Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/4b037c18-759a-37bb-8044-f325b3e909ca.roa
File:                     4b037c18-759a-37bb-8044-f325b3e909ca.roa (raw, json)
Hash identifier:          h8Ofu5G3WeMUZzWCSInRcbaOmXQt0Y3OsX6+9rgYoVs=
Subject key identifier:   34:E7:2C:86:44:00:A8:C6:EE:7D:C5:78:D7:68:DA:28:D1:50:F9:D9
Certificate issuer:       /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial:       010D0C9F4328584F94D35F727C18BE08638E9240
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/4b037c18-759a-37bb-8044-f325b3e909ca.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     812
IP address blocks:        74.198.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:5f:72:7c:18:be:08:63:8e:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=0f30008e-ca51-4408-bc0b-e15b460d018a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d4:b5:43:29:47:f9:e4:16:51:60:1f:90:5d:
                    0f:15:85:98:28:04:c9:79:2f:82:02:2b:12:a4:c9:
                    07:49:d9:20:41:88:6e:5f:a3:a5:88:2f:89:f5:78:
                    f7:9a:69:f7:79:6d:61:9e:fd:cf:89:0b:58:8b:c5:
                    12:34:7e:57:9e:93:cf:96:44:59:aa:18:6e:ae:bf:
                    ee:49:ba:e1:59:b2:4e:3e:8b:7c:37:16:a5:4f:26:
                    e9:fc:94:3c:a4:95:6f:ea:bf:42:26:b7:e3:6a:96:
                    18:ab:da:92:7d:0b:f1:fc:68:fa:e5:56:e4:35:af:
                    e3:c6:92:34:f9:e8:39:a5:d3:b5:f0:fd:13:e5:68:
                    75:f6:ec:81:3c:25:8a:73:81:71:74:e6:bf:04:91:
                    be:b7:40:b8:d3:2d:2f:c1:ed:d3:1f:d5:16:51:01:
                    be:82:6c:b8:85:71:47:36:cc:8c:90:d6:cb:79:6b:
                    6f:c5:e9:41:a6:71:bc:64:b1:35:39:53:66:54:01:
                    d4:5b:11:07:6c:6a:bb:62:7b:b6:e4:0b:dc:1e:9f:
                    d8:52:57:5c:fe:9f:6c:66:32:e5:8d:99:6d:29:15:
                    4c:c6:75:56:13:0c:fe:8a:c1:8a:c9:53:d9:6e:ac:
                    96:f0:7a:d0:a0:8a:72:34:ba:ea:f5:ce:bc:c4:61:
                    29:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E7:2C:86:44:00:A8:C6:EE:7D:C5:78:D7:68:DA:28:D1:50:F9:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/4b037c18-759a-37bb-8044-f325b3e909ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl

            X509v3 Authority Key Identifier:
                keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.198.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:08:43:17:7c:c7:e1:b8:09:52:ef:95:01:5d:fa:e2:c9:6a:
         fa:6d:0b:7e:b5:b3:78:8d:5e:67:64:ee:e4:b7:36:8c:58:e1:
         e9:2f:83:26:9a:b7:cd:0a:5a:63:cc:89:e8:37:8b:cf:47:32:
         7e:2d:35:e8:69:f1:76:9d:c0:c5:48:28:5a:d2:33:83:63:dc:
         ea:9f:86:90:73:b4:5c:2e:f4:d5:4f:3e:7c:8c:69:9f:d7:ed:
         d2:bf:4f:b1:df:0d:e2:e1:89:8f:19:75:90:bc:c5:92:32:3e:
         f0:f9:b1:63:c0:8a:a5:92:79:1b:28:22:84:2f:d2:d6:ec:f3:
         02:88:15:50:d4:4d:03:f3:10:3f:45:02:45:2f:57:fa:36:0e:
         71:63:5d:b8:60:04:16:c5:36:b0:68:36:eb:86:12:a3:b5:81:
         a7:6f:ff:43:94:ab:a7:18:99:e9:e1:53:e8:5a:a6:f3:9a:ec:
         a8:70:62:c2:93:81:ff:c1:5b:15:19:56:29:9f:f8:d8:bb:9b:
         b3:68:74:05:40:5d:39:88:2a:9c:ee:c5:b3:93:47:2c:b5:c1:
         34:b2:19:9f:51:1f:17:a0:14:fc:04:65:d1:61:70:70:53:02:
         8d:45:73:40:99:5e:8f:9a:26:ae:c7:43:e6:fb:66:b3:76:dc:
         9d:b3:7e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:17:41 2026 by rpki-client