Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/831d13c8-9b54-481a-a121-9cef07bbce7a/b31772ad-9877-3ca4-a5e5-9bd3c18bb3b2.roa
File:                     b31772ad-9877-3ca4-a5e5-9bd3c18bb3b2.roa (raw, json)
Hash identifier:          8K/Y1LSw2kmBON0AdOUhPOWZUIlJjakQQ9Eoo4eRG1k=
Subject key identifier:   BE:28:8F:8D:D5:CE:CC:67:AA:D9:35:F4:41:C9:C3:9F:1C:0C:1C:20
Certificate issuer:       /CN=831d13c8-9b54-481a-a121-9cef07bbce7a
Certificate serial:       010D0C9F4328584EA44512A991AFE5DE6B32B400
Authority key identifier: A2:0D:7D:B1:28:A3:01:69:67:9C:F2:4E:2A:C7:57:3D:14:81:39:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/831d13c8-9b54-481a-a121-9cef07bbce7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/831d13c8-9b54-481a-a121-9cef07bbce7a/b31772ad-9877-3ca4-a5e5-9bd3c18bb3b2.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     53450
IP address blocks:        74.122.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/831d13c8-9b54-481a-a121-9cef07bbce7a/831d13c8-9b54-481a-a121-9cef07bbce7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/831d13c8-9b54-481a-a121-9cef07bbce7a/831d13c8-9b54-481a-a121-9cef07bbce7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/831d13c8-9b54-481a-a121-9cef07bbce7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:12:a9:91:af:e5:de:6b:32:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=831d13c8-9b54-481a-a121-9cef07bbce7a
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=980a148e-2751-4d31-9060-374e06ba3e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:83:a0:ef:41:fb:3d:38:ed:3d:b6:ec:7a:f8:
                    c0:55:12:21:0a:8d:1f:8b:ae:f7:74:f8:bf:f1:71:
                    93:e2:9f:d6:13:af:99:37:e2:df:c4:21:31:7a:bf:
                    37:6e:db:60:08:2d:f0:f4:ae:db:f6:39:4c:42:26:
                    2f:68:29:01:93:64:dd:81:af:fd:92:d5:8d:d6:79:
                    1d:db:11:24:39:a9:9a:8e:e9:96:c2:0e:af:c2:89:
                    92:f4:37:ab:2c:da:2f:85:9a:9e:e4:95:58:d7:99:
                    49:ea:d2:82:ba:84:db:d6:e3:ca:80:b3:3a:af:e6:
                    cd:35:e5:85:1b:05:0a:26:27:6d:fd:02:43:bd:e9:
                    88:c3:44:82:7e:03:3c:82:c9:09:44:b8:48:44:5b:
                    7e:03:2e:58:fc:f7:e2:50:11:6b:43:87:9b:92:f6:
                    fb:08:2e:c1:a7:c1:91:3d:52:a4:1b:cf:e7:a3:7d:
                    e2:c6:02:06:68:99:00:57:07:60:f0:ff:15:c5:2d:
                    e6:4d:43:9c:bd:63:ee:bc:6f:f5:0a:74:9b:81:17:
                    95:ca:7a:ed:2e:b3:55:22:ae:a0:c6:d3:cd:57:7f:
                    92:b5:e1:26:71:9a:fd:98:46:57:2c:29:e4:56:03:
                    1e:db:28:c9:34:64:0e:32:ee:99:20:fb:c7:df:22:
                    80:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:28:8F:8D:D5:CE:CC:67:AA:D9:35:F4:41:C9:C3:9F:1C:0C:1C:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/831d13c8-9b54-481a-a121-9cef07bbce7a/b31772ad-9877-3ca4-a5e5-9bd3c18bb3b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/831d13c8-9b54-481a-a121-9cef07bbce7a/831d13c8-9b54-481a-a121-9cef07bbce7a.crl

            X509v3 Authority Key Identifier:
                keyid:A2:0D:7D:B1:28:A3:01:69:67:9C:F2:4E:2A:C7:57:3D:14:81:39:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/831d13c8-9b54-481a-a121-9cef07bbce7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.122.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:7a:b3:a9:26:63:5c:fe:d3:14:bc:92:26:ac:ef:bb:60:0c:
         1d:55:ca:04:39:e9:fb:e5:bc:f0:97:37:52:9d:88:eb:31:79:
         4c:41:d6:f1:83:27:f9:17:49:26:de:0d:ea:70:22:dd:c6:a3:
         c7:34:5a:af:c5:1e:45:6e:97:b3:b9:92:05:43:ff:f9:32:97:
         e4:06:cf:2c:15:50:6c:62:73:27:f3:ad:ea:db:21:87:46:0d:
         a4:35:51:c8:7b:9b:f3:e8:dd:39:8c:8a:b2:90:1f:91:02:57:
         df:d6:e0:e8:ae:06:6b:75:d2:bc:17:81:1c:7f:8d:b0:62:61:
         5d:b9:8d:23:8c:52:1f:b1:81:01:ce:16:d0:7a:03:cc:27:0b:
         4c:09:0f:2e:9c:3c:cb:5d:b6:df:cf:46:de:4f:81:f7:11:b7:
         4c:c1:40:ea:f5:87:b0:60:fc:0e:89:0a:15:71:58:c9:a2:1c:
         35:c2:99:95:e6:2b:82:19:e0:ee:2e:8c:4c:55:3e:fb:e6:f2:
         d6:53:d9:ce:80:02:7a:ea:00:ba:79:56:d3:ab:0f:44:99:dc:
         dd:04:e4:47:c1:3a:51:da:8b:ec:96:7b:57:f8:d8:24:5c:65:
         e7:ad:02:5b:f0:5b:c4:58:01:2a:bf:22:57:64:76:81:4f:12:
         dd:97:11:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:48 2026 by rpki-client