Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/35e140ec-66eb-33f2-8e01-d0fc6ce40187.roa
File:                     35e140ec-66eb-33f2-8e01-d0fc6ce40187.roa (raw, json)
Hash identifier:          cCsc5CBksJxUdwum9cDHmHShMSG4Ch8t0r1Z0uyRp2U=
Subject key identifier:   3D:F2:E7:8B:09:C0:AF:A8:04:2C:BE:A1:31:9E:B7:77:44:1B:23:D4
Certificate issuer:       /CN=d184e471-080a-4e54-bf94-60dd0c8beb48
Certificate serial:       010D0C9F4328584DE41B2432B4CF12015E44DB80
Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/35e140ec-66eb-33f2-8e01-d0fc6ce40187.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     22926
IP address blocks:        74.118.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:24:32:b4:cf:12:01:5e:44:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=385542da-1bc2-4a7a-9df2-497922a8317d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:de:9b:4f:48:bc:cc:b1:0e:8a:18:1e:5a:29:
                    67:34:a3:67:46:95:22:2c:2c:dd:d0:96:e9:66:0c:
                    e5:5f:f9:dd:c0:02:f5:cb:13:04:65:44:14:c0:86:
                    75:cb:9c:da:f5:a0:ff:1d:a5:11:27:8a:5e:dc:68:
                    27:8d:03:38:f0:de:82:39:58:3a:9a:e2:48:a8:59:
                    98:2d:77:41:d0:be:3c:02:45:57:29:f9:82:cb:56:
                    4f:54:17:34:8a:30:53:62:fe:11:e9:06:1c:9f:44:
                    de:0c:a5:f8:39:fe:f6:8b:84:f1:ca:ac:97:92:bc:
                    b9:f2:f2:f3:eb:f7:00:54:6f:05:21:ca:6d:a4:dc:
                    22:8f:4d:32:8d:e2:af:a5:57:59:e9:1b:3d:f4:9d:
                    93:85:38:cb:23:1b:96:ef:2a:41:bb:8d:60:31:66:
                    47:e5:17:cd:61:02:94:89:d1:d8:24:32:0a:34:6b:
                    82:04:75:9a:06:79:61:6a:fd:6e:a1:21:ea:46:76:
                    b6:23:8e:29:d5:7e:b5:ee:73:11:32:fa:40:29:96:
                    ab:01:3f:af:27:57:6f:01:fb:9b:ef:6c:74:69:9a:
                    58:94:20:ac:ec:47:ab:45:48:67:fe:81:0e:d4:28:
                    f4:5a:1c:7c:c6:19:53:ea:04:e7:db:75:e3:30:37:
                    10:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F2:E7:8B:09:C0:AF:A8:04:2C:BE:A1:31:9E:B7:77:44:1B:23:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/35e140ec-66eb-33f2-8e01-d0fc6ce40187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl

            X509v3 Authority Key Identifier:
                keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e1:53:1a:bd:a6:43:31:ca:9c:83:b0:2c:79:e0:d7:e9:3f:
         e1:98:75:d8:d7:4a:37:92:73:65:8f:69:d7:12:40:91:90:3a:
         43:5d:ca:e5:78:a7:0b:c8:19:dc:bd:c7:35:df:6d:bc:2c:c0:
         0a:89:48:75:a7:31:c8:c2:64:7c:53:b3:a9:e9:53:cb:97:73:
         e7:fb:fc:82:73:dc:fe:f6:c0:00:ef:0f:21:fe:30:bd:7c:73:
         02:5b:61:11:0c:b1:b5:7c:07:f0:5e:84:83:6e:ad:09:31:14:
         5a:6a:1c:1c:4a:0a:2c:01:04:d5:84:72:53:5d:7e:c7:65:7b:
         e8:88:f7:2c:b1:20:c4:a7:a3:56:ab:66:7c:b6:a7:da:b9:b5:
         e6:19:d2:6c:17:5d:40:bb:da:7f:2d:31:21:26:2d:88:67:8c:
         0f:b5:eb:36:1b:74:64:8d:ed:ca:53:e1:26:40:da:c1:d5:65:
         b0:7e:2b:9a:06:7e:06:9f:86:97:57:0e:ef:d3:a5:84:14:80:
         cb:19:a1:30:7e:a9:ab:95:77:a6:cd:13:07:88:50:97:eb:a1:
         e1:a1:50:c4:69:6b:bb:ce:0c:68:32:39:bc:f4:a8:c0:cb:99:
         40:37:98:4c:82:ac:18:ea:49:a2:24:98:b5:48:e5:b7:a4:41:
         05:6e:82:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:43:22 2026 by rpki-client