Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b73f45e7-d0e8-367b-aff7-821c9f5f954f.roa
File:                     b73f45e7-d0e8-367b-aff7-821c9f5f954f.roa (raw, json)
Hash identifier:          uSm7mtb0r2AeKlqwAaIpxKNp/TwdY3S8V3Uh0nMsb1k=
Subject key identifier:   F7:0C:44:64:9B:5A:90:06:F8:C3:0B:12:4D:E7:E9:9B:78:DA:AE:3A
Certificate issuer:       /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Certificate serial:       010D0C9F4328584D746FCC5E3F4A83239C277B80
Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b73f45e7-d0e8-367b-aff7-821c9f5f954f.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     4476
IP address blocks:        192.68.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:cc:5e:3f:4a:83:23:9c:27:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=4b94be49-a0b1-408b-8c44-10b172671fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0c:f8:ed:2d:73:51:6c:d5:c3:4b:37:a8:c8:
                    7d:68:2a:26:8f:70:f3:99:d3:6c:36:71:b6:39:36:
                    bc:f2:ff:03:24:f9:4c:88:80:ed:f5:ef:2e:d6:9d:
                    ce:49:23:b0:6d:cb:90:d7:94:36:f6:ae:47:46:5d:
                    f4:62:c1:12:f4:5f:77:b8:8c:d3:e6:ff:12:fc:87:
                    52:d0:79:32:a3:69:23:08:ee:bc:3e:0c:a5:33:7a:
                    72:a0:09:09:61:58:c8:c3:3e:77:6f:30:a9:58:37:
                    13:75:76:6e:f5:22:61:8e:52:57:46:e4:19:3a:b0:
                    ad:fa:b6:ec:ca:81:e0:89:07:8f:b2:00:d8:51:57:
                    e3:ab:d6:55:42:90:3a:b1:c0:80:47:1c:29:2f:85:
                    de:d4:3b:63:78:fb:89:89:8b:3a:b8:c7:64:16:8f:
                    36:f1:82:b5:8b:cf:3c:6f:49:f9:c6:be:26:0f:28:
                    41:e2:42:3c:3a:6e:6b:9b:61:ab:13:38:fe:11:a6:
                    df:77:c8:24:a7:ba:18:d5:bf:27:d1:c1:b5:30:56:
                    f0:67:79:6f:b0:26:11:06:5f:19:89:c9:31:a8:fb:
                    91:b0:03:72:64:3a:b4:06:07:98:26:37:dd:43:57:
                    09:6b:72:5f:9b:59:d1:16:6b:74:db:25:6e:ea:db:
                    2b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0C:44:64:9B:5A:90:06:F8:C3:0B:12:4D:E7:E9:9B:78:DA:AE:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b73f45e7-d0e8-367b-aff7-821c9f5f954f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl

            X509v3 Authority Key Identifier:
                keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:1e:b5:55:84:1b:a0:d4:8b:a3:07:16:cc:bf:29:f5:13:6e:
         5d:08:1f:a1:b7:65:28:d8:bc:60:f4:51:95:1d:0e:a7:ea:83:
         e7:3c:a7:1a:ec:ac:ca:e5:49:51:41:34:3f:b2:f9:5e:2a:8b:
         64:58:aa:d6:5a:d1:df:9b:ef:2b:4c:ce:ed:06:fb:dc:7f:ea:
         a1:51:e2:fd:80:aa:7a:5a:dd:53:59:a1:47:19:1a:ec:2b:62:
         93:a9:5a:e2:ee:ad:cf:4d:d2:46:6c:44:ac:3f:bb:ec:c9:f2:
         a7:d6:d6:c2:93:e4:e3:00:77:48:1f:ac:06:99:29:7c:3e:c4:
         60:11:a5:cd:66:85:fe:70:4e:8d:94:88:84:a8:aa:0f:9e:0b:
         61:b2:5a:d1:11:3f:05:3e:2c:4b:4e:43:4b:48:e7:05:f8:b6:
         b7:a8:4d:50:c5:8a:e3:bb:fe:07:39:bb:e5:17:9e:67:31:c0:
         04:f7:c3:a4:03:a3:85:cb:aa:25:ab:5f:fe:63:dc:48:24:8d:
         80:ea:2a:11:9e:39:c3:ab:59:81:8d:be:bb:7f:5d:64:b3:6f:
         a1:bc:e7:99:24:84:27:c3:b1:3a:6a:f4:df:5d:0c:87:5b:d5:
         5b:ee:cd:c8:85:39:ba:56:72:71:6f:85:89:22:cf:21:dc:50:
         36:68:5b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:40:47 2026 by rpki-client