Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0c709b23-845b-375c-8297-3feb71e55c59.roa
File:                     0c709b23-845b-375c-8297-3feb71e55c59.roa (raw, json)
Hash identifier:          fSrFhYGjKZTgGmAMDY46xYlPJzwI3oL1VJ/DdIiVGIw=
Subject key identifier:   6B:21:9A:3E:3A:BE:40:5B:38:B1:D0:A1:B4:7A:8E:10:70:33:88:AE
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D789FD01DDE6150E46BD70200
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0c709b23-845b-375c-8297-3feb71e55c59.roa
Signing time:             Sat 11 Apr 2026 13:00:31 +0000
ROA not before:           Sat 11 Apr 2026 13:00:31 +0000
ROA not after:            Fri 10 Jul 2026 13:00:31 +0000
asID:                     137830
IP address blocks:        74.2.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:78:9f:d0:1d:de:61:50:e4:6b:d7:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 11 13:00:31 2026 GMT
            Not After : Jul 10 13:00:31 2026 GMT
        Subject: CN=12d1f6a9-0ecd-4013-8ba8-7eaccd243013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c5:88:fb:7a:e6:5b:97:5d:99:62:ea:93:9e:
                    aa:1d:b7:32:80:7b:d7:ad:a9:c5:23:ed:08:12:bd:
                    b5:9f:41:46:68:84:8d:2c:4b:02:e3:3a:bf:ca:46:
                    6a:cd:ab:9f:6e:53:94:0c:7c:d5:43:b2:97:d2:ef:
                    44:89:cd:07:ed:12:b4:25:fa:db:73:7e:99:0d:30:
                    41:e0:8a:56:40:9f:01:84:a9:0c:e3:41:6a:89:58:
                    47:0a:b0:15:b3:ed:04:15:d8:ea:b4:b0:31:33:e5:
                    9a:f3:e2:45:1c:bc:fe:6f:1b:c5:76:36:15:6a:a9:
                    a6:32:84:e2:10:c4:c0:ce:a6:8c:3f:51:ab:e6:fb:
                    7d:cb:21:a7:e6:1f:e8:43:7d:bc:68:cf:59:f7:63:
                    22:e8:80:f5:cb:78:a3:62:f8:8d:f8:40:50:ab:b5:
                    18:20:4d:bc:00:5f:cc:39:73:94:8b:fb:12:ca:14:
                    63:b4:e8:dc:ae:5c:a9:59:e8:8c:81:53:67:b6:cc:
                    ae:ee:c0:08:63:83:91:68:48:40:31:0a:c8:11:74:
                    07:71:4d:8e:1c:1b:57:3c:f1:f8:de:9a:51:7a:9d:
                    8f:9c:a8:2a:f4:c3:eb:bf:68:55:8f:cf:7e:64:f4:
                    df:c9:7d:02:3f:3c:c0:9a:82:bd:08:49:0e:a3:80:
                    6c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:21:9A:3E:3A:BE:40:5B:38:B1:D0:A1:B4:7A:8E:10:70:33:88:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0c709b23-845b-375c-8297-3feb71e55c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.2.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:47:18:ee:72:40:90:9f:6a:36:96:fc:36:47:18:93:d0:7c:
         cb:51:99:4a:cc:9b:c5:cc:ff:7c:0d:90:19:29:cb:b8:db:37:
         42:91:35:95:a7:fa:91:b7:49:a4:35:f1:86:13:41:a9:83:1f:
         00:6a:a5:7c:ff:53:a6:07:60:da:5b:bd:e9:57:d1:c1:47:05:
         1f:69:c9:8e:c2:b5:1c:c6:e7:a5:9a:ac:90:d6:83:8e:22:c2:
         d9:17:86:35:1b:bc:1a:77:20:b9:8f:6e:44:86:8c:ef:75:22:
         44:58:39:58:06:27:ed:b2:fd:2e:0a:0f:bb:5c:d7:18:2d:b4:
         9f:42:61:10:29:77:4a:8b:52:06:1a:21:84:49:9d:f7:96:93:
         8f:94:af:cc:44:0a:83:23:41:ff:28:8c:c1:cc:6d:01:fc:70:
         6a:39:02:c7:65:49:5e:6b:85:ab:ed:da:87:f5:2d:45:75:5b:
         e2:53:e2:47:1b:43:d4:74:7d:0b:65:54:6c:ee:41:cd:f3:b5:
         83:ea:c8:5a:a2:fb:8b:12:0b:5c:19:d3:d6:b4:dd:25:8b:94:
         93:e6:16:1f:fb:b0:2f:f7:8a:a0:d5:ad:43:23:7f:d0:aa:d3:
         8a:0e:87:78:eb:0a:39:cc:90:82:a5:19:19:c4:e3:49:a1:80:
         a2:18:24:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE14n9Ad3mFQ5GvXAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDQxMTEzMDAzMVoXDTI2MDcxMDEzMDAzMVowLzEtMCsGA1UEAxMk
MTJkMWY2YTktMGVjZC00MDEzLThiYTgtN2VhY2NkMjQzMDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMWI+3rmW5ddmWLqk56qHbcygHvXranFI+0I
Er21n0FGaISNLEsC4zq/ykZqzaufblOUDHzVQ7KX0u9Eic0H7RK0Jfrbc36ZDTBB
4IpWQJ8BhKkM40FqiVhHCrAVs+0EFdjqtLAxM+Wa8+JFHLz+bxvFdjYVaqmmMoTi
EMTAzqaMP1Gr5vt9yyGn5h/oQ328aM9Z92Mi6ID1y3ijYviN+EBQq7UYIE28AF/M
OXOUi/sSyhRjtOjcrlypWeiMgVNntsyu7sAIY4ORaEhAMQrIEXQHcU2OHBtXPPH4
3ppRep2PnKgq9MPrv2hVj89+ZPTfyX0CPzzAmoK9CEkOo4BsDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGshmj46vkBbOLHQobR6jhBwM4iuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGM3MDliMjMtODQ1Yi0z
NzVjLTgyOTctM2ZlYjcxZTU1YzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSgIgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALVHGO5yQJCfajaW/DZHGJPQfMtRmUrMm8XM/3wNkBkpy7jbN0KRNZWn
+pG3SaQ18YYTQamDHwBqpXz/U6YHYNpbvelX0cFHBR9pyY7CtRzG56WarJDWg44i
wtkXhjUbvBp3ILmPbkSGjO91IkRYOVgGJ+2y/S4KD7tc1xgttJ9CYRApd0qLUgYa
IYRJnfeWk4+Ur8xECoMjQf8ojMHMbQH8cGo5AsdlSV5rhavt2of1LUV1W+JT4kcb
Q9R0fQtlVGzuQc3ztYPqyFqi+4sSC1wZ09a03SWLlJPmFh/7sC/3iqDVrUMjf9Cq
04oOh3jrCjnMkIKlGRnE40mhgKIYJOA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:03:26 2026 by rpki-client