Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/74e6862f-f131-3e4c-964a-f7ebd647c95a.roa
File:                     74e6862f-f131-3e4c-964a-f7ebd647c95a.roa (raw, json)
Hash identifier:          DYazn/edQ5fFSVrahtOnwUSn4EnndUvn8Efp6jy2Vrg=
Subject key identifier:   93:5E:DC:B9:7D:C2:BC:11:56:96:AE:77:23:79:A7:22:89:B0:B7:8A
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584DDBBB245F05A214F0B1E35C00
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/74e6862f-f131-3e4c-964a-f7ebd647c95a.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     3738
IP address blocks:        192.250.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:24:5f:05:a2:14:f0:b1:e3:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=4eef2b9b-da4e-4ec0-939a-b88cc0f0ce1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:32:f0:9d:c0:eb:d1:74:22:1b:68:83:db:bf:
                    9b:d0:b9:80:30:78:86:39:6b:42:b3:6d:31:12:1d:
                    7f:1b:62:f3:ad:c2:21:b1:b9:72:1e:06:e0:2b:8e:
                    bf:56:45:fd:14:84:1d:8c:1e:a7:7a:78:ed:6c:0a:
                    72:fe:fb:a1:80:a6:24:f7:f1:50:9f:da:76:84:6e:
                    d5:22:1c:e7:62:33:d5:e8:47:03:90:fb:2d:94:35:
                    24:b1:f8:67:25:32:93:8f:2c:d2:d1:cd:bd:a4:33:
                    43:e6:03:38:1e:e5:bc:33:20:ef:a5:f3:a0:4b:50:
                    f2:d7:e3:3f:54:09:41:d5:9c:77:6a:8f:1f:29:be:
                    01:64:83:a1:fb:ce:0a:35:d0:86:c8:52:1a:13:40:
                    2b:4c:f7:a0:e7:a6:7f:76:e2:ce:6a:cd:0a:c2:51:
                    8b:60:a9:a7:ba:e3:83:5d:58:75:96:70:c5:d4:3f:
                    ce:55:30:51:e3:5a:33:2b:dd:b1:52:40:ce:60:f2:
                    df:20:13:9a:1c:a9:0e:ac:22:99:75:3d:b0:ad:99:
                    8b:c4:e0:80:0e:46:5d:72:a6:9a:79:75:35:af:a5:
                    dc:53:fb:5f:b5:bf:40:24:24:6e:a2:7c:2e:6e:59:
                    83:33:dc:2e:59:e7:6f:44:dc:c7:f6:13:d4:82:2a:
                    c4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5E:DC:B9:7D:C2:BC:11:56:96:AE:77:23:79:A7:22:89:B0:B7:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/74e6862f-f131-3e4c-964a-f7ebd647c95a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:cb:81:93:bc:b9:19:3c:fa:de:a3:22:cd:11:d3:6c:0d:4d:
         00:27:96:85:51:75:43:a1:61:42:ad:86:38:7a:ef:18:91:40:
         ab:32:52:55:a8:e3:75:64:43:ed:e1:51:94:ee:3b:80:5a:8c:
         1d:7d:92:42:89:08:c2:81:4f:66:2d:6c:83:3c:10:8b:5d:48:
         aa:c5:68:a0:b5:8b:9e:82:19:3b:27:e2:da:04:e7:44:95:53:
         d4:28:72:63:b3:a6:56:57:ad:4c:63:0a:fc:3b:9f:69:52:43:
         08:01:bb:3c:d4:75:b5:84:5f:f7:b0:27:aa:34:48:f5:46:45:
         2f:c3:29:33:fb:cc:f0:aa:cf:da:e3:71:49:92:a2:f6:df:ec:
         0e:da:ad:62:44:3c:26:6b:24:8a:91:77:5b:ec:6b:cf:3a:40:
         e4:68:64:e2:54:36:1e:3d:91:76:6d:8b:9c:5e:11:85:15:43:
         d7:af:a4:86:4e:d9:21:20:c3:d6:f5:ba:10:63:d4:f8:5f:94:
         79:c7:9e:eb:03:8e:b8:63:58:c8:02:8b:e0:f5:7e:5e:bc:cc:
         dc:bf:6c:71:13:06:f9:87:1a:42:ac:f3:93:c1:00:5b:97:3a:
         00:b8:21:47:38:43:c4:87:bd:5e:c8:3f:7c:49:1c:e5:99:6c:
         48:60:a9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:43:34 2026 by rpki-client