Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/3049b210-cc28-3811-a01d-afdf81bd6f57.roa
File:                     3049b210-cc28-3811-a01d-afdf81bd6f57.roa (raw, json)
Hash identifier:          CFgFiriYe21ob/4iYKxg4ma07HVn+deP/S1d9o/l3Uc=
Subject key identifier:   8A:BC:B9:99:3F:FD:98:1F:A9:5E:F7:63:C2:EE:C6:9A:05:A8:A0:C8
Certificate issuer:       /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial:       010D0C9F4328584F6F22F0C2B99D63B5DFFC8680
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/3049b210-cc28-3811-a01d-afdf81bd6f57.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     812
IP address blocks:        74.198.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:f0:c2:b9:9d:63:b5:df:fc:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=e15b361f-72b3-4cd0-a79a-4a52c8f8c12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:18:9f:55:80:b8:14:7c:22:cc:df:6b:c5:15:
                    7c:36:d8:3e:23:86:45:90:d8:96:d1:c2:a8:36:d8:
                    1a:5b:c4:3b:09:7d:00:1e:87:5e:b8:b6:50:fa:19:
                    b5:e9:ee:39:52:62:97:81:2f:b1:8c:19:2a:96:04:
                    91:78:67:58:b0:ef:5c:2c:6b:4c:8d:14:aa:83:d2:
                    03:69:53:c0:c6:be:f2:dc:3b:d6:59:1d:d2:0b:4a:
                    cd:c3:ad:77:b0:a4:3a:db:45:d5:13:56:b0:60:f8:
                    24:2f:71:98:8d:34:c4:70:37:19:73:56:c5:74:74:
                    f5:13:e1:50:66:87:ce:2b:cb:ee:1e:1d:53:64:4d:
                    84:51:61:7d:c4:c9:6b:a8:c2:28:5e:fd:5b:a5:4d:
                    2d:9e:91:4d:dd:55:4a:c3:20:b9:1c:2b:b5:e8:15:
                    38:69:2f:2a:66:03:c9:43:f2:ff:4b:a0:2b:c0:32:
                    8a:f0:dd:31:c4:69:fb:12:6d:8e:3f:7a:bd:91:8c:
                    64:c8:45:e6:9b:52:2b:80:0b:20:e9:67:06:96:ab:
                    f7:1a:1e:ef:8f:e3:16:27:3e:f7:6a:a4:7d:c7:41:
                    e8:c4:49:74:eb:ce:0a:bd:70:fe:99:27:47:06:f4:
                    fc:e8:94:bb:ab:15:63:01:85:02:5d:d1:07:6a:4b:
                    3d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BC:B9:99:3F:FD:98:1F:A9:5E:F7:63:C2:EE:C6:9A:05:A8:A0:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/3049b210-cc28-3811-a01d-afdf81bd6f57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl

            X509v3 Authority Key Identifier:
                keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.198.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:44:1d:16:5b:61:a3:90:d8:10:f5:21:13:40:b8:21:2c:c7:
         36:4f:89:49:49:17:d5:11:39:40:49:dd:2e:a9:b5:8f:ce:b3:
         ad:f0:a6:3c:42:c3:56:6d:5b:ca:8b:df:fc:e4:26:43:db:f3:
         ce:3d:b8:f5:fb:7f:41:52:23:4d:60:5f:ab:55:cf:0a:b8:f7:
         8b:9d:54:90:8d:36:4c:db:32:08:07:03:ce:ec:43:60:74:f4:
         1d:94:cf:bc:46:78:0e:b7:42:ef:87:ca:af:18:95:6b:0d:97:
         8b:f9:f5:ba:40:39:cd:4d:a4:ca:10:5b:dd:21:0a:68:70:30:
         8d:10:60:00:e8:42:74:13:fd:0b:79:e7:9e:d2:55:c1:c5:31:
         7a:bc:88:0a:28:e0:4f:ed:84:fa:b5:2b:a6:f9:75:0e:34:6f:
         88:d1:b3:40:d9:5f:b0:d1:b7:80:9e:46:1a:9d:98:1c:d4:d5:
         68:8e:73:e8:7f:1e:3c:45:91:cc:b9:7c:8c:90:8f:6f:b8:74:
         87:87:f6:77:f1:10:43:05:61:7c:18:25:5e:80:1d:bc:fa:77:
         25:56:aa:20:17:b8:d9:64:e6:bb:80:e8:bd:52:91:ea:18:53:
         16:fd:d1:d0:56:56:4b:4e:76:51:2c:15:90:17:bd:04:3a:1b:
         d5:14:c4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:24:10 2026 by rpki-client