Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/34d249c2-ff02-3617-9829-9253b682e85d.roa
File:                     34d249c2-ff02-3617-9829-9253b682e85d.roa (raw, json)
Hash identifier:          wW4mS2PALmvnZOIN1QSrXTw8rvvWFF9iiI63TCklSTI=
Subject key identifier:   98:A5:D4:68:B4:B5:A0:9B:1F:B0:2B:A9:02:FD:72:B0:C5:22:84:1F
Certificate issuer:       /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial:       010D0C9F4328584D730A6F782B3AF16D3034C680
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/34d249c2-ff02-3617-9829-9253b682e85d.roa
Signing time:             Thu 09 Apr 2026 13:00:30 +0000
ROA not before:           Thu 09 Apr 2026 13:00:30 +0000
ROA not after:            Wed 08 Jul 2026 13:00:30 +0000
asID:                     812
IP address blocks:        74.198.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:0a:6f:78:2b:3a:f1:6d:30:34:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
        Validity
            Not Before: Apr  9 13:00:30 2026 GMT
            Not After : Jul  8 13:00:30 2026 GMT
        Subject: CN=2a36b9bf-197b-41a6-a7a4-2b95ae2e43b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5a:98:54:d1:16:c5:dc:8e:99:16:07:39:67:
                    c4:19:6d:ef:9d:67:ec:47:e1:c2:6b:57:cb:8d:47:
                    dc:22:47:c9:9c:e9:8e:04:90:15:2c:23:ff:7d:f2:
                    48:1f:49:70:6e:fd:c4:76:d9:8e:54:b1:fb:44:88:
                    81:01:47:bc:f0:6c:5a:41:58:c0:92:b4:f7:69:18:
                    f5:05:b4:65:f5:6f:64:93:38:0b:71:40:e4:db:ca:
                    79:6c:6f:6c:2e:c7:b7:62:d1:39:bb:b4:b2:91:a0:
                    5c:e2:20:16:0b:70:81:5c:a6:6a:4d:f4:69:d1:af:
                    64:e8:d1:5a:b6:da:f4:33:a7:be:9e:f4:2f:5e:1b:
                    7f:ab:c2:33:0d:a6:7d:94:19:ae:04:ba:fc:7f:dc:
                    c7:e5:9e:2e:fd:f5:6d:73:c0:86:6c:a7:f3:54:4f:
                    bb:c2:9f:84:b2:f0:4c:b0:4f:20:e9:c6:55:b4:47:
                    1c:11:f5:62:5e:70:e6:99:b0:1d:f2:17:fa:4b:0f:
                    dd:1e:71:83:5e:20:05:67:84:89:2e:a1:b5:4d:ee:
                    58:e0:86:ac:d6:4c:14:be:b1:f6:be:d2:9c:a1:70:
                    02:1a:9c:c5:e1:ac:56:35:9a:6a:21:d4:89:10:61:
                    20:83:f6:b6:39:99:3d:a2:65:dd:62:09:cd:21:84:
                    b2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A5:D4:68:B4:B5:A0:9B:1F:B0:2B:A9:02:FD:72:B0:C5:22:84:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/34d249c2-ff02-3617-9829-9253b682e85d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl

            X509v3 Authority Key Identifier:
                keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.198.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:b8:29:f7:5d:61:bc:62:62:9e:05:88:cf:6a:af:25:b5:bd:
         ee:d2:8d:53:2d:e9:3a:e9:38:54:21:88:31:01:d1:37:1d:2b:
         ea:26:0c:bf:a8:86:71:c3:bc:f3:99:9f:65:69:66:7b:4a:a3:
         df:0b:16:56:24:ef:df:ba:f8:a8:88:e1:c4:a7:bf:d7:d3:51:
         c8:c7:58:99:4b:8b:d5:5d:74:ae:9b:ff:44:e4:6f:5b:ef:98:
         4e:32:05:78:69:c4:ad:8a:13:55:35:d4:92:5f:79:66:00:df:
         19:a2:00:d2:c5:5b:51:5f:dc:9b:ec:d4:3b:56:c8:f7:7b:2f:
         b3:17:0e:71:12:bc:53:68:12:0d:3b:8d:b4:f0:75:36:dc:f4:
         c4:59:54:05:34:d8:d3:c9:3e:9c:21:73:5c:03:54:1f:b8:57:
         c9:50:26:db:be:d0:d9:3c:99:86:af:1d:64:e0:85:58:58:f1:
         85:58:b9:29:53:9f:ee:49:c6:7e:4f:05:46:3b:30:b6:1f:a9:
         ce:19:84:d8:83:47:cb:2f:92:f1:41:49:1a:cc:91:09:b0:66:
         a1:5b:25:c1:63:c1:f3:4c:85:8a:39:ed:00:40:48:85:fc:96:
         a1:8e:64:b7:34:f2:01:c1:57:f8:e3:16:5c:59:3b:a2:f4:31:
         0a:ad:64:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:08:30 2026 by rpki-client