Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/a98f2dd1-82ec-3117-b5bd-75f7328d237c.roa
File:                     a98f2dd1-82ec-3117-b5bd-75f7328d237c.roa (raw, json)
Hash identifier:          R9ppSRQuk6sw15siZm+Yr6v81xTnzJ1qGZErpdC+dCo=
Subject key identifier:   AC:DF:9A:66:1C:12:9A:D4:2B:CA:20:E5:30:E0:54:E0:37:5D:7F:F1
Certificate issuer:       /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial:       010D0C9F4328584D706FB0F883C7F019447D9980
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/a98f2dd1-82ec-3117-b5bd-75f7328d237c.roa
Signing time:             Wed 08 Apr 2026 14:37:09 +0000
ROA not before:           Wed 08 Apr 2026 14:37:09 +0000
ROA not after:            Tue 23 Jun 2026 16:39:59 +0000
asID:                     812
IP address blocks:        74.198.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:6f:b0:f8:83:c7:f0:19:44:7d:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
        Validity
            Not Before: Apr  8 14:37:09 2026 GMT
            Not After : Jun 23 16:39:59 2026 GMT
        Subject: CN=abe54b36-4c17-44ad-8c9f-0a8f2e2a4c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:27:3a:20:ff:b1:84:29:cf:c6:36:01:5c:7f:
                    42:a7:db:44:3c:c4:a7:b4:55:05:c7:38:c5:3b:4b:
                    d6:ca:c8:b6:19:3b:73:62:bf:4c:8d:26:1b:fb:34:
                    9a:5d:12:49:61:63:09:ec:53:75:87:63:30:c6:eb:
                    5d:21:df:92:e0:4e:ed:e7:9e:27:83:f6:c6:51:30:
                    10:7d:82:bf:53:f9:9d:47:1a:26:34:87:0b:34:41:
                    9c:a9:67:d3:34:8d:ca:97:61:dd:0f:5b:85:b9:2f:
                    f6:27:3d:4b:94:c5:fc:46:6a:15:a9:5e:af:8d:cf:
                    1c:77:b6:db:48:cd:24:d2:5e:70:b4:18:c5:e2:a3:
                    91:9b:a8:e0:fd:25:d4:a4:77:52:db:23:31:16:ac:
                    73:28:a5:35:f2:ff:bf:cd:26:a3:88:32:4e:dc:48:
                    cf:83:fa:33:29:0f:fb:f0:71:2c:7d:93:a4:e9:0a:
                    89:1d:d5:9e:21:42:26:b9:df:20:ce:44:e0:34:c6:
                    19:8d:96:4b:fe:3a:04:7f:c9:7a:14:90:d9:3a:fa:
                    2d:8e:34:88:dd:d4:7b:4c:f1:1c:bd:0a:2e:9d:4c:
                    7d:7c:04:e9:56:21:1c:a6:88:f1:31:5b:0c:b5:f4:
                    cc:1a:0d:3e:5b:fc:c7:e6:14:bd:cc:39:4a:d4:24:
                    3c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DF:9A:66:1C:12:9A:D4:2B:CA:20:E5:30:E0:54:E0:37:5D:7F:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/a98f2dd1-82ec-3117-b5bd-75f7328d237c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl

            X509v3 Authority Key Identifier:
                keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.198.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:52:68:3e:e5:a7:8b:c2:25:dd:ab:9b:07:4b:97:73:87:e7:
         99:b1:fa:72:ee:61:8b:49:bd:24:3b:e3:f8:92:79:13:29:fb:
         69:47:38:f1:66:47:56:9f:20:a8:c2:4b:bc:ac:27:7e:51:e8:
         d3:fb:2c:04:c0:94:52:f2:a2:76:06:65:89:d7:59:fd:c8:fd:
         66:5a:9d:db:f5:48:53:e3:5c:39:01:4e:c7:37:81:f3:77:07:
         fa:91:27:8e:d3:05:b0:a1:f8:5c:aa:88:30:10:59:86:16:43:
         9f:50:3a:80:12:8c:28:d3:61:fd:bc:6a:7c:9a:a2:95:6d:dc:
         61:7e:b7:bd:63:3a:c9:92:fc:47:e8:ec:a7:88:01:94:9e:e2:
         e2:82:40:4e:36:5b:97:de:c0:c7:ca:97:5f:c6:17:bb:fc:e5:
         a0:fd:07:3d:09:b0:21:8d:48:f8:12:9b:b0:d5:df:78:81:34:
         aa:1f:dd:81:97:24:e4:80:4d:0d:8e:11:e8:e0:0e:b6:2f:ee:
         41:29:0c:4b:d2:41:72:f2:35:54:b2:3c:98:d7:14:45:ca:72:
         07:97:4c:85:d9:47:d8:e3:de:1d:65:16:b2:5f:cb:8c:23:36:
         36:31:52:dd:31:e3:45:ec:01:5d:3b:4c:a3:af:ca:b6:07:b1:
         0b:77:bd:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wb7D4g8fwGUR9mYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw
YTMyMB4XDTI2MDQwODE0MzcwOVoXDTI2MDYyMzE2Mzk1OVowLzEtMCsGA1UEAxMk
YWJlNTRiMzYtNGMxNy00NGFkLThjOWYtMGE4ZjJlMmE0YzZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCc6IP+xhCnPxjYBXH9Cp9tEPMSntFUFxzjF
O0vWysi2GTtzYr9MjSYb+zSaXRJJYWMJ7FN1h2MwxutdId+S4E7t554ng/bGUTAQ
fYK/U/mdRxomNIcLNEGcqWfTNI3Kl2HdD1uFuS/2Jz1LlMX8RmoVqV6vjc8cd7bb
SM0k0l5wtBjF4qORm6jg/SXUpHdS2yMxFqxzKKU18v+/zSajiDJO3EjPg/ozKQ/7
8HEsfZOk6QqJHdWeIUImud8gzkTgNMYZjZZL/joEf8l6FJDZOvotjjSI3dR7TPEc
vQounUx9fATpViEcpojxMVsMtfTMGg0+W/zH5hS9zDlK1CQ8wwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKzfmmYcEprUK8og5TDgVOA3XX/xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl
MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvYTk4ZjJkZDEtODJlYy0z
MTE3LWI1YmQtNzVmNzMyOGQyMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3
ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0
MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw
Y2QxNDBhMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSsawMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHhSaD7lp4vCJd2rmwdLl3OH55mx+nLuYYtJvSQ74/iSeRMp+2lHOPFm
R1afIKjCS7ysJ35R6NP7LATAlFLyonYGZYnXWf3I/WZandv1SFPjXDkBTsc3gfN3
B/qRJ47TBbCh+FyqiDAQWYYWQ59QOoASjCjTYf28anyaopVt3GF+t71jOsmS/Efo
7KeIAZSe4uKCQE42W5fewMfKl1/GF7v85aD9Bz0JsCGNSPgSm7DV33iBNKof3YGX
JOSATQ2OEejgDrYv7kEpDEvSQXLyNVSyPJjXFEXKcgeXTIXZR9jj3h1lFrJfy4wj
NjYxUt0x40XsAV07TKOvyrYHsQt3vQQ=
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:05:19 2026 by rpki-client