Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/8514efee-ce18-38cf-9bf6-f6432a19ca56.roa
File:                     8514efee-ce18-38cf-9bf6-f6432a19ca56.roa (raw, json)
Hash identifier:          er2KGA3IP8lLaP6UXIj6yK/SgKYL6hmOPxgOv3MeGlQ=
Subject key identifier:   E5:96:06:85:42:CE:6A:63:F8:2B:13:74:FA:EF:74:88:9F:E2:04:9A
Certificate issuer:       /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial:       010D0C9F4328584E296F1EA3533381ACAE821BC0
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/8514efee-ce18-38cf-9bf6-f6432a19ca56.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     812
IP address blocks:        74.198.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:1e:a3:53:33:81:ac:ae:82:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=74903c3a-c032-4b4e-975a-ae09754a8dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4f:8a:3c:87:49:e9:00:42:b9:81:a3:fe:05:
                    05:71:a9:55:fa:7c:c4:e3:ec:f3:77:27:eb:1b:67:
                    12:67:41:6d:f2:fb:a6:0b:3a:4e:05:ac:0d:bb:25:
                    ad:01:e5:2d:27:1b:70:bd:8c:84:0d:be:e1:15:24:
                    86:d0:71:be:23:8b:55:97:dd:14:37:22:e5:a5:31:
                    cf:60:48:87:58:5e:52:c4:11:53:28:8d:86:11:58:
                    c7:43:a8:7c:2a:cf:86:cf:fb:99:f9:34:1d:e2:86:
                    04:3f:c5:26:04:01:ba:ab:c6:3b:fc:18:c1:51:c7:
                    bd:30:32:83:b6:ff:77:2e:a5:f0:c9:88:01:0c:80:
                    6f:b3:9a:36:af:64:7f:a5:29:65:51:df:e4:90:76:
                    48:67:3d:e4:6b:8b:7d:0f:96:ad:c1:71:fc:1d:e9:
                    41:4f:53:ac:c4:98:44:df:90:1f:0c:ff:04:a6:a8:
                    c5:00:3d:e8:35:5a:98:55:92:96:7d:2e:a8:4a:d8:
                    40:67:70:4e:32:67:04:d5:b7:9c:bf:4a:6b:5f:60:
                    18:9a:bf:fd:5a:92:84:d0:50:6b:b8:c1:38:8b:a6:
                    22:e0:82:11:99:48:1d:48:cc:a0:8e:35:ea:78:23:
                    6c:07:d0:4c:5f:a4:58:99:b7:67:16:70:22:5c:93:
                    15:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:96:06:85:42:CE:6A:63:F8:2B:13:74:FA:EF:74:88:9F:E2:04:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/8514efee-ce18-38cf-9bf6-f6432a19ca56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl

            X509v3 Authority Key Identifier:
                keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.198.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:1c:8d:ff:01:53:2e:1e:7d:e1:a3:39:d7:7a:ac:61:4c:3b:
         eb:d4:06:f7:99:ea:ba:75:c0:5b:bc:f3:77:53:6a:42:e8:ed:
         d7:e2:f5:01:4c:70:8a:1c:10:3b:70:19:44:20:89:dd:92:12:
         03:17:ad:15:89:06:67:af:4c:d6:b0:8f:72:1b:46:6e:fd:9b:
         e3:a9:24:8c:36:ce:01:70:3c:58:b4:64:af:9c:d4:5c:9d:1f:
         3f:25:5c:0e:18:f3:20:f8:20:31:cc:6a:1c:4a:29:d8:16:e5:
         9e:1c:99:34:c4:0f:c8:e7:1f:27:f9:a8:a1:c1:ea:a6:5b:84:
         5d:1a:72:79:ca:04:13:83:04:ef:32:fa:e2:c8:67:35:ba:d7:
         66:a0:c0:2d:d8:f2:3b:a8:35:7a:e3:b6:74:39:be:c0:c5:54:
         0e:20:d3:5e:19:61:ba:1e:cd:a8:10:3b:da:41:96:3b:87:fc:
         83:95:24:ec:c2:70:0a:89:d2:fe:f5:b2:62:56:14:2f:3d:6e:
         14:c3:39:2a:51:48:b5:ee:01:fc:f2:87:d1:d3:37:c9:55:a6:
         00:b5:2f:aa:df:b8:c4:ec:e8:ce:f9:32:56:9f:a1:e3:51:23:
         b7:b4:3a:e4:24:86:52:b5:24:1a:f7:d3:0b:a2:03:2c:2d:1f:
         60:90:c6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:09:55 2026 by rpki-client