:40:58:2f:6c:e9:
                    38:ed:3b:36:7b:1f:16:0f:75:d8:be:a0:60:40:20:
                    49:d2:2f:24:23:e1:10:2e:5d:1d:a8:45:5a:96:5f:
                    2e:eb:43:17:60:86:2a:e8:3d:b8:6b:80:19:57:ae:
                    15:ef:5e:2e:ef:88:d4:3e:47:b8:4c:b8:b7:d7:2c:
                    6a:73:ac:5a:94:14:22:c2:b3:65:ee:89:62:ff:4a:
                    25:ea:22:18:98:a7:0c:03:6c:d3:21:34:83:c9:2c:
                    67:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0F:0F:64:93:69:B6:79:F3:86:D5:03:9B:9D:96:A4:F3:DF:06:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/33b10fc7-6c11-3e08-9337-3984e76df073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.58.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:1e:3e:40:16:8c:0b:6e:f1:42:02:a6:9b:60:e8:c9:5f:17:
         07:9d:38:1b:4f:6c:c9:38:4d:93:5b:4a:3f:56:4e:ca:4f:41:
         74:72:4a:71:0f:fa:39:72:4b:a0:ab:9a:67:00:3b:fd:fb:9e:
         53:4f:ca:f7:85:aa:ca:af:08:0a:d2:aa:d1:6a:f2:83:66:ac:
         65:9c:33:f6:fd:be:81:0a:1b:07:44:1d:c5:65:8d:ee:39:9e:
         98:e7:e8:eb:b2:67:15:14:ee:f4:b2:ec:97:1e:13:ae:c9:cb:
         64:4d:5a:fa:f1:1c:cf:3a:a5:82:db:7a:79:0d:e4:38:d6:59:
         88:d2:bd:b1:84:cc:a2:62:f5:a0:da:a5:64:00:84:02:6a:cc:
         94:29:5a:d9:11:6f:10:9a:f3:b5:7b:05:c1:34:44:ad:65:e7:
         5d:43:43:f3:28:d2:55:8f:e1:9f:c3:c7:7c:26:c7:a0:4e:4a:
         d3:ff:29:51:2e:a6:a1:ed:25:f2:57:fc:b0:71:b6:86:5c:24:
         21:31:bd:a5:4f:45:a9:e9:91:70:24:c5:dc:ac:61:31:c4:36:
         30:5a:0f:83:b5:57:8b:29:b6:aa:0f:a4:c7:b1:34:98:c0:77:
         9e:77:73:99:a3:ab:08:c5:90:9f:f1:49:26:81:c7:a9:d5:28:
         14:20:8d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:34:49 2026 by rpki-client