Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/806e1a04-7951-3a36-8add-b635902d67ee.roa
File:                     806e1a04-7951-3a36-8add-b635902d67ee.roa (raw, json)
Hash identifier:          sDXMkve080BSUaIC9iCTZwgMd/IVcNRalFd4Fsb8Fag=
Subject key identifier:   0E:CE:AE:05:94:31:69:82:59:33:99:49:BB:A4:B2:77:30:AF:C8:27
Certificate issuer:       /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial:       010D0C9F4328584E296F1E16EC086700CA602900
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/806e1a04-7951-3a36-8add-b635902d67ee.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     812
IP address blocks:        74.198.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:1e:16:ec:08:67:00:ca:60:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=1f052cea-ca8f-4ab6-8f63-dabd9744a0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a0:ac:77:50:fd:1e:d5:73:fd:9a:e8:11:c9:
                    9d:56:70:a2:1b:4b:dc:98:d0:bf:99:b0:42:42:0e:
                    74:19:c1:7a:ee:30:92:a5:22:35:d9:19:e8:83:08:
                    7b:a1:3a:e7:53:22:98:a9:d8:92:2a:a1:22:01:ca:
                    6a:20:a1:2c:9e:dc:95:41:7b:97:c3:d0:57:45:bf:
                    32:a7:19:08:85:99:ff:6d:7e:d3:ae:03:8f:8d:ee:
                    72:18:a4:22:ef:ff:1d:2b:9d:0f:7b:7a:4e:91:35:
                    30:5f:29:a7:59:6f:7b:94:80:1a:b0:b5:a9:17:e3:
                    29:11:d7:db:d6:7b:5d:43:d0:0c:a7:0d:a4:46:c3:
                    d2:cc:94:79:86:d2:b3:23:a0:ba:0c:bf:fd:88:ba:
                    40:7f:d2:83:3a:4a:bb:ff:32:af:53:c6:d6:c1:20:
                    5a:e7:a3:77:3b:e8:07:1b:86:05:a6:0b:28:4a:29:
                    12:e4:80:c0:95:ee:2b:10:ba:da:4a:db:c4:77:19:
                    1d:00:e6:36:01:2f:eb:1d:7a:67:90:5b:1d:7d:3a:
                    e7:a1:c1:a3:5d:76:93:e0:86:7d:a7:dc:00:61:4f:
                    8f:83:67:f8:a3:f5:f5:8b:72:5a:a8:bf:79:e2:78:
                    24:54:10:64:b9:9e:8c:7c:fa:89:e2:f7:00:70:7e:
                    cd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CE:AE:05:94:31:69:82:59:33:99:49:BB:A4:B2:77:30:AF:C8:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/806e1a04-7951-3a36-8add-b635902d67ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl

            X509v3 Authority Key Identifier:
                keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.198.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:f7:e3:96:25:04:1e:89:85:0e:84:38:1c:f5:59:5f:f9:d4:
         50:bf:b0:f5:da:c6:91:c1:7b:c6:af:c0:3b:0c:3e:b2:a5:9d:
         19:c8:69:a8:23:93:4e:c6:b6:65:3f:96:f0:10:b9:92:5c:69:
         ee:d1:ab:ce:5a:a7:ac:23:9b:28:e5:f8:fd:e6:9c:e3:a0:fc:
         21:e9:49:89:b5:bf:71:d9:d7:98:a1:53:eb:a7:5b:07:0f:8f:
         33:af:e5:f7:02:a1:54:e6:04:8c:50:75:b1:e2:a6:24:0e:d1:
         21:4f:97:9a:ac:e3:80:5e:62:96:7a:ca:e9:ae:f1:e7:8e:d5:
         7c:de:7d:25:99:91:51:98:2f:22:7b:16:b5:77:2d:a9:4b:a8:
         4a:66:e6:92:1d:71:ed:22:01:28:40:1d:d9:0e:f2:ec:c3:5a:
         ce:52:bf:c1:4c:0b:33:2c:f2:9a:d7:c2:26:39:e3:d9:ed:eb:
         a5:fb:17:76:19:ce:12:4d:20:f1:b7:36:c3:19:14:29:7b:42:
         ce:81:36:6b:63:5e:f7:06:fd:35:4b:29:19:e3:db:98:6f:77:
         61:4f:70:a0:b8:8d:d2:d5:91:75:ce:e9:1f:f5:bb:e7:36:18:
         46:cb:21:7e:c0:dc:ce:af:1c:12:8d:25:4e:1e:fe:9d:10:0f:
         66:95:a7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:55:27 2026 by rpki-client