Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/781cf627-f7ee-34af-9df1-1f16dea657a6.roa
File:                     781cf627-f7ee-34af-9df1-1f16dea657a6.roa (raw, json)
Hash identifier:          d+HKHCKVwKwtaezY4XRhhFIdAXJZJY1EWvjn1ls9oew=
Subject key identifier:   95:D4:AE:8B:C4:D5:72:45:A5:58:27:B6:D7:32:D7:74:08:B0:DB:A8
Certificate issuer:       /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial:       010D0C9F4328584E296F1EAEB039A1380FAA1790
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/781cf627-f7ee-34af-9df1-1f16dea657a6.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     812
IP address blocks:        74.198.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:1e:ae:b0:39:a1:38:0f:aa:17:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=89b31c5f-9385-45bd-b2eb-fcf3ae16e7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d9:e9:06:1b:36:87:b2:72:ca:f5:e8:fd:27:
                    1d:18:a9:c3:44:8c:1d:98:66:80:7f:d6:6a:30:4d:
                    6e:4d:bf:5f:0f:d3:52:a8:29:5e:82:96:73:56:28:
                    8b:6b:6f:78:ac:59:39:14:30:3f:b8:c5:da:dc:d6:
                    f7:cf:8f:f1:18:7d:e4:e8:9a:5c:08:c9:af:2b:07:
                    92:97:f8:d3:a4:2c:92:11:0f:75:f3:a1:4b:74:fc:
                    64:f0:86:63:46:fc:9e:72:38:51:2b:7d:70:59:2b:
                    5f:61:ba:be:eb:ed:45:24:26:c5:af:59:e5:0d:f6:
                    db:42:8a:40:5f:5d:bb:60:6d:55:16:09:cf:51:0e:
                    fb:b1:33:04:18:fa:3c:62:80:cb:26:de:4a:de:48:
                    07:68:9d:19:f3:46:b9:ed:b8:d8:45:1c:e3:de:03:
                    d8:63:a8:bc:32:94:3b:0c:9d:ae:72:e2:2f:f3:35:
                    da:3a:02:cc:1c:3e:77:fe:c3:98:9c:f9:d2:03:e7:
                    b3:86:7f:aa:79:26:91:1f:28:c0:eb:78:ce:c6:31:
                    e6:44:f2:57:26:fa:1e:ae:d1:06:37:c8:62:17:b8:
                    3f:f1:cb:49:f0:cf:ad:ee:26:bd:ea:17:83:96:3c:
                    8b:ca:e6:00:ee:4a:14:73:ec:93:6a:15:2d:bb:56:
                    b7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D4:AE:8B:C4:D5:72:45:A5:58:27:B6:D7:32:D7:74:08:B0:DB:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/781cf627-f7ee-34af-9df1-1f16dea657a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl

            X509v3 Authority Key Identifier:
                keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.198.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:36:a5:72:79:62:d3:0c:aa:23:e0:14:50:87:e7:be:3b:83:
         d8:8c:c5:41:eb:63:e7:a1:9e:ce:de:31:c6:26:d1:da:dd:8d:
         fa:52:19:c1:e6:a1:98:bd:12:da:3b:43:b3:4a:0d:43:af:ba:
         48:f9:17:f2:18:a7:59:1d:3f:07:1f:e6:ed:49:32:40:58:de:
         ba:82:c7:74:2f:89:a3:3c:cd:7d:6b:88:25:95:aa:a6:2e:5c:
         da:43:0a:55:46:30:65:b3:63:89:1f:35:49:25:53:6c:ed:38:
         cc:f4:91:02:29:e7:c7:9f:81:19:26:c7:24:50:8f:98:0c:28:
         25:25:92:a0:ae:ca:d7:45:72:3f:9f:42:34:d9:83:26:93:0e:
         b7:45:19:f8:a5:00:54:61:e2:03:43:e9:0c:4c:fe:d0:7d:a7:
         0f:03:5e:3e:97:ca:84:1a:09:26:0c:16:24:d6:d1:66:40:c4:
         75:65:ed:2c:31:eb:10:53:bc:3a:f2:41:66:2d:ca:eb:5a:fc:
         42:f2:b2:25:30:cf:eb:1c:d9:95:4f:fd:47:00:e3:b4:52:63:
         69:cf:25:07:29:e0:9e:0a:6a:39:66:1b:21:65:bc:21:70:79:
         3a:02:0f:d4:8c:5d:9e:29:2f:d2:c3:e1:67:11:c7:12:1e:ed:
         c5:fb:2b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:30:11 2026 by rpki-client